Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/25cba636-5645-3710-b75a-af18488c2663.roa
File:                     25cba636-5645-3710-b75a-af18488c2663.roa (raw, json)
Hash identifier:          dtDR8ISQp8EYey6gsoTLPkkND7r7R9S6Stxx28QGBcY=
Subject key identifier:   69:77:DB:08:28:BD:DC:48:72:2D:1E:1E:D3:39:4F:0B:35:8A:D7:DC
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584E885A3BC243506371B2FBFD00
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/25cba636-5645-3710-b75a-af18488c2663.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     23154
IP address blocks:        143.116.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3b:c2:43:50:63:71:b2:fb:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=28679929-e34c-413a-8f89-aab408b2c68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:68:26:0e:32:30:45:14:32:45:49:6e:b4:
                    52:1d:1c:45:b7:99:53:ec:e5:cd:b9:f6:08:e6:2e:
                    9f:ab:ea:ba:06:ab:56:08:1f:d8:c6:13:2e:76:2a:
                    be:d4:ab:48:a3:59:c3:e1:80:bb:04:dd:2f:bd:f4:
                    69:aa:0e:60:3a:73:a9:b3:2f:c4:48:67:cc:12:3f:
                    11:ad:eb:cc:a9:b3:b2:de:ab:18:39:d6:3a:51:7f:
                    3e:d0:08:a9:8a:c3:bf:3d:ce:a3:98:e5:93:ec:92:
                    79:20:15:f3:fb:9a:5f:43:cc:11:f0:9b:78:e1:ae:
                    78:f9:f4:15:f8:ed:a1:2f:2b:00:4b:b4:60:6a:47:
                    c3:5c:36:6e:11:2f:1b:0b:02:31:e5:ae:ed:17:ae:
                    75:97:2c:9e:95:1f:d3:b9:58:83:e6:8e:15:4f:df:
                    7a:b9:32:ce:ce:35:fa:5f:78:ef:6d:11:50:19:c1:
                    2a:8d:42:88:77:68:f9:99:3b:aa:53:2c:eb:ee:9a:
                    d1:94:36:48:49:74:81:a7:a9:2e:d3:94:d8:9a:d3:
                    6b:0a:42:6b:af:d4:10:9f:68:75:df:46:fd:0a:b9:
                    7f:2f:2c:f0:db:c2:7e:31:6e:f6:7a:88:79:6f:35:
                    ef:ae:d9:6e:18:3b:a5:a4:a8:a0:40:23:58:a7:0b:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:77:DB:08:28:BD:DC:48:72:2D:1E:1E:D3:39:4F:0B:35:8A:D7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/25cba636-5645-3710-b75a-af18488c2663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:bb:f8:c7:f9:fb:a7:53:ea:b6:77:bf:1e:7a:10:79:f6:af:
         4b:0a:ab:f9:4a:49:e6:35:97:38:16:6c:6f:4b:3d:af:b5:13:
         86:ef:c5:f1:ef:40:92:60:b0:df:9c:6d:92:fd:76:0e:85:4d:
         3e:7a:86:1a:f7:71:37:d4:4c:4a:2a:85:28:d0:29:9b:26:36:
         26:2e:b7:6a:6f:17:b5:af:75:cb:58:28:93:4a:3e:c6:f9:53:
         9f:6a:fb:26:f9:98:82:43:cc:29:05:ee:04:7d:5b:69:69:4b:
         f7:26:76:ba:23:96:93:48:eb:66:c4:ab:f1:14:1d:6e:b7:2e:
         bd:ed:17:43:84:83:10:12:48:f9:95:b0:d0:e4:ae:11:4c:13:
         b2:55:94:b5:f9:91:f6:bf:a6:b0:cc:62:72:7b:c5:6c:ed:27:
         47:9e:c2:06:ab:ff:27:3b:19:94:dd:2e:19:a7:fd:36:d9:53:
         0b:a0:10:8c:7f:5c:35:8a:9e:41:2c:f8:58:7e:15:e9:ee:22:
         77:33:cc:52:1f:94:9e:a1:3c:9f:52:e3:f7:db:e6:d0:d7:81:
         f3:88:8a:bd:64:07:d6:ed:4d:3c:a6:98:98:85:4b:92:f4:26:
         88:60:4a:57:dc:e6:23:d8:25:1c:79:1c:74:70:ae:76:a9:a5:
         d1:1b:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:26:51 2026 by rpki-client