Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa
File:                     e95e7009-bba1-3d4c-907f-59184c496169.roa (raw, json)
Hash identifier:          j/nTZoPhVqZ4OFLZI8Zoc4A9rPubjMGQwgUSo9/ofTk=
Subject key identifier:   F8:06:95:45:A6:24:DC:87:81:CC:88:29:CD:E2:A6:13:09:97:82:45
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584AB650E8C04A568C6AD3164CA0
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        143.244.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e8:c0:4a:56:8c:6a:d3:16:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=d4402409-f566-4404-9aa6-600d7586d4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:ae:bb:0a:cf:1a:ce:7b:8f:3e:26:84:4e:
                    df:8e:3a:d3:93:f0:67:27:3d:dd:78:20:98:4e:cd:
                    e1:57:fa:44:5a:30:58:70:5e:10:7c:18:ac:c5:6f:
                    34:1d:ac:b9:0b:16:0e:eb:16:b0:1a:8d:d9:16:1b:
                    f5:e7:ae:a3:55:31:cf:89:cc:42:eb:68:61:69:36:
                    b6:d6:ee:89:5c:58:9b:de:7f:79:d7:eb:e9:e6:fa:
                    fa:f8:e0:38:8c:df:2b:ef:ea:db:4e:c5:17:a5:1d:
                    03:60:1e:cd:36:1e:47:f4:79:a6:45:fc:cd:e2:71:
                    93:83:1e:bf:ee:e5:23:fa:9d:bc:fd:ec:a2:a4:9d:
                    53:a3:e3:ef:68:e6:cb:34:85:ca:b0:4c:8b:5a:3a:
                    31:0a:8b:f4:51:f1:e4:88:e2:9e:71:c3:0c:bc:8f:
                    07:bf:d8:41:a3:c5:f5:19:6d:8c:e2:fc:1c:f8:99:
                    16:fe:08:a6:10:d6:0f:84:ef:c8:68:57:ac:8a:fa:
                    4d:cd:d0:6f:61:f4:74:14:2b:de:90:4c:ca:56:47:
                    2c:bd:b4:8a:9a:9b:fd:d6:ed:36:b7:ef:72:0d:1f:
                    58:f4:45:d8:f9:cf:af:81:6b:0d:a7:ca:2c:ff:79:
                    ff:09:e9:70:ee:58:52:e0:45:3f:49:04:d1:f2:08:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:06:95:45:A6:24:DC:87:81:CC:88:29:CD:E2:A6:13:09:97:82:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:3f:6d:27:f7:31:a1:be:2d:e0:45:e4:90:84:d7:7c:d1:f3:
         60:60:c9:8b:5d:4a:b9:66:55:01:a4:d8:5d:77:39:2e:14:2b:
         1a:18:e8:c0:5c:6b:4d:e3:d6:a1:a5:97:76:15:45:f7:62:bb:
         27:c3:76:fe:42:5d:d4:3d:5b:2c:d1:4a:d4:5d:d8:33:d3:02:
         48:5d:fc:a1:7c:aa:62:43:ae:20:a3:be:6a:09:29:f0:e4:3c:
         40:d1:1f:08:bb:eb:46:2a:78:d1:7a:0d:9a:d1:fc:aa:a5:af:
         2b:96:a9:1c:44:bc:8e:0a:bb:95:c0:d8:63:d3:95:1b:6c:b1:
         9e:c2:07:2e:63:15:01:a6:15:7f:b7:34:31:d7:e4:6d:bf:48:
         c5:2d:62:6f:34:75:2b:0f:90:8a:dd:e6:e4:fe:f5:11:22:95:
         a1:af:76:cb:1e:29:f3:97:4d:e4:1d:e7:e3:13:2e:2c:f0:02:
         60:65:63:46:68:91:9d:de:d1:38:3e:68:ff:f3:ed:cc:df:0b:
         ff:11:2d:b7:ab:ce:b0:0e:3d:fa:c7:b9:04:cc:f5:33:95:1e:
         16:44:7d:b0:53:6d:07:09:72:0b:f9:3f:94:53:a6:a0:3b:02:
         8f:26:3f:a1:46:a1:c3:81:bc:83:1b:1a:d3:f9:3c:16:72:6b:
         c3:5d:93:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOjASlaMatMWTKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
ZDQ0MDI0MDktZjU2Ni00NDA0LTlhYTYtNjAwZDc1ODZkNGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiquuuwrPGs57jz4mhE7fjjrTk/BnJz3deCCY
Ts3hV/pEWjBYcF4QfBisxW80Hay5CxYO6xawGo3ZFhv1566jVTHPicxC62hhaTa2
1u6JXFib3n951+vp5vr6+OA4jN8r7+rbTsUXpR0DYB7NNh5H9HmmRfzN4nGTgx6/
7uUj+p28/eyipJ1To+PvaObLNIXKsEyLWjoxCov0UfHkiOKeccMMvI8Hv9hBo8X1
GW2M4vwc+JkW/gimENYPhO/IaFesivpNzdBvYfR0FCvekEzKVkcsvbSKmpv91u02
t+9yDR9Y9EXY+c+vgWsNp8os/3n/Celw7lhS4EU/SQTR8gg0VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPgGlUWmJNyHgcyIKc3iphMJl4JFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZTk1ZTcwMDktYmJhMS0z
ZDRjLTkwN2YtNTkxODRjNDk2MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj/RQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIw/bSf3MaG+LeBF5JCE13zR82BgyYtdSrlmVQGk2F13OS4UKxoY6MBc
a03j1qGll3YVRfdiuyfDdv5CXdQ9WyzRStRd2DPTAkhd/KF8qmJDriCjvmoJKfDk
PEDRHwi760YqeNF6DZrR/KqlryuWqRxEvI4Ku5XA2GPTlRtssZ7CBy5jFQGmFX+3
NDHX5G2/SMUtYm80dSsPkIrd5uT+9REilaGvdsseKfOXTeQd5+MTLizwAmBlY0Zo
kZ3e0Tg+aP/z7czfC/8RLberzrAOPfrHuQTM9TOVHhZEfbBTbQcJcgv5P5RTpqA7
Ao8mP6FGocOBvIMbGtP5PBZya8Ndk3A=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:58 2025 by rpki-client