Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/8cd5345b-00a9-3060-9816-6dc884b387f4.roa
File:                     8cd5345b-00a9-3060-9816-6dc884b387f4.roa (raw, json)
Hash identifier:          C0CPiDse+xGTfE8LYZz7MqBXJtUtn2cp66cw2b1EY/w=
Subject key identifier:   B1:EC:7E:41:D6:50:92:A2:6A:E0:BE:43:50:F0:C6:EF:DC:9D:86:25
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584DA81573694BB5867B8B15B380
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/8cd5345b-00a9-3060-9816-6dc884b387f4.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     23154
IP address blocks:        143.116.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:73:69:4b:b5:86:7b:8b:15:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=bdba763c-25e8-4c98-8db2-512d958379f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:34:70:3a:a9:47:49:9b:81:3d:91:5d:87:49:
                    c1:c2:1c:20:42:ac:c4:f2:41:62:8e:a4:8a:c7:1f:
                    49:4a:59:14:a2:48:e2:e6:46:d6:ee:14:32:9e:23:
                    c3:f3:cf:fd:2f:2f:0a:96:0e:15:34:48:a7:dd:b2:
                    56:64:a4:d9:53:63:fe:b4:10:f8:e5:47:21:a0:52:
                    7d:3d:9e:b9:0d:7f:52:a3:e8:ea:dd:3e:f0:fe:4c:
                    e1:16:12:09:42:4b:4a:a5:7b:b4:79:67:1e:8a:7e:
                    9f:22:62:19:ac:2c:01:84:e6:77:01:30:58:ff:97:
                    58:00:fd:90:c9:88:56:bc:96:9d:2f:fe:9e:11:43:
                    62:03:42:1b:79:fd:fc:98:af:eb:6e:b0:cb:f8:48:
                    e2:2d:4a:e8:22:fe:cc:ba:ea:4a:65:dc:57:42:d3:
                    c0:7e:97:e4:4a:0f:a6:7d:55:d3:58:64:66:1b:3f:
                    84:a1:22:71:4d:0a:78:dd:d0:60:9a:66:ae:66:3d:
                    40:2d:72:9b:46:3a:b6:de:48:db:ec:fe:b4:64:1f:
                    c9:ea:7f:c4:fc:c2:1f:b3:dc:e0:83:60:f3:af:97:
                    bc:0b:e8:38:0d:0a:a2:09:86:2b:49:f6:3f:3e:e6:
                    46:4c:cb:cc:8f:9c:6b:4a:36:93:05:29:59:dc:da:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:7E:41:D6:50:92:A2:6A:E0:BE:43:50:F0:C6:EF:DC:9D:86:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/8cd5345b-00a9-3060-9816-6dc884b387f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:39:ca:42:74:52:54:44:a7:47:b0:f2:05:2b:5b:fc:69:57:
         e5:0e:f8:19:54:d3:a2:19:16:cd:f9:34:31:31:89:db:bf:78:
         1d:c0:c7:39:58:4e:c2:95:ae:d5:7c:b4:40:4c:f1:30:cb:ab:
         f0:20:d8:5a:11:16:78:5d:8e:4f:75:c8:f3:64:af:27:a9:ab:
         a3:2b:af:1e:25:d8:9e:fb:1e:2e:51:4a:e3:c3:b7:b7:1a:8c:
         81:96:4b:ee:d0:c1:1d:e6:00:b2:d6:b4:60:c6:0f:a7:38:ef:
         f4:52:3b:07:e4:70:46:b7:68:dc:46:62:07:49:20:e1:6a:e7:
         b3:fd:00:f9:16:49:fc:18:d7:60:40:10:f7:bf:d6:d6:9f:9e:
         e5:b1:95:6b:41:db:7e:b5:2f:e2:47:f4:41:de:29:10:0a:8d:
         68:1a:1d:ab:c6:92:bf:ed:75:f9:51:ff:71:ae:1e:48:c3:d1:
         a8:52:93:c3:30:be:85:c6:f3:61:15:8e:16:18:cc:64:54:ac:
         60:9e:e0:cf:d8:32:ac:3e:5f:cf:d2:50:e4:b1:a9:ef:56:95:
         9d:6a:f7:0e:6b:e7:71:5b:b5:67:07:4a:65:7c:d3:c2:eb:f0:
         6b:e8:19:56:5a:fd:55:12:ae:92:28:d3:09:01:c5:59:78:3b:
         f0:7f:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:40:17 2026 by rpki-client