Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/89b210f9-d8f3-343c-b9dc-e61bce0daa47.roa
File:                     89b210f9-d8f3-343c-b9dc-e61bce0daa47.roa (raw, json)
Hash identifier:          b8LgZv0vkYGtkbjCG4z6ReNqJFretBzMX3ufVeob+I8=
Subject key identifier:   FD:4D:59:19:90:60:68:8A:7B:71:F9:DA:3B:1F:B9:04:24:43:C9:9A
Certificate issuer:       /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
Certificate serial:       010D0C9F4328584B328C39D180430CAC9CED54C0
Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/89b210f9-d8f3-343c-b9dc-e61bce0daa47.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     36131
IP address blocks:        83.229.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:39:d1:80:43:0c:ac:9c:ed:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=5ff66728-008b-401b-b88f-55ce9347cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:f1:ad:14:cf:8f:e9:2b:3a:53:4b:08:55:
                    bf:12:e5:21:01:57:be:b5:d1:84:01:5b:7e:52:3e:
                    c1:07:d9:2d:8f:4f:9a:7a:62:fc:7f:79:8f:70:ba:
                    d4:d0:ae:b9:80:25:51:b2:3c:8f:d8:94:6d:d0:4a:
                    ad:a6:4a:bf:47:12:5e:0e:53:11:86:e4:b5:49:84:
                    46:a1:6b:8d:a2:ec:38:34:d4:7b:5e:03:75:53:65:
                    eb:18:73:a7:73:2a:7c:ed:37:14:29:be:e7:ac:05:
                    d0:63:bd:c3:e5:29:b9:71:5b:ab:60:92:14:c5:e9:
                    6f:48:25:8f:71:1f:9d:64:aa:2e:5a:b8:05:92:a5:
                    84:80:aa:ef:fa:d9:32:d5:c1:6f:27:a1:05:f6:ae:
                    65:6e:bd:fa:5e:1f:d7:46:0e:31:4f:7e:06:bb:49:
                    f2:42:cb:62:07:88:79:6b:0a:f8:30:e6:18:51:42:
                    e9:68:e2:a7:e9:ac:93:9c:30:fe:c8:f8:28:94:e4:
                    6a:cb:ec:7d:05:fc:8c:d0:ce:d7:de:b4:8a:b2:8f:
                    a9:6d:d1:c7:8c:23:04:4f:4f:ef:ac:f8:b4:b0:90:
                    0b:75:a8:3e:a3:d9:9b:57:5d:83:15:f3:73:3a:7a:
                    f5:c4:15:c9:4d:54:ed:ac:7c:79:07:73:5b:c1:2b:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4D:59:19:90:60:68:8A:7B:71:F9:DA:3B:1F:B9:04:24:43:C9:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/89b210f9-d8f3-343c-b9dc-e61bce0daa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl

            X509v3 Authority Key Identifier:
                keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3c:f5:59:b2:10:1d:18:c2:3d:0b:85:fa:7f:90:8a:1a:aa:
         bc:ab:b9:4e:62:19:c9:fa:e5:0f:52:92:4d:cc:58:46:d3:e0:
         06:4c:0d:2d:87:f5:14:07:4f:3e:17:43:ca:8f:3e:70:8a:54:
         cb:0d:75:80:fd:40:cb:83:5c:7e:7e:2b:a6:d0:49:30:32:59:
         35:6c:c1:0e:c9:52:65:91:fc:34:78:14:6b:a9:2a:53:d6:66:
         60:47:e0:70:8b:bb:b1:9d:a9:7e:62:66:93:e9:39:bd:df:95:
         5a:f6:f8:09:ad:87:78:b2:c5:8f:30:a4:b4:93:81:79:12:1c:
         de:60:50:fa:56:84:f9:1f:3a:51:cf:a2:63:e7:27:49:dc:50:
         18:eb:d6:3b:19:cf:69:11:ed:67:94:96:f2:1e:be:25:2e:2e:
         cb:6d:55:77:51:4a:2c:2b:a6:a4:fb:57:7c:8d:fd:0f:a5:92:
         d4:29:30:e7:b0:b0:bc:36:a7:84:8e:f2:6c:10:36:ea:ff:ac:
         bb:41:bd:bd:16:0d:07:ba:06:36:3d:96:86:be:4f:5f:24:ab:
         2c:00:1a:14:34:a8:e6:91:fb:1d:7a:7f:c6:da:ba:87:60:8b:
         5b:01:96:52:42:ca:f3:02:35:17:81:0b:58:7e:9a:3b:26:f2:
         a7:2f:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:08 2025 by rpki-client