Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa
File:                     5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa (raw, json)
Hash identifier:          QgNK2bR+Sr445wGN0veIraCdDlSJccQH3xm2Yd3pF+M=
Subject key identifier:   F6:72:69:A0:E8:5B:FB:CB:AA:6D:CE:C5:44:BC:42:95:5E:FD:9A:E3
Certificate issuer:       /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
Certificate serial:       010D0C9F4328584DA97AB2308DF44C5055BB2780
Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     20
IP address blocks:        199.89.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:b2:30:8d:f4:4c:50:55:bb:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=72c8ce41-cc62-46ac-98f5-133bfc8ecbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:28:83:67:cc:51:f1:ec:dd:30:4d:d7:b8:
                    c2:44:44:13:47:d5:98:da:ae:32:da:9a:77:92:18:
                    0e:0b:a6:f0:42:4c:9f:1e:fa:69:bc:8d:c5:8a:40:
                    09:ff:51:1f:9e:68:95:65:ba:da:68:e7:83:7a:1a:
                    d6:b1:c4:fc:ca:5c:1e:8c:4f:f8:c5:17:8f:5c:96:
                    cd:e4:7c:6a:c3:e0:a5:32:69:52:e0:59:d7:ba:c8:
                    52:8d:70:80:d0:30:82:55:d7:fb:10:4f:1f:b1:d2:
                    f5:b9:d9:1b:3e:2d:04:c9:da:16:00:26:68:f8:e4:
                    bd:e0:e4:e8:27:52:96:ae:3d:f4:75:8a:6d:e3:31:
                    4d:2d:82:c2:df:28:d8:4a:8c:73:b5:69:80:72:e5:
                    89:7b:40:e0:e1:4c:a5:b2:9e:b0:e4:11:20:04:d1:
                    60:27:26:85:10:84:bc:b2:bf:e5:43:5d:ff:79:66:
                    f5:84:38:0c:4b:7e:0c:64:2d:59:a2:f4:5b:7a:c6:
                    af:39:13:c6:1a:c2:9a:be:dd:94:4b:74:07:62:94:
                    83:5a:f9:67:80:51:c4:97:e2:51:f5:bf:fa:e8:1d:
                    27:b3:d3:5f:47:02:e8:92:bc:e5:b9:82:d5:af:2d:
                    aa:c6:c7:fb:4e:e7:e9:b0:c1:d2:1d:57:5a:f5:d9:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:72:69:A0:E8:5B:FB:CB:AA:6D:CE:C5:44:BC:42:95:5E:FD:9A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl

            X509v3 Authority Key Identifier:
                keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.89.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:46:08:dd:a2:65:79:d9:b7:3b:2b:ed:fd:c4:e0:c4:d5:00:
         3f:97:64:3f:62:c2:69:72:87:f2:74:db:1a:28:75:e3:90:8e:
         17:e7:de:4a:1f:00:a7:7f:97:00:70:95:7c:71:8c:88:e9:99:
         f3:d3:a5:f0:8a:f6:59:ce:5b:8a:be:79:2e:c3:d0:75:4d:67:
         e7:d4:21:dd:89:1d:7e:ce:72:80:78:cc:78:91:57:5d:2d:55:
         81:9c:3d:3c:4e:02:53:75:a9:6f:75:bb:fc:03:44:47:dc:a6:
         53:71:df:ef:da:8d:f3:05:91:30:04:ee:e6:61:61:cd:54:3c:
         30:8d:f3:a9:35:9d:e7:7f:f5:bc:3e:10:3e:66:35:2a:1a:5a:
         27:d5:1e:7e:7b:65:04:ec:9e:09:28:e0:41:75:9d:92:16:d0:
         83:c4:a2:b2:33:37:3b:35:26:e6:ce:05:4f:7b:38:8e:5d:ae:
         a9:fc:b7:e5:f7:db:d3:b5:b1:74:12:86:91:ea:8c:94:3a:a5:
         b5:01:33:6d:63:ff:5f:35:30:e2:73:3d:17:3c:68:d6:41:09:
         70:77:d4:66:93:98:bf:40:ee:66:11:39:58:b9:d7:c1:53:3b:
         e0:4e:15:62:90:ec:83:fc:06:df:ad:04:ee:2d:83:a1:d3:0a:
         5c:7b:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:31:46 2026 by rpki-client