Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa
File:                     e95e7009-bba1-3d4c-907f-59184c496169.roa (raw, json)
Hash identifier:          oBhEEGHOvRPyDtxsSwo/pu3QHG4uDbAuksQHDp1FTPc=
Subject key identifier:   97:85:D5:62:34:2C:F8:57:79:33:95:CB:AF:8D:BA:BC:2B:A4:BD:FD
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584D571FAE62AE3A08B2EE50E280
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        143.244.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ae:62:ae:3a:08:b2:ee:50:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=011fda16-99ac-4d28-b98d-c8b8cd36f5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:5e:9e:9d:f2:17:bb:e7:8c:32:48:ee:77:
                    75:ed:c7:5f:36:ee:bc:9b:9a:b7:5a:fd:9f:17:2b:
                    46:c4:99:b8:c5:b7:f9:87:53:02:40:34:ad:22:1c:
                    b3:11:1a:23:33:5c:57:83:e3:a3:f5:d8:23:7c:84:
                    45:61:b4:a7:d3:ce:63:3f:90:c5:8d:39:b2:97:b1:
                    c7:b3:5e:fb:d5:ae:03:8f:c3:85:01:76:81:37:11:
                    e7:c1:65:ef:2d:a3:a7:e3:f4:0f:20:f7:2f:74:8e:
                    d8:63:4c:dc:29:b7:ae:42:58:b5:a9:65:21:ae:f7:
                    86:0a:37:e7:f1:bd:9e:fe:71:60:df:72:f2:39:63:
                    b8:22:7c:a3:4a:28:60:30:9b:62:bf:ff:8e:76:6c:
                    45:96:aa:d7:5e:36:f8:d0:fc:7c:22:3d:07:b3:fd:
                    54:a1:ea:fb:b4:6b:0d:aa:12:42:07:75:eb:a7:9a:
                    95:1f:23:48:8f:62:e7:34:59:b9:4c:bc:1d:02:cf:
                    20:8a:bc:a6:87:90:c9:67:db:7e:9e:ec:93:bf:a1:
                    16:95:d7:8e:d5:c4:75:80:02:4f:60:43:8b:ec:53:
                    3a:f3:dc:5d:34:a3:70:a0:63:eb:d4:4f:7b:ba:1c:
                    e1:00:3a:47:82:8e:48:99:0a:16:d7:49:55:fd:4d:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:85:D5:62:34:2C:F8:57:79:33:95:CB:AF:8D:BA:BC:2B:A4:BD:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:e8:cb:d6:c6:94:4f:3e:c6:e3:56:04:d1:d1:19:9e:fd:
         20:b4:5c:b5:ed:5d:84:70:33:52:d2:9c:dc:cd:f9:0a:f9:e3:
         40:ba:22:86:6e:e6:f5:90:26:ed:3a:b1:8a:b2:49:af:35:bd:
         da:ba:d1:75:56:0e:de:c2:91:3e:52:74:67:53:a0:dc:43:7b:
         5c:1d:7a:5a:57:93:75:00:a1:0b:fa:e9:4b:64:f8:40:55:2c:
         e5:22:0e:b7:bf:7a:43:d3:f3:e0:74:d7:2b:d8:d0:14:b0:78:
         a2:b5:ed:2e:bd:aa:e7:1f:08:2c:0d:b7:f8:c4:69:c8:75:54:
         b5:89:d2:fd:97:b8:91:39:fe:90:a7:3f:87:d3:92:ea:cb:44:
         7a:66:0b:ae:fa:15:ce:f5:89:54:b4:4e:a4:68:f1:6d:1f:55:
         91:1f:5b:97:a0:1f:ab:48:80:42:85:95:b4:5f:40:37:9b:6f:
         19:1c:49:b0:bc:39:54:00:a7:34:cd:b2:da:f9:1c:36:2e:f1:
         63:8d:be:44:62:17:8e:5d:2a:d9:f7:47:76:ae:af:af:b2:24:
         07:40:fa:a6:98:02:10:2d:4e:2f:7e:22:06:fe:ea:7b:a8:4a:
         46:47:9a:a4:0e:10:78:ef:f3:12:3d:43:1d:21:cc:8e:83:eb:
         0e:94:b1:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH65irjoIsu5Q4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
MDExZmRhMTYtOTlhYy00ZDI4LWI5OGQtYzhiOGNkMzZmNWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqydenp3yF7vnjDJI7nd17cdfNu68m5q3Wv2f
FytGxJm4xbf5h1MCQDStIhyzERojM1xXg+Oj9dgjfIRFYbSn085jP5DFjTmyl7HH
s1771a4Dj8OFAXaBNxHnwWXvLaOn4/QPIPcvdI7YY0zcKbeuQli1qWUhrveGCjfn
8b2e/nFg33LyOWO4InyjSihgMJtiv/+OdmxFlqrXXjb40Px8Ij0Hs/1Uoer7tGsN
qhJCB3Xrp5qVHyNIj2LnNFm5TLwdAs8girymh5DJZ9t+nuyTv6EWldeO1cR1gAJP
YEOL7FM689xdNKNwoGPr1E97uhzhADpHgo5ImQoW10lV/U32OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJeF1WI0LPhXeTOVy6+NurwrpL39MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZTk1ZTcwMDktYmJhMS0z
ZDRjLTkwN2YtNTkxODRjNDk2MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj/RQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTg6MvWxpRPPsbjVgTR0Rme/SC0XLXtXYRwM1LSnNzN+Qr540C6IoZu
5vWQJu06sYqySa81vdq60XVWDt7CkT5SdGdToNxDe1wdelpXk3UAoQv66Utk+EBV
LOUiDre/ekPT8+B01yvY0BSweKK17S69qucfCCwNt/jEach1VLWJ0v2XuJE5/pCn
P4fTkurLRHpmC676Fc71iVS0TqRo8W0fVZEfW5egH6tIgEKFlbRfQDebbxkcSbC8
OVQApzTNstr5HDYu8WONvkRiF45dKtn3R3aur6+yJAdA+qaYAhAtTi9+Igb+6nuo
SkZHmqQOEHjv8xI9Qx0hzI6D6w6UscA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:24 2026 by rpki-client