Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa
File:                     b76a7deb-1382-321f-9cb1-899083e69c21.roa (raw, json)
Hash identifier:          LTO8KFIfS50uie8mdEEqxigYBLR1J4Uym8AjkIad5gI=
Subject key identifier:   E9:84:70:65:69:AD:2E:83:9D:F5:10:6E:02:E6:59:43:DC:D4:35:1C
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584D07ACFF203147706A2C486A80
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        216.139.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ff:20:31:47:70:6a:2c:48:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=51a157f3-c23b-41b5-aaa1-4958acfe649c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:83:8f:42:79:4a:6c:26:65:86:fe:0f:28:
                    ec:99:e8:87:9c:e3:1a:cb:d2:58:e7:9e:53:d1:77:
                    5c:0e:6f:4c:53:58:9f:d5:5e:3b:0a:48:d4:2b:3a:
                    7f:97:8a:34:cc:77:86:ac:96:2e:2d:57:ff:f6:6d:
                    93:fa:c8:1c:d2:70:a1:21:16:ae:4e:a3:f8:fa:57:
                    26:2a:ad:4d:f3:29:48:0f:bb:27:21:0d:ed:c3:4e:
                    ea:c6:f6:76:ac:1d:cf:cc:71:8e:d7:b8:f5:23:c1:
                    f3:cf:99:ce:a0:17:a8:3e:11:2a:b9:2d:04:9d:3c:
                    9e:51:f5:38:79:73:e0:60:44:b9:a2:e0:cd:12:f7:
                    4a:61:53:f6:59:0d:5b:12:fc:ef:90:f3:6f:fa:1c:
                    d2:de:8c:c4:5f:26:fb:67:a7:97:e2:fe:68:df:82:
                    ac:46:af:29:af:d7:f5:69:af:6f:4c:0d:16:e4:a3:
                    6f:90:45:fa:ee:64:57:3e:c4:de:63:9f:1d:06:8f:
                    e7:03:b3:12:2a:08:28:16:de:94:4a:14:18:f8:ea:
                    3d:15:a2:82:60:9d:90:84:6d:75:a9:e5:8d:3e:a5:
                    e1:34:be:ef:09:0b:d3:23:71:8d:5d:a2:8d:23:4c:
                    f6:59:22:b8:99:01:ef:fa:22:54:69:b4:75:5e:44:
                    9b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:84:70:65:69:AD:2E:83:9D:F5:10:6E:02:E6:59:43:DC:D4:35:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:49:37:b0:3d:97:09:ff:cf:a4:40:d4:92:66:02:07:57:
         c9:dc:e3:ed:29:23:3e:dc:28:e7:29:42:a2:08:62:94:dc:3a:
         3d:3d:71:fa:76:d5:1f:84:d6:f4:f9:8d:38:10:39:e9:47:af:
         f5:90:51:46:17:68:47:50:a9:de:34:60:13:78:4e:63:49:03:
         9a:6d:96:08:dc:48:75:f3:d8:77:68:6c:e5:7a:28:20:ca:f3:
         4b:72:98:18:d5:c6:f5:0f:a4:a4:57:1c:b1:ae:d4:4f:4e:36:
         3c:d3:1c:ea:d2:cf:c4:71:0d:2d:15:9b:1e:50:03:c1:48:6f:
         ea:8c:be:9c:91:4b:f8:c1:88:5b:d9:e2:49:5b:e3:08:ca:14:
         53:7c:97:31:c8:4f:d8:0d:77:02:b9:34:62:2d:4c:59:21:c3:
         a5:cc:53:d7:15:72:06:bc:01:7f:ae:59:f8:3c:5b:b5:47:ee:
         f8:ed:19:f1:10:ed:a3:bb:c1:70:c1:da:5e:44:9d:52:a3:05:
         70:2f:ad:26:45:0b:f7:ad:40:c5:c9:1b:1b:02:32:e1:98:f8:
         1b:ac:96:85:38:13:be:37:67:f5:8c:56:88:ae:d2:be:2a:02:
         b3:ff:ee:ce:3b:92:cb:23:f3:bc:81:b5:eb:13:8a:b6:31:93:
         24:2f:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:29 2026 by rpki-client