Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/b2b288e1-fd82-3520-b109-bf71decd9f88.roa
File:                     b2b288e1-fd82-3520-b109-bf71decd9f88.roa (raw, json)
Hash identifier:          VQfa5/b9bxSrex742caFZfeVk0HxSFAwsa4lgcAzszQ=
Subject key identifier:   93:47:F6:63:ED:2E:5E:FC:87:82:20:5B:28:48:65:88:1B:8A:A9:57
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584F2ABD13974A97DD275342E6C0
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/b2b288e1-fd82-3520-b109-bf71decd9f88.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     23154
IP address blocks:        143.116.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:13:97:4a:97:dd:27:53:42:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=b12225a4-847f-45df-a0df-c9b1cff3bc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:c3:22:c1:99:32:c5:07:08:21:21:99:90:
                    f9:ee:44:40:7e:7c:94:a7:3c:67:82:37:38:d7:72:
                    88:19:f2:22:c1:c6:53:69:9d:6f:85:d8:d0:2c:4c:
                    95:a3:6c:ca:0a:33:1b:c2:66:b8:2b:0a:af:5f:6e:
                    f9:4f:28:98:62:95:1b:ba:be:f5:88:12:35:84:00:
                    6c:69:65:cf:a8:f5:24:46:64:3b:62:fb:4e:8d:e0:
                    86:8b:10:6f:4d:2b:c3:54:0d:7e:e9:d3:0d:5c:f5:
                    32:af:72:83:27:08:4c:7b:cf:3c:50:db:59:50:d0:
                    8a:ed:58:73:ad:d3:71:88:c1:2c:de:69:3a:23:03:
                    8a:c7:10:7a:2e:6e:dc:ad:10:a0:71:75:98:17:9b:
                    88:ae:cf:f0:d4:76:78:c6:0c:24:c4:6b:35:6e:61:
                    f0:df:d6:b2:8d:ca:3d:67:58:17:61:5f:9f:01:9e:
                    2d:ae:05:a5:a3:29:0f:f0:a4:39:59:db:f9:90:fa:
                    d1:56:2d:7b:24:c2:4a:a0:25:d8:9c:fc:cf:ab:4e:
                    e4:92:39:1f:88:e1:4a:c5:ab:a4:18:6c:f3:b9:de:
                    e6:3c:7e:b1:dc:25:2f:37:72:2b:35:79:50:8b:d4:
                    81:dc:f4:55:85:a5:45:f4:97:6c:9b:58:99:ab:b9:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:47:F6:63:ED:2E:5E:FC:87:82:20:5B:28:48:65:88:1B:8A:A9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/b2b288e1-fd82-3520-b109-bf71decd9f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:b8:8c:da:df:26:e5:97:a4:c7:0b:65:0f:9b:85:d8:07:4e:
         27:e1:21:b3:32:b9:d2:39:5f:86:de:e9:f4:bd:32:60:f5:b1:
         2c:4b:dd:3d:d8:13:90:49:bc:2a:8c:09:14:c0:7c:e6:d0:3b:
         e3:c0:ab:f8:c0:72:d5:bb:92:4e:06:ba:7d:9a:4d:86:64:f7:
         b3:b1:73:63:b6:df:86:80:cd:fe:c9:f7:e6:a8:43:b9:c9:6c:
         7c:61:db:54:17:31:c8:56:80:28:95:19:12:6e:e7:a6:ec:0d:
         29:20:5f:d2:09:5e:b2:bf:82:48:2c:20:7d:dd:ef:1b:24:cc:
         8c:9b:4d:02:7d:65:90:b3:ef:33:0f:cb:fa:75:62:94:9d:e3:
         21:a3:60:b7:70:75:ea:1f:71:d4:f3:70:ea:7f:1a:f0:6a:2c:
         e3:15:ce:be:8b:ae:2b:47:4d:bf:f5:f1:ce:d1:e9:e7:f9:24:
         ac:5e:46:2e:0a:ee:ef:91:f9:f6:2a:3d:ca:ef:c3:47:c6:7e:
         78:7a:1f:33:84:c1:05:b7:c4:5a:e0:96:70:a6:f8:45:0f:12:
         c3:4d:f6:58:52:c6:8d:34:1b:94:23:8e:8b:b6:2f:05:bf:27:
         09:96:05:02:6a:1b:9f:c4:60:77:42:c1:84:6a:85:52:eb:af:
         4b:dd:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:39:15 2026 by rpki-client