Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa
File:                     8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa (raw, json)
Hash identifier:          WctMSNfwjEIn8DUNxGs+wTJ1UIPI0ZTCTYA61Bmc5ZU=
Subject key identifier:   6B:A1:DA:03:E5:8C:07:6A:36:55:EA:C5:55:1A:9D:1E:C3:9B:02:75
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285849AA4F6866574633BBB006EF20
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        143.244.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:68:66:57:46:33:bb:b0:06:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=5c02a2d1-203d-4622-b92e-2f8fa5c4edf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:5d:1e:97:74:3a:9a:37:88:37:18:7e:6b:
                    19:1d:80:06:2e:fd:1b:32:d3:1e:8c:a4:1d:da:e3:
                    ad:83:ea:94:f6:6a:74:df:a6:a2:c1:be:82:a5:2e:
                    38:4a:39:9a:e3:8f:36:19:ca:21:d6:86:04:63:3e:
                    50:8c:5c:9f:5a:25:e2:3f:5f:bb:d5:08:f5:36:d7:
                    b6:09:d8:81:bb:4a:d4:6d:98:96:0c:67:00:44:05:
                    a9:68:9b:54:d1:c3:ad:27:9b:2a:24:5b:ec:72:b7:
                    ad:6e:1b:82:5c:34:24:d6:1d:bf:4d:2d:5c:5c:f7:
                    0d:38:5d:77:0e:5f:ba:53:34:58:58:ea:23:fd:d5:
                    fb:b0:d1:db:b7:a8:e9:20:71:fc:12:a4:57:6d:05:
                    03:a0:17:6b:22:c7:9b:4f:04:82:c8:ac:81:14:5b:
                    a5:22:44:88:5f:3f:b0:43:cc:14:a3:a6:a3:79:37:
                    f5:b5:d7:37:34:85:ba:9a:63:ee:a2:ae:44:91:02:
                    7c:58:46:30:5f:6c:2d:bc:70:f9:9d:f8:df:2b:08:
                    93:5f:5c:b1:d9:08:33:c2:34:5c:24:6c:4a:f1:56:
                    70:8a:e2:b9:50:44:4f:b7:c3:f7:78:ea:f3:92:f4:
                    b4:92:b9:d0:11:84:33:57:15:3c:e0:03:20:0c:bc:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:DA:03:E5:8C:07:6A:36:55:EA:C5:55:1A:9D:1E:C3:9B:02:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:5f:3c:47:e4:73:fc:27:a2:02:83:c9:6e:f5:0c:a8:85:
         67:49:1e:54:01:c3:ba:39:d5:b0:13:4a:f6:ce:dd:70:28:65:
         72:df:bf:52:70:3a:87:66:b7:80:a2:f4:9d:05:75:ca:02:09:
         5f:3a:82:0e:95:8d:b0:f6:ac:f0:4c:e9:ff:fc:4a:93:ad:c0:
         8e:eb:a7:6a:dc:61:dc:76:e9:ac:65:12:6c:b8:33:1e:e6:19:
         3f:2f:8e:ca:68:09:22:6a:6e:c2:58:ff:ea:39:ce:ce:1b:bd:
         8e:31:48:70:74:c0:35:f1:fd:3b:fc:2c:5d:5c:e5:d2:9e:d6:
         1d:79:a2:5e:c9:25:6c:26:f8:e9:22:b0:89:a1:68:21:b8:9e:
         09:3f:cd:cc:ba:f6:ef:80:67:b0:08:c5:4c:94:77:70:01:32:
         8d:4c:35:c1:d8:5d:82:3e:04:68:0f:c5:1c:a8:68:b0:a3:dc:
         1f:30:26:b5:7c:35:11:6d:53:37:e5:3c:04:13:16:aa:f0:1b:
         e0:6c:bf:87:1d:41:54:11:99:32:fa:02:e6:3b:82:c4:1d:7d:
         31:4c:1d:7d:fe:18:0b:1b:42:86:e3:2c:0d:6a:f4:1d:7d:86:
         22:64:43:05:a5:ff:c6:26:f9:48:ee:8d:e5:1a:2b:f0:c9:4d:
         ad:c3:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:32:25 2025 by rpki-client