Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/014dbfb4-cdda-340d-8121-abe6a96092f5.roa
File:                     014dbfb4-cdda-340d-8121-abe6a96092f5.roa (raw, json)
Hash identifier:          cgCyi0vIAx2WkRCxSR6h1fIdBNXBq3Pv1xfivLmu4wk=
Subject key identifier:   8E:3E:69:3F:D4:C1:69:1B:C1:70:49:75:2A:CC:CC:52:A2:70:53:C0
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584F27F25164044C7C977595F600
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/014dbfb4-cdda-340d-8121-abe6a96092f5.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     10279
IP address blocks:        152.44.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:51:64:04:4c:7c:97:75:95:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=0b750523-cdf7-49e3-bf47-6815b174f35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:83:6a:b1:c0:32:65:f2:77:f5:4a:95:27:
                    71:65:0d:c4:8b:01:a4:f7:e5:69:13:3b:7f:2b:d3:
                    08:1d:55:ec:ff:1a:6c:b9:9c:23:66:91:44:6f:3d:
                    cf:f3:36:1e:f1:5a:ea:40:58:56:7c:7e:23:ac:e7:
                    af:05:c8:54:49:1a:c3:2b:41:16:92:04:72:6e:be:
                    18:11:16:a7:e4:61:5a:1c:30:7a:89:08:cf:68:56:
                    c3:7a:9b:50:ca:5c:34:86:cf:e0:a4:72:24:fa:a5:
                    47:61:ce:86:2b:4a:12:e0:f1:3b:1e:dd:a4:6f:4c:
                    a5:bf:eb:fc:1f:4c:2b:5f:7b:bc:83:4e:14:8b:3b:
                    d4:3a:4a:11:da:7b:47:8d:7f:48:3c:6e:fe:38:19:
                    c2:c0:c9:dc:c9:31:ae:1c:cf:73:4f:5c:e8:ed:e7:
                    cf:26:ac:d5:cb:53:c3:90:df:33:be:14:e8:65:4a:
                    f9:fc:bd:ce:71:30:2e:a7:bd:89:48:f9:f7:9b:43:
                    af:f3:51:d5:72:59:bb:b5:5e:92:29:58:b2:73:36:
                    d0:38:57:97:5d:af:3a:48:20:cb:b9:c6:e1:0e:d5:
                    51:ea:63:77:7e:2a:f9:60:05:76:15:3b:4a:f1:8c:
                    43:37:dd:1f:13:28:31:79:81:7f:80:b0:6e:a7:2f:
                    d5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:69:3F:D4:C1:69:1B:C1:70:49:75:2A:CC:CC:52:A2:70:53:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/014dbfb4-cdda-340d-8121-abe6a96092f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:5d:58:c6:bf:84:1b:fe:3b:9a:be:65:1e:3c:7a:f6:56:
         42:b6:db:71:06:30:93:87:b0:32:32:e1:14:9e:6e:f0:99:56:
         f1:93:0c:47:59:b1:af:de:8d:8e:76:2d:08:63:8c:01:ae:0e:
         46:7b:62:e1:e8:e4:57:e7:d6:ca:9e:e3:14:72:11:7e:1e:af:
         a7:02:67:78:1f:33:99:0f:1e:94:72:14:57:25:86:c4:1a:fc:
         c8:80:f4:df:c5:a3:f0:30:8c:b3:b0:2e:8e:05:1a:1f:87:5a:
         02:78:d7:31:26:5b:b6:7a:3a:75:8f:e9:af:f1:82:63:b2:9d:
         4d:fd:e6:20:77:91:c5:0c:c4:c4:6b:2b:c9:d2:f0:1b:2c:76:
         20:00:91:30:f2:6a:af:8d:2f:fc:e6:be:3b:10:ac:e4:35:30:
         ec:f4:5e:a2:7c:78:8b:18:ca:60:43:9d:3f:e4:92:7a:27:08:
         a0:dc:37:97:fb:b0:08:62:f6:d5:59:27:3f:79:d1:29:28:4f:
         2f:ba:79:e4:c7:d6:21:8a:91:54:56:34:80:fc:2a:d4:ad:84:
         b4:ce:bf:61:03:2d:39:9c:49:c2:57:f2:2a:10:74:e3:7e:dc:
         87:4c:f8:00:2f:24:90:2f:84:8a:7c:45:c0:b6:94:9c:a1:41:
         b9:fd:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:04:54 2026 by rpki-client