Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/56ffbeea-579d-3210-b549-32cfec8a32ed.roa
File:                     56ffbeea-579d-3210-b549-32cfec8a32ed.roa (raw, json)
Hash identifier:          QFUDy7ES8ca6HvWjI6tFXzFOtdx1HmW+xLJXHaoVBgM=
Subject key identifier:   C8:4A:CF:DB:F5:12:4C:24:14:8E:FA:04:15:8A:E9:A6:82:2C:07:2B
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584A5765BE4DEAF7B75519C1FDC0
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/56ffbeea-579d-3210-b549-32cfec8a32ed.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        216.139.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:be:4d:ea:f7:b7:55:19:c1:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=66104e75-65f7-492b-99a0-56ac2f521728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:32:ce:00:af:cb:95:da:01:2c:61:12:6f:35:
                    85:3c:3e:bb:18:42:61:2e:2b:32:b5:25:03:b2:99:
                    3d:30:7a:3d:aa:12:57:df:7c:15:48:02:12:b1:c6:
                    42:4d:74:22:81:ff:6d:ee:52:99:07:b5:46:13:10:
                    12:70:da:7c:85:a7:30:39:6c:f1:13:e3:3d:04:d8:
                    8b:24:96:ed:e2:83:be:d8:ed:58:62:db:9c:c0:dc:
                    55:49:d0:4c:ac:d0:a4:42:b4:38:e1:a5:22:49:c3:
                    01:39:5f:32:d3:06:f2:44:c2:bc:42:d6:81:68:ee:
                    ae:4d:d7:54:ff:73:06:75:07:b9:c7:a2:5e:2a:93:
                    2a:c7:3c:5d:4a:8d:47:af:f5:64:f4:23:5b:11:db:
                    f3:9a:b1:1b:09:50:e7:5f:a5:4b:fd:16:dd:7f:88:
                    82:b8:24:65:3c:7f:e2:2f:1d:d6:8e:0c:cd:94:45:
                    41:54:95:47:21:ef:5c:a6:5e:86:c8:65:b5:da:a7:
                    1a:a1:55:9d:2c:9a:c9:5f:30:d3:95:63:d9:a1:28:
                    e5:91:c6:12:ea:5b:8a:2c:79:45:d1:20:6a:c9:20:
                    40:7d:9d:f0:db:cb:61:dd:91:05:9e:7a:ea:a2:a7:
                    cd:05:e2:0c:6c:43:ef:5d:03:50:45:d6:29:ec:44:
                    7e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4A:CF:DB:F5:12:4C:24:14:8E:FA:04:15:8A:E9:A6:82:2C:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/56ffbeea-579d-3210-b549-32cfec8a32ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8b:43:e8:7d:08:ed:9c:09:ec:0a:f7:29:18:79:73:9a:00:
         b0:71:54:30:1d:9f:98:93:e8:85:ff:a3:4b:69:9c:b7:0f:53:
         2c:44:49:05:8b:68:d1:94:10:c2:09:0f:2e:d0:3b:a2:34:ab:
         5a:5c:95:85:06:f9:e4:95:1f:b8:b1:2a:db:ff:12:c1:06:96:
         a6:62:b4:94:12:2d:2e:42:06:7e:c1:fd:10:1d:09:bb:16:9a:
         25:ad:3b:c8:26:95:15:07:7d:c5:99:78:b8:25:68:36:e0:26:
         f1:0a:43:2a:70:f8:fd:5c:f2:bf:31:8d:da:fc:a4:1a:19:66:
         4d:c4:1a:a0:5d:cb:a5:7c:14:50:cf:2a:1e:77:90:81:23:41:
         c9:d1:01:c4:48:33:91:79:a8:f5:63:fd:d6:c7:6e:4b:cc:c5:
         71:2b:20:64:2a:29:72:62:59:50:16:f9:4d:dc:a3:f6:56:4e:
         39:b4:78:38:c2:42:73:03:32:4b:7d:b3:a2:7e:11:ee:bc:44:
         8e:4e:0e:ab:49:58:62:f3:ef:59:69:03:5a:79:6d:d1:fc:44:
         a9:1a:61:b5:96:4f:d8:e0:ce:ee:e6:87:be:0c:c2:bb:9a:68:
         ad:79:ec:d3:c9:d1:8e:d1:62:39:de:f6:47:f4:96:52:fb:93:
         75:27:8e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:44:29 2025 by rpki-client