Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b5649898-18b9-3351-b71f-e5c8ef100176.roa
File:                     b5649898-18b9-3351-b71f-e5c8ef100176.roa (raw, json)
Hash identifier:          vgO73zGxoz1/TiGY5ayM1MAZp/kzK++7KEYxPJA3i/g=
Subject key identifier:   F3:68:47:C3:18:36:F9:3B:44:23:5A:29:D7:73:22:62:FA:8F:5E:53
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584AC9DBB1CD8F511A636D878D80
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b5649898-18b9-3351-b71f-e5c8ef100176.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        216.139.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b1:cd:8f:51:1a:63:6d:87:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=89fc47bd-779a-490c-a1f6-40efe5a618a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:34:c7:8e:36:56:8c:67:9b:c0:e7:2f:b8:
                    c4:ca:eb:08:33:a3:44:27:fe:0e:13:63:13:3b:41:
                    f2:8a:23:92:6b:d9:0b:81:96:5f:2d:5d:c9:c5:a8:
                    f2:22:87:e4:82:59:3d:c5:4f:c4:de:20:3b:59:f8:
                    ea:04:ca:88:81:c3:46:35:f7:ed:fc:4c:d3:05:d6:
                    19:2f:24:af:2a:2c:82:26:41:f0:6b:72:6e:fc:45:
                    dc:26:5e:df:92:ce:d3:18:55:b2:54:93:5f:64:fd:
                    f8:16:a9:b0:4b:ee:2a:98:93:79:12:77:b4:04:28:
                    58:06:ba:3f:b6:1b:b7:46:51:cf:97:33:36:76:63:
                    21:ac:d8:e6:c1:06:c6:c2:a5:2b:27:e8:50:2e:81:
                    f8:4c:0d:51:be:fc:6d:f5:d5:22:a4:91:87:4d:af:
                    39:2c:5a:d5:9f:d1:0d:fd:b4:25:00:28:8a:3a:66:
                    18:4d:35:df:fc:c3:a6:2c:02:a4:ee:20:e1:36:db:
                    bc:80:5f:d3:2c:e7:39:ae:81:33:f8:dd:eb:bd:a6:
                    93:bb:0a:9a:d5:e4:aa:c4:61:eb:01:22:c3:dc:2f:
                    0f:9b:48:d7:de:fb:58:3a:a9:a8:09:c1:14:0e:3f:
                    f1:86:be:fb:61:fe:9a:e9:a6:3d:81:ea:fe:e7:d5:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:68:47:C3:18:36:F9:3B:44:23:5A:29:D7:73:22:62:FA:8F:5E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b5649898-18b9-3351-b71f-e5c8ef100176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:19:7a:b4:42:0e:31:f7:cf:5c:a6:ba:9b:df:c6:4c:c2:12:
         58:66:ae:08:aa:d0:61:e3:05:a4:51:c1:dd:33:50:13:07:98:
         7a:aa:0f:c4:27:28:ff:14:d8:ad:cf:17:16:3f:86:d4:97:3a:
         f5:0e:19:1c:6e:d0:e5:6f:33:30:3b:da:b1:54:67:ba:e7:d7:
         db:b8:39:cf:93:ad:77:0e:56:98:c2:07:a9:f2:a0:9b:ed:5a:
         c0:3a:0e:66:8a:c2:cc:56:da:56:8e:ad:16:95:2f:bb:6b:8a:
         c9:b8:31:e4:49:af:ba:79:2f:9a:02:92:c1:b8:51:56:c4:3c:
         08:33:b0:1e:96:0f:de:36:99:f1:65:5e:a9:6b:92:8d:ca:15:
         a3:79:b0:1a:9a:33:a6:ca:4f:4a:8d:31:4c:35:31:80:56:30:
         57:e0:64:64:05:08:fa:3e:10:ea:70:f0:95:41:e2:25:76:ee:
         b5:d2:ff:04:de:f0:fe:36:04:8e:f3:ed:0a:2e:cb:ad:8e:aa:
         24:9b:a3:c2:5b:80:36:c3:74:e4:c5:97:20:de:c0:03:ac:08:
         22:f5:12:20:de:54:c0:2c:a9:43:56:17:a5:f9:44:40:56:c3:
         20:69:fe:12:27:25:9d:f3:f3:00:8f:e5:e0:64:fb:38:2b:85:
         5b:e5:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:22:25 2025 by rpki-client