Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa
File:                     8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa (raw, json)
Hash identifier:          M1ZcTG6SR+MOMZzz0ZcmcMfKj+L5A93Ag5R6lKEMl6s=
Subject key identifier:   47:63:83:31:A5:9D:D7:64:FF:A8:5C:55:47:25:42:E1:B3:33:04:0C
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584F4F080AEB61432106146D7280
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        143.244.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0a:eb:61:43:21:06:14:6d:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=b0a6a093-6ec6-4e96-be17-d9011ffc7104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:6b:eb:76:4a:58:03:1b:99:94:10:03:4b:
                    5a:db:53:8d:16:93:9a:4f:f2:9e:ec:06:02:7a:14:
                    ba:ef:de:3a:2a:f3:c6:44:29:49:a5:d8:ca:2e:6f:
                    80:0f:ea:cd:93:17:18:50:95:09:84:6e:62:83:50:
                    78:38:c5:59:d8:76:5a:cc:90:26:07:7e:59:20:47:
                    16:eb:46:ab:32:04:c4:e9:d6:f7:5e:6b:e2:de:b9:
                    a8:db:b0:30:5b:d4:da:4f:b3:7b:9a:02:0f:96:ed:
                    26:33:e6:93:00:5e:49:36:16:21:21:f0:a2:94:0c:
                    8d:e0:ca:b8:62:d0:34:9c:31:4c:8f:1e:dd:46:6c:
                    37:73:b4:90:38:f3:96:4b:df:06:8e:6e:d6:aa:07:
                    32:e9:3e:64:56:f8:17:15:17:4d:ef:db:6f:4f:33:
                    39:83:06:56:8c:d9:51:04:62:d4:4f:d3:1b:22:5f:
                    ae:83:46:bf:b2:07:4f:16:dc:f6:e3:93:d9:5a:5e:
                    3e:b2:bb:2e:0c:a3:e3:dd:eb:76:51:0f:96:1f:4a:
                    88:34:74:44:2f:29:c1:22:b7:20:3d:e4:76:c4:c5:
                    6d:d4:73:ec:7f:6f:28:ee:d2:60:de:31:e2:e0:9f:
                    a0:34:ad:1b:64:ed:a8:37:42:72:69:1a:aa:9f:c8:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:83:31:A5:9D:D7:64:FF:A8:5C:55:47:25:42:E1:B3:33:04:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:54:9c:e9:d1:d1:51:9a:fd:c2:be:e5:c3:17:7f:2e:fd:
         ce:ab:0b:e3:f4:c8:79:88:ef:b2:5c:ce:7a:cb:0e:04:2c:4b:
         69:9c:7e:d9:69:ce:71:3e:82:52:c1:d8:14:53:1f:a6:b7:b9:
         13:35:99:1a:40:c6:3e:24:91:8f:a1:46:30:df:c3:04:4c:06:
         fd:8f:a6:53:07:15:b3:9c:6c:34:a2:92:8e:dd:99:92:17:37:
         9b:96:19:a5:d9:ed:6e:a6:dd:1b:13:72:8e:67:ce:85:df:1b:
         5c:02:e0:00:98:99:2d:c6:ce:61:66:79:54:d5:a6:58:91:75:
         6a:2b:e1:6b:93:b6:c9:c0:84:ef:5d:86:f8:0f:84:b9:a5:fb:
         f4:00:09:8c:3a:d9:85:82:cc:96:ce:e7:48:b3:89:e5:85:93:
         4a:48:3b:59:7e:0a:93:df:ca:95:30:57:57:75:c4:de:35:28:
         8c:ea:bd:fa:cb:df:8c:33:8c:fb:d9:8d:2c:80:0e:d7:a5:02:
         25:80:18:e7:be:b1:16:11:38:ae:12:e0:a5:50:a4:85:1e:cc:
         08:36:be:95:53:14:df:0e:b4:3e:b5:ac:dd:96:7b:fb:f3:50:
         3d:42:6e:34:a2:8b:98:29:43:42:6f:3c:57:f0:e1:07:f5:b3:
         bd:12:ec:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCArrYUMhBhRtcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
YjBhNmEwOTMtNmVjNi00ZTk2LWJlMTctZDkwMTFmZmM3MTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBhr63ZKWAMbmZQQA0ta21ONFpOaT/Ke7AYC
ehS67946KvPGRClJpdjKLm+AD+rNkxcYUJUJhG5ig1B4OMVZ2HZazJAmB35ZIEcW
60arMgTE6db3Xmvi3rmo27AwW9TaT7N7mgIPlu0mM+aTAF5JNhYhIfCilAyN4Mq4
YtA0nDFMjx7dRmw3c7SQOPOWS98Gjm7Wqgcy6T5kVvgXFRdN79tvTzM5gwZWjNlR
BGLUT9MbIl+ug0a/sgdPFtz245PZWl4+srsuDKPj3et2UQ+WH0qINHRELynBIrcg
PeR2xMVt1HPsf28o7tJg3jHi4J+gNK0bZO2oN0JyaRqqn8hlTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEdjgzGlnddk/6hcVUclQuGzMwQMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvOGI0YzAwNTktY2UyZi0z
MDJkLThhZDAtMjY0ZjI4YWMyNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/RQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAcVJzp0dFRmv3CvuXDF38u/c6rC+P0yHmI77JcznrLDgQsS2mcftlp
znE+glLB2BRTH6a3uRM1mRpAxj4kkY+hRjDfwwRMBv2PplMHFbOcbDSiko7dmZIX
N5uWGaXZ7W6m3RsTco5nzoXfG1wC4ACYmS3GzmFmeVTVpliRdWor4WuTtsnAhO9d
hvgPhLml+/QACYw62YWCzJbO50izieWFk0pIO1l+CpPfypUwV1d1xN41KIzqvfrL
34wzjPvZjSyADtelAiWAGOe+sRYROK4S4KVQpIUezAg2vpVTFN8OtD61rN2We/vz
UD1CbjSii5gpQ0JvPFfw4Qf1s70S7Fs=
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:44:07 2026 by rpki-client