Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/50fdc64b-34ea-3604-aada-e3a8e20a3ec0.roa
File:                     50fdc64b-34ea-3604-aada-e3a8e20a3ec0.roa (raw, json)
Hash identifier:          +BuARbSzLUG2x3tfhntBrl/5v6y/VtmytwzBd7jnxSk=
Subject key identifier:   20:FE:87:DD:5A:4E:A6:24:2C:EB:93:59:B3:E1:1C:74:06:BB:69:C7
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584EAE8199DB9D66DAF400762080
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/50fdc64b-34ea-3604-aada-e3a8e20a3ec0.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     14618
IP address blocks:        143.244.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:99:db:9d:66:da:f4:00:76:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=375277b1-e5a5-4e0b-8f56-f06e3dc98b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:90:22:8d:2c:dc:ac:a0:c4:1a:f5:5b:c7:
                    52:15:c4:09:aa:58:a4:de:50:1a:8e:6a:85:85:4b:
                    24:86:2d:d4:84:24:b9:23:16:82:f2:90:0e:38:5f:
                    d3:db:b1:fb:28:78:2e:3f:bf:82:02:8f:0d:8f:64:
                    13:5b:78:9a:52:d5:9f:bc:1e:b2:23:3e:4b:91:04:
                    99:ff:b5:b1:5a:85:e5:58:b2:e3:60:c7:b6:f3:00:
                    5b:b4:8c:5a:a6:c8:37:ad:19:f7:18:44:9b:79:87:
                    7b:d4:cd:92:0d:ab:10:e3:d5:02:32:bb:a4:51:75:
                    be:f2:b2:e4:97:cb:6f:82:f1:bd:54:67:8e:b4:6e:
                    05:85:46:ae:89:81:e2:92:57:65:23:91:5a:7e:ec:
                    54:20:32:fd:a1:f0:2f:b7:de:2c:75:4d:97:c6:07:
                    08:8d:cb:ba:bb:75:bf:bd:50:31:cc:70:6f:97:94:
                    a2:19:44:1b:bb:df:85:97:29:12:d1:9b:7d:ce:09:
                    db:b5:5c:9b:99:b7:27:8f:5d:9f:48:c2:03:8a:dd:
                    3d:7f:de:04:8d:59:02:58:e4:aa:dc:31:8f:62:45:
                    ff:e0:05:a1:ff:26:6a:c7:d0:be:08:8a:cc:a0:b2:
                    5d:80:40:7d:e1:ac:36:d1:e9:eb:09:b1:0c:82:d3:
                    91:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FE:87:DD:5A:4E:A6:24:2C:EB:93:59:B3:E1:1C:74:06:BB:69:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/50fdc64b-34ea-3604-aada-e3a8e20a3ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:66:be:7f:8b:bd:df:97:61:c2:69:e0:d3:a4:e2:dc:85:13:
         85:a9:58:29:7e:50:44:4a:b6:ca:c0:50:b0:bf:ec:b5:66:51:
         74:99:2b:3c:b8:89:78:8d:95:a9:20:2e:b2:ba:6c:15:b0:16:
         25:44:8d:bb:a8:89:5c:51:59:12:b4:1a:e2:d7:d8:7a:ee:c4:
         aa:9d:3f:33:fc:02:88:ac:5c:8b:2d:8a:27:94:b3:a5:e6:32:
         c1:88:bb:78:8a:c1:81:8d:a7:13:fe:c4:05:fd:d1:ff:d6:05:
         7e:3a:0c:29:b4:e8:d1:eb:6d:40:5c:bb:24:ea:a4:40:2e:3b:
         90:57:df:73:b4:8c:de:01:ba:38:45:5a:bb:4e:aa:e7:4e:3b:
         42:0a:1d:2f:52:bd:63:d4:5b:16:ed:ef:16:f1:b2:2c:6d:18:
         f0:95:71:2d:cb:3b:e1:e8:76:7d:29:6a:55:ef:f8:5e:f6:0a:
         d4:8f:5e:55:c0:a9:80:e5:ef:f5:e6:ad:19:d3:40:5f:39:6e:
         0f:55:77:96:ab:49:15:b3:56:f3:f9:57:f0:9b:f4:a4:f3:1b:
         72:9c:e6:2c:f8:90:25:ad:87:9f:b7:67:68:3b:63:67:c9:39:
         5c:3f:6a:86:77:00:3e:15:a6:95:de:1a:f2:4b:2e:2f:20:9f:
         6d:e3:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:55:00 2026 by rpki-client