Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/56ffbeea-579d-3210-b549-32cfec8a32ed.roa
File:                     56ffbeea-579d-3210-b549-32cfec8a32ed.roa (raw, json)
Hash identifier:          z2HdnYAxCE/UfqqKkIljXRE4SqaJARnlJPmpZf6fS8g=
Subject key identifier:   CE:90:FC:FC:8C:BC:E1:E6:8A:CC:89:D9:A3:35:C5:79:C4:1D:35:8D
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584F4974363735FBEF309C6EAC80
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/56ffbeea-579d-3210-b549-32cfec8a32ed.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        216.139.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:36:37:35:fb:ef:30:9c:6e:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fc34c3c7-2a7f-4561-abc9-0e89bc920644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:5b:5b:d8:f5:60:cf:61:13:80:d3:53:73:
                    05:02:3b:2e:de:db:82:22:c7:e8:02:cc:bb:88:e4:
                    9a:63:58:d5:18:80:74:94:c6:40:b2:54:71:8c:74:
                    34:80:6f:18:0d:cf:96:c3:ac:7b:cf:b2:6d:63:d6:
                    3f:e3:57:3e:cc:9c:d8:de:5b:1e:99:e5:45:5f:08:
                    cf:51:8c:18:14:88:3f:dc:0b:d5:ce:41:16:0d:32:
                    8d:0b:be:96:ac:93:77:5c:ce:92:0a:24:b6:0a:4b:
                    6c:b4:74:67:1b:26:25:51:ee:7e:92:13:9a:7a:dc:
                    50:0f:d4:90:0a:9d:2d:81:44:85:7f:7c:18:c4:0f:
                    ed:43:53:f0:0b:0c:c0:a1:ce:25:13:10:71:06:f8:
                    d4:35:c7:48:a5:2b:0f:9f:00:69:a1:80:ba:11:a2:
                    37:d3:b1:15:f0:fe:de:86:85:74:70:6e:b9:3f:11:
                    e7:f0:19:91:a9:6b:bc:c8:05:ae:bc:2a:53:7e:16:
                    63:5e:56:7b:28:71:7a:7c:e2:91:d9:2a:b9:b6:f8:
                    15:cd:1a:ca:bd:83:ea:d7:e1:49:72:d2:2d:2e:7a:
                    13:c4:68:d9:70:ea:47:50:34:b9:af:26:70:24:0f:
                    36:60:4e:9e:04:9c:99:c4:fd:ad:c2:5d:8a:6e:bd:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:90:FC:FC:8C:BC:E1:E6:8A:CC:89:D9:A3:35:C5:79:C4:1D:35:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/56ffbeea-579d-3210-b549-32cfec8a32ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:80:51:32:8e:c8:a3:eb:a2:24:fc:ef:15:72:b8:24:3a:
         42:f7:11:c1:e1:4e:f3:70:f5:7a:2d:b5:4d:46:72:50:82:10:
         53:a2:61:b0:a0:98:13:59:81:e0:e4:b7:a2:d3:cb:fc:f8:da:
         2e:8c:b6:b2:c5:88:0b:f9:13:0a:20:eb:c7:b7:a5:e3:a8:ae:
         ef:b9:56:7b:26:75:58:8f:3f:ef:ea:e7:e6:0d:ec:0d:9f:5b:
         bf:36:29:64:4b:0f:95:ac:3a:9d:57:92:69:aa:40:45:f7:5d:
         d0:0f:09:c3:e0:9d:93:9e:55:97:67:71:3f:88:62:67:19:9d:
         05:0a:80:fe:92:e4:2d:c3:03:9f:fd:83:7d:b9:5a:9b:6b:94:
         6c:a6:f0:91:f9:a0:50:98:2e:cf:ef:23:70:95:1b:0b:da:79:
         53:7a:78:5c:b8:a8:b4:04:da:f6:b9:f0:5c:4c:6d:49:e2:72:
         21:6c:b5:30:a0:05:56:16:e5:f3:7b:63:04:59:87:7b:0a:eb:
         46:af:60:a8:52:64:fc:a6:cb:ab:09:c6:b8:38:b9:82:08:9b:
         a0:b6:25:02:42:0f:06:91:c2:9b:23:6b:28:21:a0:5d:52:9d:
         2f:a3:b0:51:eb:17:55:da:2d:3c:25:5e:5d:2e:bc:76:6e:be:
         3b:aa:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:59:57 2026 by rpki-client