Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9cb7b486-b218-3602-aaf1-290e7b112f55.roa
File:                     9cb7b486-b218-3602-aaf1-290e7b112f55.roa (raw, json)
Hash identifier:          8CkWmxF/DxR1IAhCYayMI5+w0eFWjuHB2nvNykHpsPY=
Subject key identifier:   0D:77:5C:91:C3:3B:23:F4:3C:DA:82:D6:45:49:3E:FA:64:37:55:C0
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584DCAFAFC3BB3C73DD9B00FBAC0
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9cb7b486-b218-3602-aaf1-290e7b112f55.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     396194
IP address blocks:        162.210.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fc:3b:b3:c7:3d:d9:b0:0f:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=d5e63b21-40d2-4445-9f2c-0d488fc1cbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4a:18:09:f2:2b:ef:9b:00:24:82:bd:e5:d8:
                    7e:05:7b:b9:9e:84:07:a6:4e:f0:60:78:da:56:b0:
                    88:01:6e:e4:29:15:1e:a8:50:0b:e5:fd:0e:c2:a1:
                    7f:79:2a:c3:c6:f8:a5:00:62:1f:74:dd:e6:e5:18:
                    8b:57:d8:5b:a8:3d:bd:e9:6c:34:d5:e8:d6:aa:80:
                    e9:bb:c8:c1:86:f1:ab:4b:2d:a4:0d:c8:24:f6:fa:
                    d7:bb:33:bd:4d:10:ce:2e:13:3b:25:0e:01:ad:10:
                    57:eb:63:a3:39:69:e8:c8:7f:20:d6:02:bb:7e:8e:
                    21:b1:55:d0:a3:c0:d2:03:30:76:70:f8:60:e3:f8:
                    bb:15:03:84:b1:25:13:e1:37:c4:88:7c:6d:43:ea:
                    03:63:78:bb:93:90:10:e8:1f:49:f5:7f:8c:ee:f0:
                    c9:bc:69:f8:30:83:ec:f4:23:c8:18:6c:93:b7:4b:
                    27:e5:9b:e6:3b:40:9c:42:16:4d:b8:90:fb:6b:4c:
                    1b:50:4b:f6:5b:f5:dc:a9:66:24:45:a9:b1:a7:51:
                    9b:f3:13:4e:26:f7:72:e3:d1:b8:f7:eb:ae:1b:26:
                    c3:19:85:5d:ad:16:b4:84:2f:90:cf:2a:d6:37:0d:
                    ac:93:d6:27:1d:b1:31:5d:0e:28:e7:2c:61:28:84:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:77:5C:91:C3:3B:23:F4:3C:DA:82:D6:45:49:3E:FA:64:37:55:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9cb7b486-b218-3602-aaf1-290e7b112f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8b:f1:db:8f:cb:71:0c:c5:36:04:be:eb:ee:35:cd:c4:60:
         de:00:7e:e0:c4:d4:55:d5:9b:b7:5d:6a:f0:f8:6e:1e:6f:d5:
         68:07:02:11:85:70:9e:13:84:94:07:99:ba:41:07:7f:7b:ca:
         53:f1:a3:29:5c:31:23:ad:25:3a:f5:26:a8:38:82:7d:4c:13:
         59:a1:ad:24:e5:4b:33:25:2b:7a:2b:5f:92:ba:5a:9a:2f:b0:
         b4:4e:ec:19:5a:a1:12:3c:f2:af:4f:17:42:a2:59:0a:1c:d7:
         2d:35:ed:d1:ff:ad:92:c8:38:72:3b:f6:e7:05:ec:44:e6:48:
         70:08:d9:e0:54:0a:ef:2b:10:28:8f:03:8d:7f:18:df:83:e0:
         4b:fe:a1:a0:33:ef:b4:d7:00:a7:7d:6a:98:4e:3e:44:44:d2:
         e8:39:44:ae:73:e3:60:d9:3d:aa:b4:c4:3e:9e:95:65:a4:2d:
         b2:ff:50:fa:ee:02:42:4c:76:9a:b9:64:23:97:a6:09:06:5b:
         f5:4d:d8:67:93:81:60:55:00:a4:be:7b:03:c1:a1:06:6e:f3:
         e5:a5:64:7f:6e:c4:14:05:5c:ed:34:29:16:de:66:44:52:81:
         29:99:25:78:78:3e:75:f3:82:94:d2:b1:06:ab:ee:7e:5d:5d:
         3f:ae:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:32 2026 by rpki-client