Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/fa4bd6ed-25e4-31d1-951d-90cb60846a4b.roa
File:                     fa4bd6ed-25e4-31d1-951d-90cb60846a4b.roa (raw, json)
Hash identifier:          mU99pTnF7GDH6eTsibjUDTgErQW9y3lENy68xOk7p0Y=
Subject key identifier:   B1:1A:A8:0D:0E:72:8D:EA:68:21:32:56:8E:2F:95:14:A8:C7:F2:8F
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584D7F9AA08DB75BFCF71C2CED90
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/fa4bd6ed-25e4-31d1-951d-90cb60846a4b.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        216.139.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:a0:8d:b7:5b:fc:f7:1c:2c:ed:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=62dda525-30b1-48a9-a991-63de107b39fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:b1:a4:08:f3:db:32:f2:ef:65:20:1f:b7:
                    74:ae:ac:ff:44:5f:b7:5e:86:50:7e:a7:82:58:f2:
                    58:0b:e5:63:c0:48:6b:91:e7:ae:af:0a:b4:1e:0a:
                    a4:f4:43:5d:78:79:24:dd:e2:95:a9:81:74:9c:30:
                    74:19:e3:f6:19:08:e4:ed:c7:15:9b:6a:1c:5f:2d:
                    c1:8d:38:c5:07:61:99:b9:9b:c9:6a:d7:ab:e7:9c:
                    7e:5b:6c:7d:ea:68:69:7f:30:21:25:be:3a:96:af:
                    0c:82:9a:b8:93:57:e6:c4:85:17:4a:d1:7d:70:db:
                    3c:42:d0:1a:3f:88:a7:a0:53:28:2e:9d:90:ef:d1:
                    35:f9:c1:72:56:1f:8f:54:92:54:ad:d8:64:68:08:
                    4f:2a:ed:5e:41:6b:ff:be:ce:a5:c5:f4:d1:c1:1e:
                    df:0a:10:87:f6:2a:39:5f:d3:33:1b:89:51:c2:86:
                    d2:d4:1b:64:90:8c:71:a2:32:56:18:bb:56:d3:40:
                    91:43:9b:3c:17:31:f3:d3:44:d1:b9:23:5b:94:7d:
                    54:67:91:8b:6c:83:dc:9b:5e:a6:79:05:48:fb:7e:
                    91:ab:93:c6:0e:fd:37:2a:30:c6:ca:b5:9f:22:8e:
                    5b:f2:5f:d2:8a:94:6f:30:8c:75:91:56:66:e5:6e:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:A8:0D:0E:72:8D:EA:68:21:32:56:8E:2F:95:14:A8:C7:F2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/fa4bd6ed-25e4-31d1-951d-90cb60846a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:86:8d:2b:b2:e2:33:e3:3b:f6:5e:9c:b0:4d:94:dd:7c:
         5f:05:2d:60:79:ac:a6:9a:0a:dd:fc:9e:b0:9f:f5:de:31:43:
         a7:9e:84:b9:69:92:d8:7d:d7:f6:e5:51:e6:27:6e:d5:d4:a4:
         5c:d0:82:62:d0:0d:55:60:e1:34:d1:79:2d:ce:3c:ea:ca:4d:
         98:56:7e:a0:ca:c8:4a:bd:51:93:57:28:a6:ae:d7:f7:d5:8e:
         d5:f3:70:0c:96:13:95:aa:b9:4d:a3:78:b5:76:b7:77:61:8b:
         c9:25:1d:0d:1c:3c:a6:e7:d8:3f:5c:72:34:95:49:18:44:dc:
         48:c7:66:10:69:18:e1:7f:c4:24:db:32:f8:6d:d5:e0:58:d7:
         c3:34:4f:f2:1e:cd:b9:c7:30:f4:97:12:09:fd:8f:1f:f5:3f:
         b6:8f:e2:1d:d5:39:f6:b3:bd:0a:55:8d:ea:27:12:c4:1b:4f:
         ec:39:58:d6:3b:a8:f8:90:f0:6d:9d:0d:f6:4b:b0:27:ec:29:
         9f:ed:82:71:6a:06:14:1d:1a:3b:d2:23:c7:96:6d:f3:56:08:
         6f:91:12:c9:0c:a9:7b:a9:d3:c1:bc:d7:5c:0d:67:87:0f:8d:
         c1:bd:55:a3:36:a9:16:f4:01:51:6a:a4:e8:ac:97:6b:89:33:
         ff:5c:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:47 2026 by rpki-client