Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa
File:                     c70dbfee-845c-3917-bfbd-449bc42023fa.roa (raw, json)
Hash identifier:          yMC3a15nkkkCd0EYkK/qSV3/bXnd2PWo5jRagQx5KZg=
Subject key identifier:   75:39:21:C9:4B:1B:49:74:B9:3D:F4:42:D3:30:59:E7:93:E4:03:99
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584F03A7EAA129D06423DDA9C680
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16839
IP address blocks:        199.91.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:ea:a1:29:d0:64:23:dd:a9:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=7432d1f5-8f31-4347-9335-3daaecaee3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:57:d2:f3:60:2f:ef:92:27:e3:af:d9:9b:5a:
                    9c:01:fc:54:a1:56:ca:a3:64:c3:60:4a:41:9a:da:
                    86:2d:a6:e3:11:1f:39:d2:9d:77:bd:2b:5c:59:eb:
                    87:76:e8:c6:8a:6d:2c:c2:12:e3:7d:f9:7f:a1:ba:
                    b1:3e:87:b2:cc:89:99:c0:28:b4:04:b7:aa:f9:83:
                    9a:24:5b:ea:cf:30:41:3f:35:1c:dc:84:a8:f4:88:
                    56:40:5b:7a:a6:58:c4:39:8e:cb:ce:e8:82:95:b9:
                    f9:d3:b1:83:b8:f6:38:64:ca:9a:60:2c:ad:7d:04:
                    b5:9b:58:7c:f3:1c:6b:8f:ee:7d:dd:84:9b:e0:6f:
                    5f:60:9f:92:1e:73:67:76:af:ac:c6:12:de:2f:fa:
                    ec:61:c6:2e:91:5b:7d:30:8f:d0:71:a8:38:f0:2c:
                    e7:58:85:c0:3d:a0:f5:52:1a:40:42:fe:53:6f:be:
                    63:48:2d:8e:f3:52:f6:44:6f:f4:6f:d1:87:ee:73:
                    ae:53:89:4a:32:6e:4a:48:95:0f:8a:dc:41:00:02:
                    64:0d:b5:5b:14:be:23:2e:8f:4e:da:c1:da:4d:29:
                    0f:0e:17:73:dc:b9:a4:1f:59:30:b1:95:54:17:2b:
                    d8:8b:ce:ec:2b:c6:18:a0:80:92:68:7d:39:1f:5a:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:39:21:C9:4B:1B:49:74:B9:3D:F4:42:D3:30:59:E7:93:E4:03:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7f:72:ae:1d:d3:ee:45:b1:77:32:5f:6c:f7:7e:4b:9b:7e:
         a6:31:25:64:a7:44:76:07:7e:e5:1d:16:25:20:31:70:8e:8b:
         38:56:ac:46:4f:a7:22:90:9d:51:b3:27:9f:d4:e9:56:cc:3d:
         cc:a7:e7:7e:d5:70:11:ee:ee:af:e2:a4:a1:1d:9b:4b:3a:e9:
         0c:6a:ef:d9:f8:aa:ea:ea:cb:30:0e:3a:ef:23:52:51:a5:71:
         43:8f:64:19:6f:8b:bf:6f:75:06:76:22:a0:af:7c:f7:db:ec:
         93:1b:35:70:9a:09:3a:ff:3e:18:8c:67:1c:f6:34:b9:4e:82:
         a6:23:43:34:87:fe:27:25:42:67:ff:de:8d:53:32:5a:fa:d7:
         77:39:95:48:47:eb:79:46:e4:80:1d:6c:25:15:44:38:da:16:
         53:af:55:3b:63:64:2a:07:6a:4f:32:62:f2:19:65:d3:05:80:
         02:e5:b3:02:e1:2d:5e:61:b9:7a:13:b4:a8:af:d8:dc:76:3e:
         92:52:f9:fb:80:8e:b0:91:3a:86:e2:4e:99:b1:c3:3f:b4:a9:
         ac:89:9b:99:09:82:c8:e1:0a:b3:66:d1:e5:19:b8:71:f1:74:
         aa:ca:8a:b5:b3:51:3f:a4:af:41:09:b3:66:b9:6e:31:65:93:
         69:34:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:45:08 2026 by rpki-client