Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
File:                     37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa (raw, json)
Hash identifier:          9BsO7PHK/1waRJm1jv/0lqXD2USbxdSLHyEY3p0qDsc=
Subject key identifier:   62:4F:43:F5:85:19:55:D6:99:6A:8B:39:7B:EA:CB:5B:7A:8D:DD:0F
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584E227441AF9CB6F0ED1D0D5F00
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        216.139.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:41:af:9c:b6:f0:ed:1d:0d:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=5c47ec04-fcf5-4348-9d02-560e1d0d37a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:99:9d:33:6f:52:bf:48:18:b2:38:41:b4:
                    3a:dd:e5:23:dd:e6:80:9d:c8:88:b3:90:0c:27:fb:
                    49:ad:02:9a:d8:e5:5f:e3:45:93:62:c4:62:e7:f4:
                    fb:bf:e8:7e:aa:85:44:fc:ce:af:a0:f9:c5:8b:30:
                    c3:c4:33:41:97:ae:10:9c:f1:00:4d:42:5c:b1:b5:
                    03:19:0a:70:4c:3f:38:f8:98:29:8f:6a:67:10:ef:
                    b6:d0:8e:92:78:b7:97:10:0f:04:b4:e7:48:80:e9:
                    c0:83:1e:ab:1a:13:48:26:87:61:65:5a:54:3a:68:
                    df:f6:e3:c8:67:c1:e3:9f:4d:ef:5c:05:2f:25:54:
                    be:85:a3:11:af:a7:68:da:91:d6:5f:d8:e4:98:d8:
                    76:92:70:6e:b3:b2:5f:cc:cf:82:f5:04:00:c7:5f:
                    ab:8b:ed:87:b8:71:81:fd:33:75:d5:ea:6a:cd:a3:
                    ed:91:74:9a:25:ba:03:5f:9c:8e:60:d9:ef:7d:76:
                    e6:22:e2:04:be:a5:db:38:e7:1a:b9:77:25:85:60:
                    81:2b:67:51:f0:61:aa:a3:2a:a5:38:f1:b4:35:33:
                    b3:57:21:1e:bf:b6:dc:1f:43:77:75:f8:af:ff:35:
                    72:c4:ae:10:ca:7c:96:c1:3f:85:41:e6:73:d9:db:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:43:F5:85:19:55:D6:99:6A:8B:39:7B:EA:CB:5B:7A:8D:DD:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:61:41:99:d4:1d:1f:85:22:40:55:ec:25:96:9c:2c:4d:d0:
         bb:08:af:66:5f:a4:ec:a3:1e:67:bc:3c:28:82:76:fe:2f:d8:
         d9:04:a1:a5:0a:4e:66:e0:15:6b:12:92:4a:93:f0:5f:1a:aa:
         cc:43:7c:70:41:1c:eb:dc:fe:4d:bc:34:00:15:9d:83:42:d8:
         0b:d9:fb:ff:02:fe:25:16:0c:6e:65:7f:f3:ad:d9:7c:2d:8a:
         0c:ed:6a:1e:f6:b7:0e:34:c5:da:98:f1:79:95:16:f9:98:bb:
         19:ec:92:8a:6c:31:23:d2:ea:2e:b4:e1:2c:bf:67:86:56:ac:
         b4:be:64:ed:57:8c:01:63:07:f7:40:3e:d7:1d:95:6a:8e:4e:
         3d:59:09:e7:94:9e:01:d7:53:71:aa:5f:cc:d5:9e:c3:07:e0:
         00:e1:66:04:6e:86:9d:70:69:a0:58:cf:5b:8b:27:a7:3c:18:
         d2:78:1a:2e:04:12:c2:88:96:4d:a1:67:bd:9f:fb:d2:5b:d5:
         2a:b6:d7:6b:58:0c:37:de:fc:e1:15:30:82:9d:a6:b1:6c:c2:
         d7:ea:3e:7c:53:e7:5a:12:9e:a4:d2:da:ed:36:47:81:1c:1c:
         f4:df:dc:cf:ea:12:e0:bf:e6:2a:7f:26:46:bd:2b:7a:dd:1d:
         b2:ba:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:06:02 2026 by rpki-client