Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/fa0b83b7-24b8-3f14-986f-54a07023d9b4.roa
File:                     fa0b83b7-24b8-3f14-986f-54a07023d9b4.roa (raw, json)
Hash identifier:          J4Q3nyMp7lC5PebAG2d8eGC4ragT6NCpg1dqt3oSIeM=
Subject key identifier:   F3:5D:0B:80:C9:3A:66:67:80:43:5D:8E:A6:21:B7:39:27:57:4D:7F
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584CF85245E8D6876A579C65E980
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/fa0b83b7-24b8-3f14-986f-54a07023d9b4.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        216.139.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:45:e8:d6:87:6a:57:9c:65:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=abaa8863-f5a1-4adc-9dfc-1f386bbd3a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:50:2f:15:8f:7e:f8:16:c6:1d:6b:d6:e9:31:
                    c3:1a:12:ef:1c:09:4f:9a:33:bf:88:2f:90:7c:27:
                    89:f2:b8:3f:ee:06:6c:d2:ab:3f:2d:f2:63:53:86:
                    c5:3b:dd:f4:19:36:4d:cd:43:4b:98:43:09:9f:a2:
                    a0:b1:5d:54:30:49:01:a0:a1:0f:2f:b3:cf:80:f2:
                    8c:56:6f:02:37:d0:a8:6a:c8:49:1e:df:d7:64:d3:
                    40:a4:29:08:1c:bb:74:82:12:a1:09:f4:97:09:49:
                    e6:e7:ac:46:53:b8:e4:15:12:3d:a6:96:55:68:07:
                    51:d8:15:80:8f:7d:89:e9:e4:b7:43:c5:23:18:f4:
                    05:01:7c:b9:4b:1f:bf:c8:1e:83:f5:47:57:5e:12:
                    3b:c9:1e:6a:bb:25:62:37:e4:6e:0e:00:15:66:86:
                    a4:4b:7d:4a:6f:5f:98:5a:4a:be:ee:dd:82:df:08:
                    a0:aa:d9:b1:08:cb:82:3f:3d:cf:f6:19:9d:99:ff:
                    7c:b7:b9:34:73:3f:35:b8:32:e0:ad:dc:5e:00:aa:
                    65:3e:33:9a:43:3c:24:02:93:ff:d4:73:29:62:f8:
                    74:99:bc:43:a4:6b:bd:0e:10:24:4f:f1:1b:76:c4:
                    16:59:c9:b7:fc:76:45:51:e9:fc:be:63:c7:c7:17:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5D:0B:80:C9:3A:66:67:80:43:5D:8E:A6:21:B7:39:27:57:4D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/fa0b83b7-24b8-3f14-986f-54a07023d9b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:99:19:e5:a1:e5:8a:9b:f3:da:77:5f:21:a0:5a:4a:cf:af:
         a4:01:c1:d7:0c:2d:6f:26:8e:5d:da:bd:4f:9a:0a:ab:c8:70:
         79:04:53:50:ab:2a:0c:87:b9:80:1f:b9:1c:c8:18:99:af:0d:
         d2:ba:df:84:12:db:a7:0e:97:5e:9a:85:dc:c1:6a:f0:e1:4d:
         80:33:ea:26:8e:83:c6:2f:d6:45:4a:34:44:18:cf:6b:b3:52:
         b2:e6:d6:52:4f:fb:ab:c5:60:b7:a6:bd:50:3d:55:76:82:bf:
         8d:d1:6a:6e:ea:f9:0f:2b:50:9f:62:a2:a8:ef:69:e3:00:8a:
         0c:69:aa:03:da:5c:26:e2:78:a3:c2:5b:47:f0:5e:43:2e:e7:
         95:28:8d:99:e4:f3:9c:62:58:5f:ef:5a:24:6c:2a:85:cc:30:
         a0:b8:06:d8:12:66:88:0c:f5:81:02:f8:f0:cc:42:d9:bc:32:
         bc:af:84:fc:04:3c:01:1d:16:dc:dc:24:6b:7b:4f:57:ff:14:
         a9:75:ea:62:b1:62:15:81:8e:37:5d:2f:92:5d:af:2d:d2:19:
         42:58:17:4b:94:11:77:eb:bb:85:17:b8:5a:52:a9:11:1e:4a:
         8b:46:34:88:35:24:8a:ea:00:54:3c:22:4e:f1:3d:bf:8e:65:
         26:e2:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:20 2026 by rpki-client