Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/25afd3e8-f197-3114-bba2-1972cfba234b.roa
File:                     25afd3e8-f197-3114-bba2-1972cfba234b.roa (raw, json)
Hash identifier:          q0jzUpOIa4qQp9KISOF/Vbr3wieQo5odTOvvaJvmtnU=
Subject key identifier:   58:9A:85:C9:AA:22:96:12:44:27:AE:DC:3F:8B:E3:7A:CF:B9:BC:FF
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F8C72F66F01F8A9BDBA437000
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/25afd3e8-f197-3114-bba2-1972cfba234b.roa
Signing time:             Mon 19 Oct 2026 01:00:12 +0000
ROA not before:           Mon 19 Oct 2026 01:00:12 +0000
ROA not after:            Sun 17 Jan 2027 02:00:12 +0000
asID:                     16509
IP address blocks:        199.212.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8c:72:f6:6f:01:f8:a9:bd:ba:43:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Oct 19 01:00:12 2026 GMT
            Not After : Jan 17 02:00:12 2027 GMT
        Subject: CN=96825533-da63-4945-869c-1fcbe9532bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:7b:b6:02:87:98:80:77:23:a7:8d:6a:91:
                    03:58:c1:5f:52:3c:77:5e:a5:86:a6:6f:68:75:72:
                    3c:aa:38:2e:e0:75:d5:24:ac:cf:ed:a3:ac:c2:62:
                    64:72:db:20:62:0b:7f:03:54:17:ff:c8:01:6a:93:
                    f8:01:6d:43:fb:92:e2:70:ae:c8:ab:ef:c2:35:4f:
                    d5:a4:52:f4:bd:f0:e5:6c:34:3e:07:e8:c7:2b:ee:
                    c2:2f:ad:78:af:a4:4c:64:a7:0f:ee:dc:12:0b:b6:
                    47:92:4a:ea:ff:db:49:df:19:b0:b8:35:05:fc:3f:
                    c4:8e:f1:51:fb:00:c4:d2:fa:69:e4:e1:ee:9f:68:
                    62:bd:37:51:9f:d8:d4:e9:10:e9:10:f6:c3:86:e1:
                    9f:f3:63:9a:b7:8b:83:30:c8:5a:e1:0c:b8:7c:67:
                    fc:53:cb:67:4d:bf:3a:93:41:7d:61:19:7f:e1:95:
                    37:50:03:5e:f8:4b:aa:ac:cd:76:fb:ac:ad:22:f1:
                    9e:fc:77:4a:28:80:38:99:7a:04:59:a0:2d:06:3d:
                    75:ab:bd:14:17:ea:49:5c:eb:6a:99:96:b4:1b:b7:
                    05:12:d3:30:f3:4f:bd:c7:0a:2f:0c:d4:0c:b5:fd:
                    d2:33:ea:9b:a7:62:a1:66:58:fa:08:64:cd:ec:42:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:85:C9:AA:22:96:12:44:27:AE:DC:3F:8B:E3:7A:CF:B9:BC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/25afd3e8-f197-3114-bba2-1972cfba234b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:d0:0c:09:ab:69:8a:69:fd:c1:42:5a:18:a8:e9:94:92:
         e0:c0:93:c1:ae:b4:cc:6c:a0:17:94:6c:50:d3:96:5f:9c:9a:
         c3:83:a2:44:a9:ff:0b:40:c0:7e:4f:d3:60:59:3d:60:8a:49:
         95:54:05:ba:46:36:c3:05:cb:2d:fb:52:05:11:7f:76:9a:7a:
         19:fa:e7:bd:29:6e:a6:36:05:6e:fb:15:a4:85:00:2f:98:14:
         b4:dc:4d:56:c5:e8:6a:9d:4c:9f:6d:35:d2:cc:0d:49:28:c0:
         40:dd:4e:4c:25:52:a1:b2:e7:0b:bf:b3:08:a3:9d:29:24:89:
         ea:ec:1e:3a:6b:b2:b8:19:7c:4d:a4:43:cb:e5:38:d7:99:b1:
         63:0a:3e:45:86:e6:0e:b2:0b:a5:88:a6:ce:00:d6:4c:21:e4:
         77:a1:ae:d9:60:b8:0b:f1:59:63:74:f8:1f:80:91:e9:40:7e:
         47:9b:f2:84:c4:1e:41:37:c3:1d:94:82:58:40:ae:b8:8f:de:
         fb:f4:bb:b9:fb:7c:af:ef:0c:5f:6e:0f:db:a4:b9:64:38:c3:
         3a:ab:80:fd:a8:77:ba:35:30:7f:46:69:ff:06:d7:84:c6:66:
         11:7d:2e:c9:7e:b9:59:6d:6a:1e:7d:7f:14:46:f9:d1:a2:2b:
         bc:41:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:19:45 2026 by rpki-client