Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa
File:                     2b29125c-eb49-30d5-97db-a44c474b27a9.roa (raw, json)
Hash identifier:          0zQhetPv9uFkXoqWrGeubSi0d6ZGeQ4SdYQYFkd36ms=
Subject key identifier:   0A:D3:A1:64:EF:F4:BA:CB:1B:A9:FB:DC:09:96:59:04:A8:57:F0:BE
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584E0C1ECEF1E5744494BAABA580
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     16509
IP address blocks:        143.244.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:ce:f1:e5:74:44:94:ba:ab:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=e1c4e94e-7d18-4f59-b241-ffcf7b6cfb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:45:de:a0:45:4a:c4:4b:74:8c:69:0a:0b:
                    9e:2d:ad:45:84:61:64:d1:0b:d4:ed:20:b0:e4:31:
                    3e:16:13:e0:fb:38:82:3c:df:d0:f8:1f:41:a4:b8:
                    ba:81:81:93:f6:37:55:b6:1e:22:67:da:c6:e5:12:
                    70:3c:60:8e:85:88:3b:2f:20:02:b5:d9:5e:03:b3:
                    72:a8:ee:38:e1:f5:2b:72:a5:d2:8b:b0:9b:22:98:
                    2c:5d:f3:26:1b:8c:08:de:b2:e1:0b:27:ed:d6:06:
                    df:d9:c6:10:4b:95:b3:3b:e4:95:5d:09:1b:a6:a9:
                    ba:e4:f8:53:9d:37:e4:32:be:f0:88:38:41:f7:84:
                    97:79:32:26:76:cb:82:46:bd:42:0b:2e:f4:51:40:
                    3d:92:02:a0:d7:10:76:d5:bf:6b:90:b2:31:79:ce:
                    87:83:7b:4f:59:c2:ca:f5:df:f5:60:df:23:9d:f1:
                    88:64:a7:de:45:9a:9b:17:82:f7:97:fd:74:99:b5:
                    f5:5d:cc:19:38:f3:00:fd:cc:0f:85:38:14:c8:c1:
                    56:3b:93:1d:73:7e:cb:ec:e6:ef:bc:a6:f2:38:e6:
                    ca:3d:05:cf:bc:54:da:50:95:7c:87:d0:42:d0:3b:
                    c4:8a:b8:0d:a7:70:c9:77:41:69:1b:91:1e:42:8c:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D3:A1:64:EF:F4:BA:CB:1B:A9:FB:DC:09:96:59:04:A8:57:F0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:75:e7:37:1b:a9:0e:30:67:57:0a:2d:a8:dd:3d:f8:db:bf:
         e9:e3:9c:22:68:dd:f3:84:ec:41:d5:9b:05:5a:97:8a:1b:0d:
         ad:99:70:d3:24:27:de:5e:ca:9b:41:b0:5a:47:9b:8a:a0:24:
         71:2b:62:b8:1b:4d:d5:32:83:f6:6d:b0:87:2f:6d:99:db:c3:
         e3:d7:93:63:17:d6:c6:56:66:2c:1d:43:c0:93:1f:c9:38:cd:
         ec:8e:0d:88:82:3b:41:e6:64:82:4a:c1:cd:5f:dc:d8:46:85:
         06:ea:a9:31:63:f9:96:de:38:41:9d:f9:0f:31:bb:d7:85:59:
         f1:7e:77:4c:8e:60:f7:ec:df:61:84:af:b4:cc:bd:0b:83:f4:
         4a:84:11:8b:a7:b8:bf:88:f5:ab:f7:b3:91:93:5b:1b:3d:e0:
         66:a0:c4:30:ab:56:29:fc:00:47:04:1e:57:e7:32:76:e7:15:
         b0:f3:11:58:c2:79:8e:9a:76:05:62:8c:41:84:9a:a8:cd:e2:
         09:34:fe:97:a1:71:d0:70:ea:33:94:cc:ab:da:5d:cb:c1:cf:
         a5:2c:d7:c2:93:05:14:ac:82:ea:6d:08:93:12:04:00:55:94:
         87:46:ff:9c:a7:bc:81:89:d4:10:27:4e:8e:e1:52:c4:53:63:
         c2:1d:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:39:48 2026 by rpki-client