Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa
File:                     eaf54f35-82ef-3086-948d-7f841dfe1f72.roa (raw, json)
Hash identifier:          SoL9XEVSJGQfykIreZlT1S/su/80R3c2czbouIMBWYA=
Subject key identifier:   53:1B:6D:D5:D2:7D:F3:F8:78:5C:B5:B0:1E:52:C3:B3:4C:1A:6F:44
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584DEB15E82AB14272CB297B6340
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        216.139.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:e8:2a:b1:42:72:cb:29:7b:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=c369b502-4c18-497d-aa3d-204ae49f820c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:b2:c6:ac:8a:e5:07:6e:2a:2f:31:3c:8d:
                    f4:00:81:b6:c1:d5:c5:7e:76:08:24:5c:7b:da:58:
                    d6:57:fc:0e:7c:be:a4:c4:0a:a5:d0:30:95:dd:93:
                    09:79:c5:4d:b1:e1:d0:f6:8c:c3:91:d5:34:12:45:
                    d3:36:70:a1:33:47:7e:13:aa:5a:40:80:74:a6:3d:
                    7b:7b:2d:6e:60:5c:4e:81:8b:56:ab:ed:1f:d7:80:
                    e7:49:a0:8c:88:cb:b8:54:fe:50:9c:50:80:a7:9c:
                    f8:70:8a:1d:0c:34:b7:cd:e2:bb:85:49:a5:b6:68:
                    08:97:8e:2d:a2:ea:b4:31:7b:ac:98:93:09:87:37:
                    5b:11:2f:81:1f:6e:bf:19:32:bb:11:8e:76:69:44:
                    fb:ff:e7:aa:f6:01:76:37:2c:8c:e3:d3:ca:73:5c:
                    f1:c9:08:b9:4f:72:74:90:64:d9:ed:de:52:df:cb:
                    22:2a:8c:57:cf:7c:f3:8b:81:0c:8f:32:c1:e7:61:
                    37:ce:bd:ba:b2:1e:e6:fa:84:b9:98:03:90:3a:b7:
                    ca:99:15:e7:ab:0e:16:af:a3:82:2a:84:27:71:d5:
                    b7:a7:22:75:1c:c3:c5:64:91:4a:b0:7a:cd:71:de:
                    93:38:a5:5b:d4:e3:5f:44:ee:3b:6e:cf:1b:d4:35:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1B:6D:D5:D2:7D:F3:F8:78:5C:B5:B0:1E:52:C3:B3:4C:1A:6F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:47:d9:d0:bc:e8:91:b4:f2:6e:04:db:98:a8:eb:c4:e2:65:
         1a:9f:c2:6e:2a:fa:c4:6c:29:d3:61:0f:a9:97:ac:c2:dc:fe:
         b5:23:1e:71:86:3e:98:bd:28:f5:5d:70:73:2b:d2:68:4d:e2:
         7f:18:b2:1d:49:ff:e9:a5:d6:ce:f5:14:6b:6c:e6:30:c7:fb:
         92:c0:78:7e:c1:28:2a:a7:db:06:d4:c1:73:55:d0:33:16:61:
         19:f1:f1:f9:65:fd:f8:59:61:13:b5:9f:01:75:2a:62:e1:b6:
         d6:f8:a0:eb:53:20:8a:a6:9c:12:1b:e2:56:b9:9a:4c:12:13:
         3f:fb:b2:47:d9:93:c9:c9:db:25:d4:30:7b:0b:cf:28:27:5a:
         72:77:55:51:65:38:e3:0a:96:00:60:47:f9:ae:5c:06:a6:c0:
         3d:04:4e:f4:be:f8:c7:d3:06:78:03:c8:b3:d2:f1:28:04:e5:
         30:9f:0d:f8:5c:5a:20:fd:2b:1d:e6:d4:67:c2:a0:76:42:b5:
         c0:a7:62:44:a8:6a:ef:5a:c6:fa:ed:3e:55:9d:e9:cc:fa:9c:
         b5:e6:fa:e1:e1:67:b4:56:b3:6a:ea:4a:a3:ee:a1:6b:f9:0a:
         2e:9a:20:30:88:1e:b5:15:82:85:10:1f:c9:12:1c:09:a9:f4:
         95:3e:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:03:14 2026 by rpki-client