Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa
File:                     eaf54f35-82ef-3086-948d-7f841dfe1f72.roa (raw, json)
Hash identifier:          pmhhZOYJMlKagKZTSOq71rS2YpWfjmYdtpxGT5qkxVo=
Subject key identifier:   DD:62:2C:E4:E7:EF:8A:13:73:88:CB:10:3E:B4:0B:92:B1:AF:94:36
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584EA79347D01C8DE9DFEF820100
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        216.139.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:47:d0:1c:8d:e9:df:ef:82:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a29dee42-2f1d-471e-bae1-b39aa124a6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:67:4f:d3:fb:af:cd:fb:64:32:79:29:a7:
                    00:06:76:d5:24:11:74:3f:98:ce:a7:17:af:8c:3e:
                    8d:2d:48:99:80:bc:12:f2:7f:0c:a8:cb:cc:e5:a5:
                    96:5e:89:9c:70:6b:79:e9:8b:9b:ee:6e:c1:78:99:
                    09:45:3d:d0:1c:ab:08:0d:a6:57:6a:f5:a0:ad:89:
                    38:cd:fe:2f:ce:a4:b3:fc:a5:fa:82:67:f6:08:1f:
                    17:95:05:67:9a:35:3e:9a:52:b8:59:0c:8c:38:0e:
                    3b:69:4b:b7:35:e7:19:67:6c:80:cb:3b:8a:b1:eb:
                    f3:61:58:b7:69:d8:bc:c8:b2:1f:7c:20:87:40:50:
                    cb:dc:67:33:b6:3e:98:99:3c:8a:27:40:d9:0f:17:
                    a9:16:1a:d2:a5:eb:f1:ff:3e:28:e5:64:27:c5:c5:
                    55:7c:ae:00:8a:9b:fc:ee:96:8e:05:c6:53:45:b5:
                    82:3b:3f:a8:a8:28:b0:95:6b:69:34:b2:75:e6:58:
                    bd:2a:d9:32:75:72:d1:bb:3f:05:6f:e8:c5:3d:fc:
                    03:57:fb:68:45:d8:50:74:b3:74:a7:08:a2:fb:17:
                    0d:fa:43:0b:1b:cd:f2:3d:41:b9:20:5c:ec:00:e8:
                    74:95:52:ea:1d:8f:1e:99:8c:13:31:71:c1:2d:25:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:2C:E4:E7:EF:8A:13:73:88:CB:10:3E:B4:0B:92:B1:AF:94:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a3:95:47:72:69:cb:81:7c:dd:03:54:33:d2:53:c1:fc:a8:
         4c:01:8f:c1:3f:a6:33:49:ed:5c:87:74:fd:3c:a2:4f:8e:16:
         8c:4a:af:2f:73:d8:4c:c8:ef:86:93:ea:99:61:b0:0d:2f:bd:
         a6:3a:8c:7b:b5:7b:be:36:59:60:33:4b:28:16:24:5c:2a:33:
         a6:37:57:66:66:e4:95:50:7f:71:b5:68:45:12:93:59:46:69:
         e5:65:0a:45:5f:e2:c2:fc:74:24:e2:a0:9e:f4:0e:cb:2f:df:
         9a:83:1c:3c:54:03:5b:22:fb:51:40:a9:b4:06:51:3b:03:c8:
         71:5b:c4:ab:bb:75:3f:5e:30:be:13:b3:8a:41:6c:9d:c2:19:
         0d:22:db:78:dc:6d:3e:a4:d5:12:94:76:2c:b1:b0:6e:1e:22:
         78:1b:1c:5c:10:46:8d:ba:c5:e1:ca:72:69:77:89:c6:99:8a:
         ad:0e:df:be:49:38:14:58:73:91:6e:87:9a:a6:1c:81:90:b1:
         e7:84:d5:17:13:1a:ee:66:6e:ff:d9:8f:77:e0:e0:15:81:69:
         6d:59:72:58:d0:1e:a4:10:93:60:d0:51:09:d0:e8:aa:f8:05:
         59:4f:87:00:87:d0:75:eb:99:25:da:2b:46:b8:77:56:5d:21:
         73:d9:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:55:12 2026 by rpki-client