Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa
File:                     2b29125c-eb49-30d5-97db-a44c474b27a9.roa (raw, json)
Hash identifier:          V0UHJR+LjdXnRPYgs3kWxdz0RI6H8n4uI50wZh9PkJA=
Subject key identifier:   9B:AF:BE:86:F3:F6:EF:71:84:88:1B:10:A6:D5:86:8F:C8:90:33:41
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285849ABB49B43C957CB3465125600
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        143.244.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9b:43:c9:57:cb:34:65:12:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=eea23d21-06d6-40fa-8c7e-c0e69d8c52f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:5c:49:a7:c1:1b:78:84:60:93:c9:c3:2f:
                    b5:9d:80:61:68:34:99:cb:9f:9b:f8:26:86:d4:99:
                    a4:ad:8e:2b:bc:4f:94:63:9d:8a:60:5c:0a:a2:e3:
                    ce:5c:58:75:98:fd:14:e5:67:b8:e1:56:4b:e9:ab:
                    e8:1d:ea:04:bf:b8:04:08:5c:b9:1f:88:e8:78:45:
                    06:32:c7:1e:8e:71:e0:52:8d:2a:76:6e:42:7e:8a:
                    e0:03:9c:13:14:36:7a:c5:f8:a9:9d:e4:d5:a8:cd:
                    70:d3:c9:18:ee:9b:49:5a:fa:06:6c:6b:c1:9d:a8:
                    5b:c7:cb:5e:e3:c0:45:62:88:ea:6b:5d:df:47:ce:
                    4a:cb:67:df:08:84:b1:4b:0a:84:99:40:eb:55:6f:
                    36:ee:39:ca:48:1d:95:53:89:34:e0:2b:9d:1b:d1:
                    5d:f5:d8:b3:03:9f:92:e0:5c:49:b9:9b:70:23:74:
                    78:ab:96:11:9f:e5:93:93:af:82:61:f1:f1:10:4b:
                    27:3b:83:50:ac:3f:55:46:28:a7:fa:b4:bc:08:00:
                    b3:c6:05:57:e7:99:f1:59:73:fc:08:05:0e:97:e4:
                    aa:3e:54:9b:c5:fe:0a:98:9f:d3:e0:ea:54:80:99:
                    33:1d:59:1b:d0:70:33:74:26:2c:77:2a:b4:7d:26:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:BE:86:F3:F6:EF:71:84:88:1B:10:A6:D5:86:8F:C8:90:33:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:dc:73:2b:f6:6c:b2:80:f3:21:17:f8:1b:38:57:38:f8:
         81:24:55:99:32:36:9d:d6:91:3d:f5:ab:48:4d:db:76:8c:82:
         ab:18:08:5e:9d:87:65:08:df:71:43:ec:90:a4:3f:a5:58:15:
         4a:13:ca:ff:b9:f0:2a:9c:e4:6b:89:3e:5a:ff:3d:21:0d:65:
         c1:43:26:9c:74:c4:d8:aa:0f:b1:62:70:e3:7b:7c:cd:4e:0c:
         af:16:6a:57:51:c5:0b:be:29:56:d6:b8:94:5e:7c:cf:38:a7:
         21:7f:2a:1a:da:1d:0e:8a:bb:e8:e8:bf:94:df:cb:14:9b:ff:
         b5:d7:04:27:88:1f:70:ff:8f:12:d0:80:f1:bd:86:1d:3e:11:
         00:87:36:33:e2:23:6a:8c:17:6c:ea:96:47:3d:a8:9b:a3:8c:
         d0:f7:2c:7b:b1:fb:ae:23:69:c0:4c:9a:e3:b6:11:7f:4c:a0:
         3e:62:84:62:6d:80:96:77:f0:16:3e:56:c9:e0:7f:69:51:59:
         36:c3:78:f9:e0:02:40:90:b6:3f:48:93:ed:b8:b4:0d:76:36:
         3a:39:44:09:0c:90:96:d1:6a:fc:a8:ff:7c:60:13:7c:26:e4:
         d8:9a:3c:87:97:ff:b0:df:9b:0e:b4:33:18:ee:e1:a9:c4:b6:
         70:fe:10:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJtDyVfLNGUSVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
ZWVhMjNkMjEtMDZkNi00MGZhLThjN2UtYzBlNjlkOGM1MmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSpcSafBG3iEYJPJwy+1nYBhaDSZy5+b+CaG
1JmkrY4rvE+UY52KYFwKouPOXFh1mP0U5We44VZL6avoHeoEv7gECFy5H4joeEUG
MscejnHgUo0qdm5CforgA5wTFDZ6xfipneTVqM1w08kY7ptJWvoGbGvBnahbx8te
48BFYojqa13fR85Ky2ffCISxSwqEmUDrVW827jnKSB2VU4k04CudG9Fd9dizA5+S
4FxJuZtwI3R4q5YRn+WTk6+CYfHxEEsnO4NQrD9VRiin+rS8CACzxgVX55nxWXP8
CAUOl+SqPlSbxf4KmJ/T4OpUgJkzHVkb0HAzdCYsdyq0fSYXEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJuvvobz9u9xhIgbEKbVho/IkDNBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMmIyOTEyNWMtZWI0OS0z
MGQ1LTk3ZGItYTQ0YzQ3NGIyN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/RQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7M3HMr9myygPMhF/gbOFc4+IEkVZkyNp3WkT31q0hN23aMgqsYCF6d
h2UI33FD7JCkP6VYFUoTyv+58Cqc5GuJPlr/PSENZcFDJpx0xNiqD7FicON7fM1O
DK8WaldRxQu+KVbWuJRefM84pyF/KhraHQ6Ku+jov5TfyxSb/7XXBCeIH3D/jxLQ
gPG9hh0+EQCHNjPiI2qMF2zqlkc9qJujjND3LHux+64jacBMmuO2EX9MoD5ihGJt
gJZ38BY+Vsngf2lRWTbDePngAkCQtj9Ik+24tA12Njo5RAkMkJbRavyo/3xgE3wm
5NiaPIeX/7Dfmw60Mxju4anEtnD+EAs=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:14:15 2025 by rpki-client