Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa
File:                     58789689-e2c9-3f72-af7b-00169d31da3d.roa (raw, json)
Hash identifier:          NXqDDCmgkmdVFNtrJqdjYqt7TaySpzSRMJ6TpbDWxms=
Subject key identifier:   9A:CB:DA:3F:59:16:1F:6E:19:62:58:30:CB:D1:C6:62:FA:01:EA:90
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584ACE0B8E78AB7A8909485722E0
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        143.244.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:8e:78:ab:7a:89:09:48:57:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=f07ca883-5f63-4347-91e2-ae231cae366f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:dc:ad:f8:d8:43:60:c6:48:6f:b6:4b:8f:
                    5d:8d:58:97:2a:8a:0b:c9:c2:b3:c4:61:e9:8c:86:
                    e9:34:d6:7e:a5:ca:72:2a:93:70:f1:30:6b:e1:0d:
                    61:67:87:21:d5:90:7f:0e:ca:b3:d9:e1:31:cd:82:
                    66:15:88:a3:7e:21:3b:1d:fd:f9:b0:a7:28:26:4e:
                    8c:71:85:df:ce:25:74:20:6d:43:c6:2c:86:d5:21:
                    71:ae:7a:1b:ee:23:33:9a:6b:38:ff:98:d0:99:3c:
                    ad:f3:1a:c6:97:33:34:de:54:17:aa:d6:69:95:7d:
                    28:4b:6b:f8:79:7b:ed:6e:8f:29:3d:dd:5a:d8:a7:
                    43:f5:b1:45:c8:28:f4:af:25:7f:52:fd:09:24:3a:
                    60:b0:bf:67:46:55:01:07:0e:a9:3c:a6:16:2b:0f:
                    ff:da:85:c3:81:2c:3d:9a:7d:3f:84:3f:5b:ae:4e:
                    6c:b1:96:58:ed:ea:90:f4:5e:26:4e:25:6f:cf:9f:
                    36:f6:0a:6b:3d:49:bb:68:95:41:ad:77:af:17:21:
                    2c:86:43:a1:62:bc:c4:fc:70:d9:d9:98:d5:1f:02:
                    f5:2e:37:82:5a:b0:05:69:64:c8:a9:d9:fc:2f:b3:
                    92:8b:d8:cd:97:a6:8e:bc:12:2e:00:cd:fa:8b:94:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CB:DA:3F:59:16:1F:6E:19:62:58:30:CB:D1:C6:62:FA:01:EA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:03:5a:f4:f8:ac:76:60:ac:eb:34:00:94:21:c4:56:3e:f2:
         4c:34:90:07:4b:e5:08:cb:a6:41:8b:fd:15:48:4f:07:e8:fd:
         43:0d:3a:92:c1:15:33:51:b3:c3:d8:59:6d:1e:3a:1b:08:87:
         17:98:87:dc:97:36:5f:f5:7a:04:0c:c9:47:ae:66:39:b6:05:
         26:e6:16:6c:7e:4a:a2:2b:b4:b0:7b:a5:0c:5f:22:5a:37:d5:
         66:60:43:00:8e:6f:74:29:08:e1:0b:c4:74:5d:00:17:52:d5:
         3d:c6:8f:a6:75:93:5f:2c:12:c2:e6:a3:06:76:56:4a:e5:2a:
         c5:e7:52:c8:8c:56:0c:d2:d3:40:5d:20:7d:04:3b:42:5c:1f:
         61:10:da:f7:ff:2a:4c:ea:cd:3d:1d:f4:e2:1d:e2:df:03:0b:
         c8:da:ed:e0:83:ac:5c:e6:60:69:26:d0:55:32:4a:93:aa:67:
         57:80:e0:64:65:9a:e6:99:5d:20:e2:fb:85:99:20:54:e5:ad:
         91:82:e5:b6:29:c5:32:ce:52:d9:52:75:74:9f:c4:09:c9:9b:
         3b:96:02:fa:9c:ca:64:73:72:d7:7a:78:a0:06:ba:ab:68:a8:
         25:5c:02:7e:e8:6c:4d:c9:33:63:dd:bc:4a:62:68:96:7c:89:
         e1:5a:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:50:15 2025 by rpki-client