Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/89be6cd1-4c67-30b4-8a68-c379e30c5985.roa
File:                     89be6cd1-4c67-30b4-8a68-c379e30c5985.roa (raw, json)
Hash identifier:          CooeMzWSdTpVGqdze9kmHXvAEPxJaw2/YCnDSqseNY8=
Subject key identifier:   0E:16:D1:2B:DA:0D:FC:16:54:12:7B:27:EC:F9:54:AE:48:8B:BE:2D
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584DD4C0826448EE08A619ACC180
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/89be6cd1-4c67-30b4-8a68-c379e30c5985.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     396982
IP address blocks:        216.25.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:82:64:48:ee:08:a6:19:ac:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=1b868d7e-b083-44e1-ac95-7e160dabdbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:16:94:18:b4:e2:a5:c0:e9:f7:70:9f:f5:
                    e2:8f:20:f0:7d:a3:1f:d6:e9:07:46:11:36:e4:fb:
                    f4:c3:cb:b7:b1:f3:66:ad:c6:5a:a9:64:e2:97:e2:
                    0c:9e:0e:ea:95:f6:fb:02:7b:4b:f9:de:3f:5e:f7:
                    38:6c:13:a0:43:b5:fb:81:85:5f:55:d9:0d:b3:e8:
                    83:d8:05:b0:90:dc:e7:88:67:ba:2c:d8:7d:f0:33:
                    be:06:85:2b:e9:a1:b3:3d:b6:20:19:34:84:90:da:
                    31:54:b6:ab:82:fd:48:49:db:1f:5a:77:f0:5a:37:
                    43:d0:07:cb:78:3c:f6:44:29:90:0b:ab:3c:f0:61:
                    97:cd:cd:b1:aa:2a:c9:f6:7e:c8:a1:67:00:ee:45:
                    5a:e1:29:a3:d5:e1:4b:a4:2e:3f:a0:82:cb:51:16:
                    a6:5d:e1:bc:97:85:1a:98:66:bc:b0:b8:e8:63:d5:
                    11:01:57:39:fd:b6:52:a3:09:34:e6:2c:ce:07:86:
                    ca:38:c5:14:b7:72:f1:15:c4:1d:df:c1:63:57:26:
                    9d:43:5f:67:d9:17:5e:36:6d:2a:61:02:58:83:a6:
                    8b:2b:81:35:19:c2:6a:de:8b:6a:d7:0a:12:f3:1b:
                    bc:83:c6:d3:8c:28:59:68:cb:b8:62:7a:66:b0:92:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:16:D1:2B:DA:0D:FC:16:54:12:7B:27:EC:F9:54:AE:48:8B:BE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/89be6cd1-4c67-30b4-8a68-c379e30c5985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.25.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:68:d9:20:4d:d8:81:a7:bc:61:91:23:f9:0a:76:7f:62:90:
         4d:2c:06:96:28:df:13:f2:34:59:4a:da:ba:d5:f6:3f:47:5f:
         df:12:a6:56:81:1a:aa:a5:02:e6:a1:9e:f2:02:4b:4e:58:3a:
         b4:39:fa:1a:d2:49:3d:71:78:b5:b4:4c:db:4a:0b:40:5c:cd:
         59:d4:21:b5:6a:cb:d2:35:58:45:f8:04:ac:f5:a2:c7:8c:5b:
         de:e9:ed:2a:62:62:25:3f:3f:ef:be:c5:fc:bf:2b:f2:a6:64:
         4a:05:16:e0:4f:10:11:9d:43:b5:59:b7:56:c6:af:e9:14:8c:
         b8:78:17:74:3b:9f:85:6b:e0:83:02:43:86:52:ef:58:5b:48:
         dd:73:58:a4:36:ad:54:b9:de:f6:d0:0e:e3:ce:f1:8a:f9:2f:
         3f:c3:1c:4f:0d:fd:c9:de:3f:06:2e:ed:15:54:6e:2a:8d:f0:
         3f:64:e2:a9:36:34:a5:4c:68:61:b5:27:15:57:37:c4:3b:fe:
         3f:47:46:15:59:2c:32:6a:7c:d9:6f:0c:65:78:d0:ef:7f:b1:
         a5:9b:aa:0a:09:55:16:de:6e:ff:f6:70:fe:8d:e3:e2:86:b2:
         f9:9f:65:5e:72:5d:6f:30:a4:fb:97:6b:90:89:d5:04:72:2f:
         f6:b6:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:26:41 2026 by rpki-client