Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa
File:                     a1b1d79c-ab46-35ce-8c97-2053ed447262.roa (raw, json)
Hash identifier:          643OcnDuDzxJn+cTy1fNc+qwj6oFmNSNi2STKWBE/7M=
Subject key identifier:   7E:F7:8C:41:F6:E3:A3:D2:8D:2B:3A:89:61:C0:AC:F1:97:15:2F:70
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584AF52146D928D94939B8298900
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     36511
IP address blocks:        192.149.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:46:d9:28:d9:49:39:b8:29:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=6a891443-77c7-4842-8707-7e7f1074f12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:98:80:59:ec:de:64:c6:7f:c5:89:d8:5f:
                    8d:19:2f:4a:04:5d:73:3f:fe:8e:d4:74:7e:33:2d:
                    b4:92:b6:db:93:c9:f2:76:17:49:8c:b9:53:fb:92:
                    76:d4:cf:33:26:aa:98:d1:58:1f:6a:db:06:08:f1:
                    f3:b6:4a:da:6e:43:21:5b:37:e8:1e:79:34:54:2d:
                    64:d8:1e:56:6c:ac:8c:c4:8a:40:24:cb:28:c5:18:
                    97:be:96:46:c3:5a:12:b3:70:f7:33:c6:21:b8:b1:
                    90:0e:94:12:2b:f8:76:68:95:22:2e:1d:0c:78:7c:
                    79:66:9b:40:c5:43:0b:2f:d5:d4:37:19:96:81:42:
                    43:35:ca:06:5e:c6:d4:22:f2:66:d7:f5:e6:cc:fb:
                    b0:82:97:8f:c8:e0:a2:bf:72:b7:cd:ae:26:9c:1c:
                    67:a2:25:3b:25:58:61:0d:e5:c7:02:f0:16:a5:a9:
                    57:f6:41:6f:68:00:2a:1a:7c:03:41:a0:99:44:c9:
                    e0:e8:27:c6:0c:a8:03:1e:5d:6a:c2:49:f5:b8:00:
                    ac:fd:ec:e9:2f:1f:39:d4:db:8a:3b:e3:02:85:af:
                    8b:7e:ed:38:00:c1:83:73:3c:b1:1f:51:d3:9f:e3:
                    65:6a:60:de:48:e8:8d:83:d3:2a:d6:34:68:8c:79:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F7:8C:41:F6:E3:A3:D2:8D:2B:3A:89:61:C0:AC:F1:97:15:2F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:9e:aa:04:ad:9d:6d:66:1c:ca:19:5f:9a:0e:8e:cc:39:
         74:0c:4f:93:a5:2d:84:6e:43:2a:65:26:ca:44:59:36:44:52:
         16:99:6a:42:e4:e1:9d:8b:29:49:18:a7:de:a6:68:67:87:89:
         ce:7f:05:fa:50:c1:a0:1f:f1:63:8e:92:6b:bf:33:92:2d:61:
         e4:6a:b1:ba:d9:84:f7:cb:ad:d1:c5:c6:36:88:99:ef:0e:90:
         59:03:de:a7:b4:b5:a1:fd:2f:af:07:e6:bc:72:d8:53:9c:14:
         9f:12:cf:7f:60:34:d0:e4:9a:36:75:28:26:d5:7b:6c:be:3e:
         b3:5a:8d:c8:53:aa:6c:a1:17:b6:65:27:60:41:9c:03:8f:d2:
         dd:c0:e8:db:ba:6d:80:ca:0f:d4:db:ca:70:16:d9:d5:ec:7a:
         c8:52:1e:08:81:03:43:bd:dc:d9:06:ae:fc:76:e4:1b:5b:9b:
         01:20:40:9a:5d:eb:c6:8a:ef:16:39:34:5d:15:1d:b9:06:f3:
         1d:66:ef:1f:be:72:11:c2:a6:99:f4:0b:1a:61:97:b1:df:18:
         b5:82:89:45:7d:2b:e0:6a:4c:c4:32:56:57:f9:20:5a:db:f8:
         26:db:75:6b:31:5d:c6:59:5c:f6:5e:a5:c8:5d:45:a1:b0:5a:
         4f:97:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:55 2025 by rpki-client