Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b5649898-18b9-3351-b71f-e5c8ef100176.roa
File:                     b5649898-18b9-3351-b71f-e5c8ef100176.roa (raw, json)
Hash identifier:          KKisHPijXNDbyDPl3uD8IkJqy+nHO/gAn3yGCChTvY0=
Subject key identifier:   C9:38:BE:0B:63:80:FB:12:DD:34:3D:AF:4F:45:86:16:C8:A6:52:A8
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285849EA2798CF0C977FDF981A9E00
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b5649898-18b9-3351-b71f-e5c8ef100176.roa
Signing time:             Tue 20 May 2025 09:52:46 +0000
ROA not before:           Tue 20 May 2025 09:52:46 +0000
ROA not after:            Mon 18 Aug 2025 09:52:46 +0000
asID:                     16509
IP address blocks:        216.139.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:27:98:cf:0c:97:7f:df:98:1a:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: May 20 09:52:46 2025 GMT
            Not After : Aug 18 09:52:46 2025 GMT
        Subject: CN=6d118291-7288-495f-a4e0-e0d633d2640b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:5b:d1:95:3d:75:92:83:92:a8:c8:f4:6a:
                    86:ad:bd:72:b7:91:65:25:98:4f:04:b8:93:79:b0:
                    f7:b4:1b:f8:8e:5a:3e:05:ee:5b:93:09:31:7e:dc:
                    89:e1:d4:f5:2d:21:64:33:2d:ac:aa:0f:1a:39:88:
                    3d:3a:e4:0f:99:26:71:fc:32:0d:ca:b1:fd:41:62:
                    8f:df:82:04:37:79:92:66:30:d2:c4:c1:7a:35:d4:
                    a8:64:db:c7:16:a1:4b:53:63:a6:91:9d:e8:57:a8:
                    ef:5a:ec:bc:a2:3a:86:75:6f:fe:a8:fe:c1:31:5c:
                    44:70:0e:fd:23:54:ae:8f:55:ae:2a:99:a2:90:48:
                    5b:c7:83:37:a9:8e:6e:a1:bd:52:ab:d4:78:75:5f:
                    97:83:6e:99:ed:e0:e9:b3:21:2f:8e:43:9e:27:32:
                    30:51:31:b2:2d:8b:3a:20:e6:e6:a4:d4:b9:04:44:
                    98:a5:17:1f:cd:a8:93:9b:ba:d5:32:0f:fc:0d:6c:
                    09:9d:64:ae:6b:08:ed:c1:c8:0a:d2:de:19:39:c9:
                    8b:d6:e4:37:c6:7e:5f:64:a1:19:e0:e7:65:93:76:
                    3e:b0:31:44:a5:1a:ed:94:86:d6:2e:ab:23:61:29:
                    f6:39:ea:f6:ab:ec:99:53:76:61:76:34:84:2e:f2:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:38:BE:0B:63:80:FB:12:DD:34:3D:AF:4F:45:86:16:C8:A6:52:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b5649898-18b9-3351-b71f-e5c8ef100176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ba:ee:25:b1:d0:bc:e9:0d:ab:b5:7c:5e:61:d8:eb:13:6d:
         d2:42:90:62:a2:d6:51:9c:b1:5a:6e:22:81:99:a0:42:7a:2b:
         1f:15:14:87:d5:e7:b7:dd:ac:f5:80:c8:c0:b7:0f:83:01:e2:
         82:b7:a5:40:94:73:cd:a0:99:8b:b0:f0:56:f0:3b:0d:9d:a5:
         25:a5:52:ea:ba:6f:54:bb:1c:76:bc:d9:62:c0:26:64:cf:cd:
         80:b1:f5:d0:66:8e:cc:01:92:42:5b:37:fb:0e:b6:62:68:e3:
         68:85:77:4a:54:dc:ba:d8:56:59:8e:db:60:9f:42:75:0f:30:
         19:0a:8f:35:2e:bd:42:be:66:ac:57:b7:77:7d:08:18:00:de:
         a5:86:cb:12:07:5e:af:7d:04:09:e0:23:b8:97:c2:b5:b6:01:
         d9:3c:ce:9a:7a:a0:ee:0c:64:9b:e6:40:0d:eb:3f:c5:e8:b8:
         52:ca:21:73:a2:cd:85:49:e7:3d:27:9f:a2:43:89:d9:30:fa:
         4f:16:9f:5c:a9:04:b5:76:ea:b5:3b:54:d1:74:ae:f6:23:44:
         82:b2:8f:40:0d:14:b0:be:c6:4d:5e:38:78:37:05:4c:50:4d:
         1b:61:ba:49:6b:d5:ee:72:61:45:a6:a6:f5:41:55:46:98:23:
         ce:d9:70:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqJ5jPDJd/35gangAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI1MDUyMDA5NTI0NloXDTI1MDgxODA5NTI0NlowLzEtMCsGA1UEAxMk
NmQxMTgyOTEtNzI4OC00OTVmLWE0ZTAtZTBkNjMzZDI2NDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIJb0ZU9dZKDkqjI9GqGrb1yt5FlJZhPBLiT
ebD3tBv4jlo+Be5bkwkxftyJ4dT1LSFkMy2sqg8aOYg9OuQPmSZx/DINyrH9QWKP
34IEN3mSZjDSxMF6NdSoZNvHFqFLU2OmkZ3oV6jvWuy8ojqGdW/+qP7BMVxEcA79
I1Suj1WuKpmikEhbx4M3qY5uob1Sq9R4dV+Xg26Z7eDpsyEvjkOeJzIwUTGyLYs6
IObmpNS5BESYpRcfzaiTm7rVMg/8DWwJnWSuawjtwcgK0t4ZOcmL1uQ3xn5fZKEZ
4Odlk3Y+sDFEpRrtlIbWLqsjYSn2Oer2q+yZU3ZhdjSELvJ08QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMk4vgtjgPsS3TQ9r09FhhbIplKoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvYjU2NDk4OTgtMThiOS0z
MzUxLWI3MWYtZTVjOGVmMTAwMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ItaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE667iWx0LzpDau1fF5h2OsTbdJCkGKi1lGcsVpuIoGZoEJ6Kx8VFIfV
57fdrPWAyMC3D4MB4oK3pUCUc82gmYuw8FbwOw2dpSWlUuq6b1S7HHa82WLAJmTP
zYCx9dBmjswBkkJbN/sOtmJo42iFd0pU3LrYVlmO22CfQnUPMBkKjzUuvUK+ZqxX
t3d9CBgA3qWGyxIHXq99BAngI7iXwrW2Adk8zpp6oO4MZJvmQA3rP8XouFLKIXOi
zYVJ5z0nn6JDidkw+k8Wn1ypBLV26rU7VNF0rvYjRIKyj0ANFLC+xk1eOHg3BUxQ
TRthuklr1e5yYUWmpvVBVUaYI87ZcLw=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:47:27 2025 by rpki-client