Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa
File:                     b76a7deb-1382-321f-9cb1-899083e69c21.roa (raw, json)
Hash identifier:          tiAgO6+AzZ45E8VzimBxTEknEJUeNIimSP7ux+UMArw=
Subject key identifier:   70:63:D7:CF:27:72:8D:BF:24:AC:45:C5:50:87:22:1E:22:C0:D5:61
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584DE84B4320B1F5D33B58DF92C0
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     16509
IP address blocks:        216.139.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:43:20:b1:f5:d3:3b:58:df:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=cbb1833a-7897-49b0-bd9a-05de2ed46776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:3f:62:a1:63:4d:d0:d3:43:90:e4:f5:18:
                    25:7a:b2:ef:64:fe:2e:97:3f:9d:9c:8f:ad:84:38:
                    b9:50:14:ca:f0:cf:9c:bd:62:93:e8:ba:bb:bc:d9:
                    6e:ef:19:6f:8f:fa:3a:a0:07:d4:ed:df:40:c9:9b:
                    80:7f:0f:50:92:4e:3a:e3:15:58:e8:cb:05:9b:7a:
                    5a:79:61:2b:44:4e:33:1c:02:d9:5b:fe:5b:cf:71:
                    d5:46:c5:8c:2b:f2:d6:16:4e:e8:9e:4d:5e:20:9f:
                    2b:95:f4:48:ec:1e:de:bd:f2:50:cf:ec:f7:7d:2d:
                    04:44:ee:2d:71:73:74:d2:6f:a6:7b:8d:ff:bb:82:
                    8f:c2:6b:46:95:0c:e1:ed:71:59:73:9f:1f:5a:c6:
                    27:02:30:09:51:1c:2c:6f:fc:d9:5a:91:47:68:3a:
                    a0:1b:42:e7:ad:1a:40:cd:a3:c0:6c:e8:a7:25:0e:
                    d1:8f:83:95:0f:8c:d6:45:8b:fd:49:80:69:8e:87:
                    ea:d7:9f:3a:f6:b1:5c:ee:ff:5e:ab:47:06:bc:b3:
                    33:dc:86:47:f0:81:49:52:9a:5e:70:12:fd:63:c2:
                    9d:58:62:3e:c8:cb:28:05:ff:16:c9:60:d8:2a:2d:
                    37:72:b0:33:24:b3:82:9b:26:81:c1:fb:29:39:83:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:D7:CF:27:72:8D:BF:24:AC:45:C5:50:87:22:1E:22:C0:D5:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ee:5e:fa:34:72:62:9a:a1:6e:6d:3f:34:26:ca:6a:fd:76:
         5e:90:89:c7:e6:36:28:0d:4d:15:fa:51:eb:37:d6:a1:56:dd:
         96:01:63:b4:93:cf:2d:6b:9a:5a:41:97:28:d4:34:c3:1c:a7:
         3c:1d:82:b8:bb:23:5b:cf:e0:fd:d2:e6:06:a5:a1:f1:b7:03:
         89:59:39:4f:07:2c:6a:bf:f4:3b:85:76:7e:60:33:df:e0:ec:
         d3:dd:4a:d1:ae:21:d5:0c:52:50:b9:d5:fa:0e:a7:a1:21:8f:
         7c:0f:2b:46:9e:8f:b1:e4:8e:e1:7b:68:33:4d:58:a8:53:74:
         37:07:9d:48:a4:ed:28:90:2b:88:a6:c6:f6:42:e2:c9:6e:7a:
         7b:b0:34:48:23:01:13:04:e6:04:2f:6f:c0:f8:13:ee:5f:84:
         98:90:f6:5f:9f:0b:94:88:79:73:dd:da:37:b0:1d:26:94:7d:
         df:3b:f1:0e:75:79:a4:26:ef:cc:5e:b1:a0:1c:9a:77:71:a3:
         bf:ab:83:b1:eb:c0:9d:45:ea:fe:ff:db:33:a3:be:a7:55:ed:
         af:1b:94:2c:2c:63:e3:8b:63:60:8f:37:9c:db:cc:70:7e:a8:
         ed:b9:27:d3:be:1a:21:00:f7:69:33:cc:27:37:17:1e:8d:13:
         95:4b:2a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:52 2026 by rpki-client