Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
File:                     37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa (raw, json)
Hash identifier:          5Zc8mRRkA6r0RCaUw23xbgyIMJ5n7OcpaKH1L/RzsDc=
Subject key identifier:   6E:3A:C2:55:47:A8:79:FE:85:42:AD:B1:03:F1:F6:1B:18:80:BC:9F
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584F66C2BBF3AD970F5F3AA5BC80
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        216.139.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:bb:f3:ad:97:0f:5f:3a:a5:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=353d91bb-8c75-4798-b5b1-0461f50d343b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:4f:b8:e8:77:17:23:21:75:7a:5b:11:74:
                    52:20:98:88:04:40:d0:26:68:fb:ec:62:ec:bb:b0:
                    2f:17:b4:90:dc:97:76:65:cc:6b:9e:25:21:54:66:
                    f3:49:93:3c:8f:ea:23:0a:f8:db:33:43:ce:68:72:
                    b1:24:14:4a:fc:ae:9f:76:55:03:3b:30:7e:a7:0b:
                    f5:08:5a:ab:5f:5c:b5:83:0b:62:c0:89:4b:06:10:
                    86:d5:f9:d5:5d:00:1d:95:bf:ca:a2:10:70:0b:c4:
                    3d:ee:ec:e1:ff:73:35:ac:83:8e:d3:c1:c7:ce:3a:
                    a8:9c:49:09:d1:24:71:ec:e4:f1:a1:b4:fc:0d:ae:
                    ee:20:35:4d:e2:fe:5a:a6:1f:c6:1a:88:ba:4f:5b:
                    43:bc:b8:d6:f5:63:8d:de:af:24:f3:48:9a:b0:12:
                    13:68:95:f7:cf:29:fd:6e:a4:2f:b6:64:70:06:f3:
                    8e:39:c6:0d:61:0a:a8:a6:c4:33:54:1e:48:a2:6c:
                    50:73:bf:61:90:bb:e4:49:6b:13:ac:60:37:09:74:
                    ea:54:40:fc:7d:e6:ca:a1:77:79:ad:8c:21:5b:d6:
                    4c:e0:fb:24:38:35:77:2d:39:00:98:d6:1a:f9:2a:
                    13:60:ed:84:55:2f:33:63:d4:1e:51:96:10:19:14:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3A:C2:55:47:A8:79:FE:85:42:AD:B1:03:F1:F6:1B:18:80:BC:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:3c:26:31:c7:21:e3:97:d7:a5:4e:73:4f:a4:f1:93:a9:
         42:0a:b3:27:c3:67:29:64:4b:44:f2:1f:43:ca:7a:db:c2:b1:
         35:7e:1c:5a:2f:89:85:e8:7b:05:6a:7e:db:fc:61:28:01:7c:
         4b:a5:62:43:21:8d:57:27:21:43:cd:3b:90:b2:83:2b:c1:b8:
         1a:cd:0c:88:85:bc:ac:44:22:38:f8:aa:54:f1:a7:b2:64:a8:
         57:44:b5:34:36:70:3a:e9:cb:6a:fc:3a:00:e9:ae:6e:7b:71:
         55:d8:78:e1:80:de:a0:06:20:a7:5b:40:df:67:bb:61:df:86:
         cb:d1:70:49:d6:1e:ba:e6:d1:5d:28:f1:6e:3c:cd:2c:a9:32:
         d6:60:9b:0a:60:18:f8:a7:43:1e:fe:3c:6d:d4:ef:74:4d:85:
         a3:f1:93:f9:63:f2:a4:12:c6:2c:08:80:eb:c7:af:35:ce:da:
         ef:8f:e9:c1:4c:ad:7f:4c:7f:16:2c:6f:09:6b:d5:cf:57:4c:
         cc:3c:1a:bb:80:97:ee:36:c4:05:73:c7:16:2e:96:6c:66:ad:
         24:55:2c:17:e3:55:27:a9:e5:ca:11:01:93:5c:82:19:ff:34:
         c7:4b:28:e0:a7:47:ec:29:f6:e1:3e:92:ad:ea:ac:ac:dc:24:
         77:c7:45:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:24:23 2026 by rpki-client