Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa
File:                     5bee3bdf-2522-3fcc-851d-13be40a578cf.roa (raw, json)
Hash identifier:          jK/CSbHJgJPn8StIoh7721bSlaeOhfND6GA1r8LLTEI=
Subject key identifier:   27:E6:2B:0B:86:85:F3:CE:A2:64:DA:BA:80:E9:C4:4B:98:1A:D1:36
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584EAE8199CE0DA1B1E855CA0480
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     16509
IP address blocks:        143.244.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:99:ce:0d:a1:b1:e8:55:ca:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=0377ec68-8641-4cc7-b6f8-3af83edc8a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:42:1d:c0:dd:f2:aa:88:76:49:26:87:8c:
                    23:6c:e3:3c:16:7b:27:62:3e:5e:08:17:51:41:ad:
                    c7:e6:de:a1:8f:32:f6:15:28:23:00:5a:7a:2e:5b:
                    c1:b9:d9:eb:81:d8:1a:14:ae:3d:f4:b8:30:84:ac:
                    c6:e5:0a:c2:7a:f8:22:89:13:7e:8b:5e:15:a1:d7:
                    21:20:6a:e9:ce:92:54:18:f9:36:dc:fd:c3:9e:0c:
                    2f:60:4a:1a:58:e1:56:36:c8:a7:6a:4b:16:58:49:
                    8b:13:fc:4b:82:87:93:b6:11:36:fe:33:d7:e2:62:
                    3c:e2:f5:0d:81:99:e2:61:7b:c3:a8:0c:8f:46:3c:
                    7d:54:42:34:19:6b:e8:ee:aa:a2:07:eb:65:90:cd:
                    77:eb:e2:e2:2a:bf:55:d7:0b:8f:e6:0f:59:ee:13:
                    ba:15:9f:cb:72:42:21:1c:b5:ad:c3:ac:c8:36:3b:
                    f7:84:a5:19:df:09:6d:ad:76:8c:c0:82:3d:3b:dc:
                    90:22:07:1c:84:7e:c2:8d:3b:bd:2d:2c:84:36:c0:
                    03:a3:86:21:6c:8b:d5:ad:41:98:67:3d:0c:50:82:
                    e7:1e:70:ec:7b:0b:0f:1c:ed:c4:cd:48:31:10:8b:
                    af:a9:c0:b6:bf:3a:b1:0c:6e:3f:00:b2:21:ce:1b:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:2B:0B:86:85:F3:CE:A2:64:DA:BA:80:E9:C4:4B:98:1A:D1:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:b9:c1:80:71:61:16:2f:e2:f9:7e:16:cb:7a:9b:7c:73:
         9f:8a:3f:ba:ad:a8:bb:75:8f:49:ac:17:30:63:f9:f9:ec:a4:
         31:1d:7f:6d:65:25:81:ad:90:8d:27:36:36:94:6a:ac:9c:19:
         d5:64:6a:c8:3e:c8:cf:2d:1e:f0:4c:2c:4b:84:50:7c:51:c1:
         37:df:ec:ac:7a:35:01:a6:98:b4:dd:00:80:28:fb:d6:ff:ad:
         7e:d0:71:e6:0d:02:b7:cd:8b:49:eb:1b:95:00:ee:8a:59:fc:
         04:4a:98:8d:f7:27:29:3d:1c:b2:15:3c:47:be:5d:2c:af:7c:
         00:07:3b:34:4d:41:e5:ea:87:6d:82:da:e8:d8:7d:e5:36:5c:
         ba:fb:ce:57:36:53:45:2e:46:5d:84:35:fe:7c:a9:0c:3a:fe:
         03:87:c6:6e:01:18:f3:42:94:80:2a:cd:71:7d:5e:09:1d:d8:
         1c:31:f7:cb:77:3c:3b:d7:17:e8:0f:29:62:11:43:20:e9:15:
         ce:be:8d:b9:67:e2:02:87:37:61:df:cf:4e:31:08:9b:3b:ae:
         48:f9:45:e4:86:d4:e1:8d:17:63:23:c4:fc:32:dc:1e:c9:00:
         c4:27:dd:5f:e7:a4:d6:32:05:b2:3c:d1:c6:0f:f5:66:44:da:
         e7:bc:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:57:08 2026 by rpki-client