Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/7e8c9917-50d4-3d43-8859-57e4e45c2a3e.roa
File:                     7e8c9917-50d4-3d43-8859-57e4e45c2a3e.roa (raw, json)
Hash identifier:          Ioe/y1OyC1N1yraqIKXSFztSI2roTKcl7ik5MS2F2eE=
Subject key identifier:   78:76:7D:53:6E:41:DC:98:DF:DB:0F:86:10:79:F0:50:80:9A:D2:2F
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584F506D474EA093C5409EE2E380
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/7e8c9917-50d4-3d43-8859-57e4e45c2a3e.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        143.244.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:47:4e:a0:93:c5:40:9e:e2:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=401c0892-cf96-49c2-94b4-a9e18e948e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:28:70:ae:30:38:fb:3b:a9:99:8a:8f:e4:
                    55:ba:c7:2f:e4:1a:4e:c3:ac:2f:07:10:e5:55:db:
                    78:38:a8:6d:34:91:3e:d5:4a:50:8c:31:f1:72:31:
                    f4:22:4b:84:70:79:40:83:a2:f7:34:f3:42:c9:40:
                    11:f0:1a:be:65:2a:c7:a4:df:0d:1d:c5:b8:b1:e4:
                    cd:a5:66:f9:f4:cf:42:b8:31:80:e8:b6:d8:73:a3:
                    22:dc:74:9a:14:2a:a3:7b:42:d8:5b:a4:ab:68:f0:
                    a6:5b:5e:b8:d8:a4:dc:d1:18:90:64:b7:6a:48:f1:
                    f8:3b:6b:ba:d6:cc:2b:cf:9c:89:f3:d4:7d:c0:69:
                    6a:4f:b1:d5:f7:66:1f:8a:b6:be:96:b4:49:b2:2f:
                    0c:3d:eb:4e:84:8a:27:e5:8c:a5:64:2d:7b:d5:83:
                    72:b3:02:b0:e8:c7:e8:3d:cc:3f:f4:9c:c2:cb:dc:
                    de:04:22:a7:a5:17:9a:a4:70:e3:c0:0a:ee:3f:ad:
                    91:54:92:1f:66:07:f6:81:35:01:89:76:dc:de:0b:
                    c9:52:20:c5:e8:7a:86:7c:2d:10:91:a5:a3:87:0d:
                    d3:a7:59:de:59:9f:d5:49:23:07:ae:bc:c8:76:7c:
                    6c:94:2e:13:34:95:cd:63:a9:66:5c:1f:22:ca:fa:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:76:7D:53:6E:41:DC:98:DF:DB:0F:86:10:79:F0:50:80:9A:D2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/7e8c9917-50d4-3d43-8859-57e4e45c2a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d2:34:77:c4:9d:09:0b:b3:ac:3e:8c:4c:5f:d8:91:ec:36:
         eb:53:2b:eb:2b:d2:51:cf:ed:24:88:42:3a:70:bd:60:f5:94:
         a0:87:65:05:57:9c:2a:72:88:ad:08:21:b3:f8:59:14:f0:eb:
         98:51:20:58:76:a9:65:d7:46:f6:bc:1b:89:45:d5:d9:a8:77:
         31:5e:18:35:e7:ef:bc:f0:21:9e:3e:57:e6:9c:74:6d:cd:b0:
         fb:42:99:98:b2:50:7a:26:b0:27:4b:e5:81:fd:65:74:2d:27:
         3e:14:2a:3f:73:54:c6:8e:be:cd:4e:fb:fd:a8:4f:2a:c1:3e:
         cd:e4:86:0c:ec:a7:d0:e6:0e:f5:09:db:ff:2c:6d:32:37:d8:
         f9:04:53:50:1d:22:51:21:d7:5e:54:d8:13:b7:63:cd:c4:1b:
         e5:12:c4:2b:d6:43:80:84:84:9c:3a:78:cc:78:a9:87:03:cd:
         2f:f9:45:7a:7f:71:d4:8b:3a:61:7b:9a:e9:6d:d0:1e:64:b3:
         82:e0:ee:2f:71:de:7d:64:49:75:e1:93:a7:0d:d1:a6:f5:85:
         a1:13:9f:4f:3e:b8:66:1a:51:eb:d5:e6:1b:e6:b5:68:10:8d:
         f4:0c:6c:75:23:61:d2:8c:b9:0e:7c:73:08:ed:74:66:9d:99:
         38:a0:3c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:57:03 2026 by rpki-client