Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/05a16b4b-498c-32d0-9bda-23091b06e97d.roa
File:                     05a16b4b-498c-32d0-9bda-23091b06e97d.roa (raw, json)
Hash identifier:          3JXuUrqM6U06jzKlcSsOhFsi+bl4g13tCUMPq0kAlYM=
Subject key identifier:   E0:28:4A:64:D3:C9:9A:81:D7:64:D6:38:5F:3A:33:FC:EA:6E:72:55
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285849EA29386B9250201EDD2EB4C0
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/05a16b4b-498c-32d0-9bda-23091b06e97d.roa
Signing time:             Tue 20 May 2025 09:56:02 +0000
ROA not before:           Tue 20 May 2025 09:56:02 +0000
ROA not after:            Mon 18 Aug 2025 09:56:02 +0000
asID:                     14618
IP address blocks:        216.139.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:29:38:6b:92:50:20:1e:dd:2e:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: May 20 09:56:02 2025 GMT
            Not After : Aug 18 09:56:02 2025 GMT
        Subject: CN=2959f7ef-4893-4e42-9eac-afb1d0f16d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fc:c7:40:08:2e:46:b8:d3:d5:90:bf:21:d5:
                    ac:a6:6b:3a:c5:5d:ac:07:6c:6d:8f:0d:e3:7f:98:
                    94:51:08:e7:52:e7:23:12:61:27:b2:77:f5:9a:e1:
                    12:ae:7e:44:b3:9e:14:cb:f0:de:ef:0b:b2:2a:cb:
                    b4:4b:ef:26:f6:d8:82:4f:f0:c3:eb:1c:60:ae:71:
                    70:cd:48:02:45:a8:fa:62:67:85:03:67:2b:b4:0c:
                    68:41:5a:ff:1e:93:db:fd:cb:6b:cd:be:38:c2:75:
                    6f:8c:a1:ea:a4:16:8c:3e:88:3c:7c:b7:2b:80:92:
                    20:79:05:ce:b1:0c:c7:0d:ac:b1:78:35:47:81:d2:
                    bd:96:d3:3c:e7:18:e6:55:6f:b1:53:d4:df:30:ea:
                    a5:74:84:cc:c8:f1:37:97:cd:8b:a1:cc:04:87:00:
                    77:e3:47:12:61:4b:94:4b:21:5d:fd:ee:7b:9a:2d:
                    1c:02:ad:1f:d5:4c:40:3f:16:a9:44:36:87:70:4f:
                    3a:89:01:64:45:36:6d:c0:c4:3c:14:b7:83:4d:cd:
                    08:a4:1d:d4:a1:49:1c:a5:22:5b:f3:21:56:00:47:
                    77:41:68:58:70:56:d1:c0:ec:95:02:10:5f:54:a9:
                    4c:c5:cf:8d:30:2b:8f:a7:31:ed:83:86:18:4f:ee:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:28:4A:64:D3:C9:9A:81:D7:64:D6:38:5F:3A:33:FC:EA:6E:72:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/05a16b4b-498c-32d0-9bda-23091b06e97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:91:cd:01:06:8d:e7:2a:c7:6d:2e:26:05:2f:41:3b:b3:
         30:d5:2f:0d:c4:6f:32:77:e3:60:9e:8c:1e:2a:fb:72:78:b6:
         02:71:56:e9:96:c5:96:27:ff:f6:e8:68:16:d6:60:27:e7:bc:
         48:f4:f4:d9:d4:62:93:eb:73:6c:58:e3:0f:1f:7f:c4:10:bf:
         a2:82:ce:69:e4:a4:b0:b7:21:6d:8e:83:5a:a3:8c:27:78:f3:
         17:38:14:d2:00:ed:f4:9d:14:b9:6a:54:77:43:8f:70:e1:b7:
         f9:e0:13:d6:ff:b8:bd:d5:f1:91:de:a2:0d:c2:00:62:c8:a9:
         eb:a0:a2:14:02:7b:0d:0c:2d:6f:4b:ec:b6:f3:07:89:bd:df:
         87:2f:fa:15:ef:ad:1b:cf:1b:fe:26:e6:60:83:0e:db:8d:c0:
         56:ed:45:0e:8b:cc:dd:5b:6b:4f:43:b0:ea:63:af:ab:b2:5d:
         94:96:1d:e0:45:1a:88:31:db:92:68:9c:e8:61:c2:2a:c0:63:
         3c:d7:37:e2:be:30:af:0f:08:80:2c:68:83:34:ed:7a:a0:fd:
         ba:53:1f:04:86:77:a6:f6:bf:4d:ff:40:b4:66:b8:a2:2a:f3:
         c7:ef:d2:4a:87:6d:d0:9f:2e:a8:eb:ae:d6:89:23:5d:44:9d:
         b1:bf:3d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:15:03 2025 by rpki-client