Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/6bada036-d341-3347-a9fe-981cd6ea35c3.roa
File:                     6bada036-d341-3347-a9fe-981cd6ea35c3.roa (raw, json)
Hash identifier:          DxAD2Sm/1Al2fo4Nr2VVJPlDDArWNDhgQvgf+Tnk4cU=
Subject key identifier:   96:66:14:B0:42:D6:A8:CB:5F:61:DD:16:AE:4D:E7:FF:5D:02:C6:EF
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584ED9C752F35F4B75ABE9308400
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/6bada036-d341-3347-a9fe-981cd6ea35c3.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16509
IP address blocks:        143.244.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:52:f3:5f:4b:75:ab:e9:30:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=8f144d1e-67c2-4ee7-bd35-e35cdd61510b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:44:60:8f:49:1c:0f:38:54:81:be:ea:3a:
                    dc:9a:78:ec:7c:cb:54:b4:cf:a4:03:6e:d2:29:c9:
                    b2:d8:a8:71:1b:e1:67:e2:93:eb:4e:15:55:de:aa:
                    0d:8e:0a:0d:1a:f9:e4:25:cc:94:8a:57:50:f4:4e:
                    22:f1:5c:5b:8d:ab:a2:3e:ef:07:b8:3e:a6:7c:38:
                    16:2d:ec:b0:e6:ef:63:4e:47:06:9d:61:82:79:9d:
                    1a:d8:43:f6:ea:01:24:b6:81:24:dd:be:53:2a:0f:
                    5c:bc:a3:10:9b:6d:ae:1e:77:ed:95:8c:6b:1b:01:
                    63:50:89:12:69:fa:24:a5:b5:02:5e:6a:fe:c9:af:
                    01:6c:98:7d:e4:66:de:f4:74:c0:24:ab:ee:a2:85:
                    2b:92:ff:a0:91:84:eb:b6:b6:c9:9a:c0:40:59:34:
                    c3:39:57:70:0e:93:03:1a:e1:87:d1:10:12:57:f1:
                    5d:cb:a9:e8:f4:0e:a8:b2:35:74:22:30:eb:e3:1c:
                    41:47:0b:d4:31:57:25:40:b8:5b:a2:6b:e3:06:93:
                    29:6e:87:d1:39:13:53:76:28:8e:4e:83:5e:8f:c8:
                    4f:41:f3:2a:49:80:62:57:7f:80:d4:40:04:25:ee:
                    cd:ef:a8:13:7f:48:2d:d7:bd:01:ec:38:43:ee:e2:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:66:14:B0:42:D6:A8:CB:5F:61:DD:16:AE:4D:E7:FF:5D:02:C6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/6bada036-d341-3347-a9fe-981cd6ea35c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:44:cc:e7:45:4a:12:05:17:5b:86:a5:17:c9:b1:f5:62:37:
         74:81:f3:ce:0d:4c:9d:ed:d7:9b:0d:7d:03:8f:0f:98:fb:fb:
         a8:c1:97:ab:61:ef:6a:a4:8f:3f:04:d7:69:c3:49:60:5e:6f:
         e3:1a:71:dc:68:e3:b1:8b:0e:bd:60:52:a2:a8:1a:de:6c:37:
         c2:19:84:e0:c6:d5:b5:6d:63:df:e2:cf:fe:2d:11:cb:3b:2c:
         f2:41:99:b8:78:41:b7:e5:d0:e5:92:6f:ff:8c:5b:be:19:74:
         4c:ca:06:33:9c:86:02:3a:9f:8c:05:56:c8:03:fe:a9:8a:2c:
         87:af:82:1b:97:2b:df:51:ee:0b:0c:8f:aa:6c:c5:51:cc:72:
         8e:04:bf:9f:69:33:1f:18:78:3c:89:f4:a0:2e:35:e8:a4:61:
         58:03:60:20:a9:d6:45:81:88:4e:64:24:b5:2e:0c:7c:91:1a:
         dd:21:5f:cf:44:66:f4:5d:6b:d2:cd:8f:9d:b5:af:0a:aa:94:
         b9:1c:b8:cb:65:fb:2a:1e:d7:c7:58:d5:8e:49:d3:60:c8:1f:
         d8:5a:89:48:c8:fb:6f:88:a5:f6:c9:d9:69:6d:c2:5c:16:92:
         f6:6b:ac:31:1d:4a:76:db:65:f3:cd:9f:3f:f5:cd:4a:9d:e7:
         ef:6b:6f:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1LzX0t1q+kwhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
OGYxNDRkMWUtNjdjMi00ZWU3LWJkMzUtZTM1Y2RkNjE1MTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdJEYI9JHA84VIG+6jrcmnjsfMtUtM+kA27S
Kcmy2KhxG+Fn4pPrThVV3qoNjgoNGvnkJcyUildQ9E4i8VxbjauiPu8HuD6mfDgW
Leyw5u9jTkcGnWGCeZ0a2EP26gEktoEk3b5TKg9cvKMQm22uHnftlYxrGwFjUIkS
afokpbUCXmr+ya8BbJh95Gbe9HTAJKvuooUrkv+gkYTrtrbJmsBAWTTDOVdwDpMD
GuGH0RASV/Fdy6no9A6osjV0IjDr4xxBRwvUMVclQLhbomvjBpMpbofRORNTdiiO
ToNej8hPQfMqSYBiV3+A1EAEJe7N76gTf0gt170B7DhD7uLi4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZmFLBC1qjLX2HdFq5N5/9dAsbvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNmJhZGEwMzYtZDM0MS0z
MzQ3LWE5ZmUtOTgxY2Q2ZWEzNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj/RQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBEzOdFShIFF1uGpRfJsfViN3SB884NTJ3t15sNfQOPD5j7+6jBl6th
72qkjz8E12nDSWBeb+Macdxo47GLDr1gUqKoGt5sN8IZhODG1bVtY9/iz/4tEcs7
LPJBmbh4Qbfl0OWSb/+MW74ZdEzKBjOchgI6n4wFVsgD/qmKLIevghuXK99R7gsM
j6psxVHMco4Ev59pMx8YeDyJ9KAuNeikYVgDYCCp1kWBiE5kJLUuDHyRGt0hX89E
ZvRda9LNj521rwqqlLkcuMtl+yoe18dY1Y5J02DIH9haiUjI+2+IpfbJ2WltwlwW
kvZrrDEdSnbbZfPNnz/1zUqd5+9rbzI=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:51:10 2026 by rpki-client