Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa
File:                     f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa (raw, json)
Hash identifier:          CdMtSa7Kq2GPsiwBi1Zr9wLfXxG+XTS9UA/8xxEklXA=
Subject key identifier:   E4:C4:70:72:9D:8C:FB:11:B1:93:F6:97:C1:44:30:36:8D:12:4A:D6
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584A1F90225EA98E41DEA6193F80
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     33442
IP address blocks:        149.23.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:22:5e:a9:8e:41:de:a6:19:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=3f252f18-558d-456c-a947-6557f63f331f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4f:39:70:85:8a:e5:44:01:03:50:bf:a2:19:
                    88:4a:4f:cb:de:d8:93:5b:ce:5f:53:4a:39:cc:b0:
                    83:29:d3:6e:1a:b9:ec:5a:03:9e:4e:32:50:db:eb:
                    fd:6e:d7:5c:10:48:a9:62:89:2e:08:b1:16:62:01:
                    2a:bb:f4:be:97:b7:a9:97:3b:ad:dc:ae:f7:b9:14:
                    9b:94:47:7e:57:49:0c:4f:95:f2:74:58:8d:33:59:
                    2c:68:2a:6c:4a:65:1f:68:fd:9c:ed:95:29:52:f3:
                    88:5d:cd:1b:de:59:19:fc:06:c7:a8:a7:c4:55:83:
                    c4:b4:07:4c:07:57:43:bb:3c:48:ac:27:42:34:c2:
                    81:8b:5e:0d:80:1d:84:6f:a2:10:18:df:c9:98:b2:
                    18:94:c2:aa:66:7b:03:fc:08:46:3e:9c:aa:b3:da:
                    2e:f9:e6:04:f3:80:a8:57:f5:54:a5:3a:2e:6f:cb:
                    5f:42:a9:a6:cd:a0:ad:e6:e4:e3:66:fc:38:ce:44:
                    b5:61:8e:9a:4d:d8:07:e3:3c:71:a5:7b:42:8e:56:
                    21:4b:c8:6a:0f:e1:c6:01:39:97:e8:b3:eb:c4:97:
                    39:95:3b:39:03:92:96:b3:0c:53:4c:3c:a0:73:0a:
                    3e:e2:fb:71:eb:53:33:94:68:12:ca:fa:8b:b8:08:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:70:72:9D:8C:FB:11:B1:93:F6:97:C1:44:30:36:8D:12:4A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:d1:9f:e5:0a:7a:ac:ab:72:ce:27:80:ee:cc:c6:21:d1:
         1f:6f:56:ef:fb:64:5a:12:73:ee:8e:9b:d9:d3:3f:67:7d:c2:
         4a:02:48:84:12:b4:0d:44:4a:a7:90:22:98:91:b4:92:03:9f:
         96:ce:1a:7b:4f:a0:f9:82:26:70:c9:5b:28:4f:53:a7:1f:ee:
         69:84:30:ab:84:a6:e9:ed:ec:2f:f8:00:96:2f:dc:42:9c:63:
         83:4b:6f:3d:29:13:41:30:e0:4c:24:8f:e4:9a:68:40:ab:b3:
         10:31:df:cd:b3:43:a9:9f:de:ef:18:e1:ea:cb:e5:95:49:2b:
         07:ba:b1:29:91:60:53:68:90:25:ad:cd:3e:be:0a:3e:d6:0e:
         a7:82:3e:7a:4c:05:5d:03:21:49:ce:16:3a:ef:ef:46:d2:21:
         be:c2:1a:2b:95:0e:66:5d:6a:4f:2c:84:10:4b:76:7f:ff:42:
         d0:e3:15:a8:a0:17:c3:07:d6:79:19:b6:1e:fd:23:9f:83:12:
         3f:aa:55:de:43:86:26:97:d9:22:bf:73:bf:78:eb:af:2d:c6:
         c5:ff:7d:7f:92:96:7b:46:91:b5:cb:70:de:06:be:b3:ad:d7:
         e6:54:ed:49:e5:07:e9:50:d4:fd:b5:f5:c2:3c:cd:77:65:f8:
         a5:a1:7a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:59:08 2025 by rpki-client