Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa
File:                     f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa (raw, json)
Hash identifier:          mup81qnu+b5NaEWv6DNcrzC3aUO2Aqj6mV76vwz81AI=
Subject key identifier:   F0:40:86:BC:AE:89:C3:53:F3:5C:8E:9E:D8:B4:D6:23:0E:A5:9F:FF
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584EF2E75964D9D49A1E164E62A0
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        143.244.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:59:64:d9:d4:9a:1e:16:4e:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=b5e2ed67-a189-48e8-b0fe-16a388200826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:93:c8:1b:52:d0:d1:41:92:4b:dc:04:c8:
                    60:ba:0d:26:78:24:61:65:a3:12:f3:5e:ec:13:c0:
                    a3:ae:68:61:24:88:22:8d:0b:ff:c4:d3:6e:d3:19:
                    a5:31:75:99:e1:5c:b1:9d:fa:23:5c:34:3e:3e:4a:
                    c6:20:3e:7a:23:8a:22:fc:66:a1:10:f9:a1:15:0e:
                    57:7e:84:c9:2d:73:6a:85:77:3e:d6:e6:b1:11:2f:
                    94:1a:79:6b:44:89:05:43:b2:f3:41:70:84:25:c2:
                    57:b0:a3:c0:06:30:21:4e:6b:09:7c:11:2b:0e:4f:
                    45:d8:b5:a8:96:2d:3c:c0:6e:be:53:9a:56:60:e3:
                    1f:aa:92:2a:07:49:c2:e8:fb:64:4c:23:86:17:1c:
                    69:dc:b0:23:b8:55:48:50:90:a1:55:32:b0:77:59:
                    a9:2e:55:c2:da:ca:a6:1b:c1:09:bb:d1:79:d3:87:
                    b4:47:be:89:dc:49:75:d9:35:cb:2b:43:1c:41:4f:
                    5a:07:0c:17:98:c3:4b:09:78:fa:12:81:42:d1:f1:
                    6f:f1:8e:a0:9f:20:71:80:e3:44:a8:9d:15:76:fa:
                    11:37:00:00:36:1d:50:3e:44:2e:6f:7f:cf:6a:13:
                    61:4f:bd:4c:83:4f:7b:d4:9c:a7:a2:6c:41:98:e3:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:40:86:BC:AE:89:C3:53:F3:5C:8E:9E:D8:B4:D6:23:0E:A5:9F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1b:48:89:49:96:32:73:6e:69:b6:a4:60:75:8b:d6:be:e2:
         6a:5c:76:7c:77:3a:80:5c:b6:37:40:da:c8:74:e0:3b:61:25:
         23:72:95:da:8f:c9:42:ef:ec:2c:f8:9a:36:ce:4a:85:cd:4b:
         70:51:2f:f5:74:32:e8:a0:41:40:9e:29:46:f1:ef:99:1a:8e:
         50:62:a2:d2:e7:6b:fb:09:80:ca:71:66:e5:20:62:7b:86:3c:
         eb:f1:86:a6:5d:f1:cb:03:1f:79:e2:95:ea:1b:7b:ea:00:32:
         38:a0:f0:dc:db:3f:20:da:94:60:60:7c:63:5e:ab:80:e0:42:
         00:d7:8d:d6:41:fb:75:16:cd:64:0c:93:76:b1:83:d1:7c:c5:
         39:21:67:d2:9b:ba:2c:d2:bb:ea:40:6c:9c:7d:45:6c:09:f3:
         4d:19:29:a4:6f:5a:61:6c:03:27:43:e9:f3:97:64:8b:06:f8:
         cc:dc:59:12:69:47:8c:2d:3c:31:b8:ec:21:74:48:2f:ef:75:
         6a:bf:70:1c:77:f7:ca:84:6c:03:5f:13:59:a9:f1:e2:6f:94:
         47:9e:fc:30:68:02:e3:63:72:0e:26:8a:6a:9a:10:8a:e7:d3:
         e7:58:7e:32:8b:ea:e0:f0:8f:e9:49:65:8f:9d:76:b4:a4:56:
         5d:d6:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:28:40 2026 by rpki-client