Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
File:                     37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa (raw, json)
Hash identifier:          pRf4jA34r7CdSLMIYfnbjIX3L1gPXGDjmqBnDYdLF0A=
Subject key identifier:   F1:EE:E0:01:DA:4D:C8:47:99:85:18:11:3B:55:C0:AD:71:C6:54:E7
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285849C30FF39936B3CB5E2EDF6180
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
Signing time:             Tue 06 May 2025 09:48:36 +0000
ROA not before:           Tue 06 May 2025 09:48:36 +0000
ROA not after:            Mon 04 Aug 2025 09:48:36 +0000
asID:                     14618
IP address blocks:        216.139.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:0f:f3:99:36:b3:cb:5e:2e:df:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: May  6 09:48:36 2025 GMT
            Not After : Aug  4 09:48:36 2025 GMT
        Subject: CN=15e8894e-3e9a-4261-ad56-23a28e17c973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bc:f6:4d:63:c2:69:29:fb:62:e1:6a:c4:6f:
                    c9:5b:98:ca:65:91:a8:01:33:ea:2e:73:14:19:ed:
                    c4:e1:7d:f2:a3:b8:36:67:49:df:c4:c0:47:4c:a8:
                    fd:6d:d9:2f:c6:bd:30:d0:2f:71:e2:59:ad:ff:93:
                    bc:ac:b6:68:30:72:9d:f0:56:76:23:cb:23:5a:d2:
                    f5:01:e8:d6:95:be:8f:da:d4:47:35:b1:fe:65:b8:
                    5b:05:e3:99:ad:cf:b5:15:7f:f4:f6:e5:aa:ee:11:
                    fc:97:5c:fd:91:f0:31:b7:22:05:cb:70:92:60:eb:
                    78:33:40:05:79:f5:09:ce:ae:64:f9:3a:40:1f:d3:
                    f3:9f:4c:5b:84:85:3a:3b:7b:5d:f3:4b:21:e6:69:
                    3c:7d:8d:21:26:4b:aa:18:ec:6a:0d:88:11:d7:3c:
                    27:ea:bf:40:f0:7e:ab:e4:13:94:08:9c:78:9b:ac:
                    27:c8:4a:83:aa:ab:f6:0c:4f:b1:10:bc:74:0f:44:
                    e9:81:f8:3a:e9:21:35:ad:12:9c:b0:b2:37:fd:51:
                    ea:bd:67:d2:a9:c3:91:11:4b:10:19:5f:d5:7b:a9:
                    b8:df:79:6b:66:78:f5:55:b5:98:0d:7b:4c:14:d0:
                    c3:34:91:c5:ac:e4:5a:51:d2:4a:57:4c:ea:2b:4d:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EE:E0:01:DA:4D:C8:47:99:85:18:11:3B:55:C0:AD:71:C6:54:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:05:2a:da:d4:c1:99:6b:ed:57:2b:74:c8:65:91:66:84:
         cb:04:16:d8:93:12:ca:c7:18:a3:b2:81:f1:fc:27:64:c3:9f:
         82:18:50:90:3b:dc:cb:a0:ab:78:ff:3f:c6:a8:78:9e:cc:c7:
         cf:1a:d6:b3:6a:36:5f:a2:3e:5e:a8:cc:80:60:37:3a:5e:02:
         0c:f7:d1:c0:40:67:62:fa:88:65:9f:88:04:92:98:35:ca:9c:
         15:7c:48:2a:d0:3a:1c:7d:44:c4:2d:a4:d4:9d:a6:aa:0d:24:
         9f:49:db:b3:e5:c2:44:cd:63:7c:8e:b1:c0:49:ff:93:52:56:
         41:52:e2:9f:10:fd:8e:69:83:21:ea:5b:5a:9c:53:a3:3b:fa:
         8b:fb:1c:4f:25:5e:64:9d:ee:e2:dd:c0:2a:ad:7e:8c:11:e1:
         75:dd:cc:fd:ad:8d:77:bf:76:0d:f1:93:cc:67:d1:48:03:9c:
         9e:be:51:92:bb:7f:6e:64:7a:cc:b5:b4:f7:25:55:f1:0f:2a:
         d0:56:cc:cc:8a:f4:dd:87:58:3a:49:64:7e:f3:c7:48:3d:e6:
         e2:0e:d7:0d:a4:6d:7d:36:30:0b:a9:ff:03:76:24:6a:d3:32:
         89:98:5e:74:c3:c6:cc:ee:25:7d:3c:1b:b3:f9:44:f2:28:88:
         9e:45:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:41 2025 by rpki-client