Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/db6292d2-967c-3934-8722-24af048e63ff.roa
File:                     db6292d2-967c-3934-8722-24af048e63ff.roa (raw, json)
Hash identifier:          mfw7729xa0vDSIvGYgulZRru8GhUPoL+EdIK0e8QtHY=
Subject key identifier:   ED:B8:2E:E3:FB:05:3E:93:4C:EE:2F:02:D5:BE:D9:61:69:CB:66:50
Certificate issuer:       /CN=21846a97-ea37-4a3f-89db-5c537c294e8e
Certificate serial:       010D0C9F4328584A3E45B075C4E9C3E7F7FC6940
Authority key identifier: F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/db6292d2-967c-3934-8722-24af048e63ff.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     400678
IP address blocks:        192.149.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b0:75:c4:e9:c3:e7:f7:fc:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846a97-ea37-4a3f-89db-5c537c294e8e
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=f3c70f04-eee7-42ad-a668-384f4c5cb332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:f3:48:42:00:db:a0:e3:a3:98:8b:45:49:
                    6e:c1:e7:7c:6f:eb:fc:35:0a:bf:a0:19:f2:3c:2c:
                    86:5d:91:a0:f8:72:c2:82:fb:40:66:dc:19:82:cd:
                    bf:c3:ea:6e:41:36:29:be:89:75:b7:fb:69:0e:cd:
                    6a:dc:31:2b:ca:80:fd:6d:2f:f6:fe:56:7d:c5:b9:
                    89:4e:21:e5:16:bb:eb:c5:91:0f:97:ae:0b:c8:df:
                    11:55:9d:d6:83:11:7c:12:f5:eb:e2:b3:2b:bc:02:
                    a2:a1:16:6c:c7:33:78:4f:12:eb:9e:bf:d5:13:84:
                    f7:eb:36:88:d7:e9:63:4d:28:e2:e0:12:79:3d:37:
                    b5:d3:77:bc:48:4e:f3:34:63:78:4e:1f:18:c8:11:
                    34:11:b9:8c:58:ad:2e:8c:7e:5a:4e:f3:38:f8:02:
                    7f:64:3b:ba:30:9a:43:88:e7:b6:d7:db:e5:d1:d6:
                    ff:58:a5:8d:db:1f:6e:65:3d:0b:a6:5f:5c:ca:4c:
                    6f:75:70:49:83:d9:5e:4a:d1:ce:04:68:dd:8a:a1:
                    17:8a:a1:88:e6:86:93:86:5e:2c:6c:a7:e2:f7:d7:
                    2a:88:57:6a:ec:5d:b9:af:a4:a8:cb:77:a9:9d:75:
                    62:8f:75:12:f8:aa:e3:6e:76:b6:8f:1e:f0:79:76:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:2E:E3:FB:05:3E:93:4C:EE:2F:02:D5:BE:D9:61:69:CB:66:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/db6292d2-967c-3934-8722-24af048e63ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl

            X509v3 Authority Key Identifier:
                keyid:F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ef:02:3d:dc:7a:b4:92:f0:12:91:9d:92:0b:d0:6c:8d:9f:
         0d:dc:8e:f5:68:23:28:fd:6c:3d:0e:04:8c:f8:35:53:9d:74:
         c4:8f:e3:a5:e9:b5:e8:93:43:16:ec:3f:d5:74:bd:b0:3f:89:
         eb:20:c2:8a:c5:4c:d7:34:5c:15:ca:bc:21:cc:27:07:2e:49:
         d0:c0:5f:88:b1:9b:bf:79:4e:5b:1b:14:8b:d1:e9:b3:34:39:
         10:23:6b:3f:20:1a:b9:c8:a3:ea:ab:95:f5:b2:26:81:27:c2:
         3f:26:ea:4b:f9:e7:fa:33:a4:41:65:4b:f7:d4:04:91:06:a8:
         ca:a4:5a:35:9a:cd:8f:61:7c:87:3c:95:05:ed:05:c4:e3:a9:
         9a:10:bb:69:37:34:48:65:03:81:8a:dd:f2:ce:47:96:fe:bb:
         01:75:4d:ba:4a:df:57:32:1c:c6:11:7f:c4:6a:f4:84:61:94:
         54:0d:af:49:9b:b7:57:a0:6d:a2:ad:e5:e9:7d:f8:dc:e1:71:
         c7:e3:80:8a:29:17:3b:ea:42:ea:61:67:2f:77:51:c0:4a:bf:
         96:1f:60:30:cf:6f:7d:7b:4d:6a:2c:78:25:b1:6b:4c:c2:fa:
         ed:33:a1:c3:0a:11:17:51:bd:89:f6:ba:4c:c9:28:4f:fd:d1:
         1c:bf:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:30:14 2025 by rpki-client