Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa
File:                     86e4edff-6e07-3702-ac55-43bc214c832b.roa (raw, json)
Hash identifier:          obqTGLmtKGvofXUqiNnJjrVyTvELx5HlLyRlkfJ63pA=
Subject key identifier:   48:94:DC:D4:A2:EC:4B:12:69:62:04:F0:80:77:9C:0D:5F:ED:3F:E8
Certificate issuer:       /CN=ae6aa33d-df94-457a-9298-bc765c153d31
Certificate serial:       010D0C9F4328584E50849803B9853FDF10875900
Authority key identifier: 43:B3:76:5F:D9:DC:39:C7:6A:D4:F9:BE:50:50:21:74:DC:E3:E5:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     63023
IP address blocks:        23.139.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:98:03:b9:85:3f:df:10:87:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6aa33d-df94-457a-9298-bc765c153d31
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=aa87f582-7fb5-4e01-b562-7360d3b6cfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:2f:7a:19:fa:a2:af:e9:b7:d2:3d:14:ed:
                    3d:fc:d6:fd:6c:25:73:49:dd:94:ff:32:e0:09:95:
                    03:0b:ce:7f:3f:3e:4a:c5:55:77:70:0f:8c:45:8e:
                    2a:c5:38:65:17:ad:09:b9:b5:10:df:c3:96:8d:98:
                    28:f5:83:42:c4:65:82:e1:57:a9:db:93:6c:3c:f5:
                    05:a1:67:7d:d8:61:24:10:ba:9a:04:41:78:83:34:
                    ce:54:3b:6b:6e:5d:d5:3b:05:6d:0f:0b:cb:46:45:
                    2d:56:65:fc:06:b3:05:0e:4a:86:a5:d4:e8:8d:b2:
                    ff:94:cb:b7:99:14:bb:02:dd:e6:55:70:9a:72:9e:
                    13:f4:0b:8b:74:19:70:7c:9d:c5:10:d4:93:34:ef:
                    54:40:99:fa:30:6d:a7:3d:53:bb:ce:27:e4:7e:e5:
                    8c:e6:9a:72:8e:78:f7:91:64:fe:41:b4:48:50:23:
                    be:31:6f:56:d4:68:d0:ae:b2:eb:06:9c:f9:c3:78:
                    fe:16:16:b8:b8:61:36:b7:fc:19:72:de:39:64:cb:
                    73:08:28:3a:9c:80:eb:bd:39:b3:e8:54:a8:6e:75:
                    5f:e4:d1:cb:ef:3d:3c:84:1f:60:be:8f:3e:12:fa:
                    39:17:ef:95:f5:3a:3f:c3:5c:f8:41:a6:d6:67:25:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:94:DC:D4:A2:EC:4B:12:69:62:04:F0:80:77:9C:0D:5F:ED:3F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.crl

            X509v3 Authority Key Identifier:
                keyid:43:B3:76:5F:D9:DC:39:C7:6A:D4:F9:BE:50:50:21:74:DC:E3:E5:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a3:45:b4:76:f2:f2:6e:4f:80:26:fa:27:87:13:36:d9:08:
         e2:a3:14:e5:3f:a7:25:a4:13:8e:31:74:c1:a6:51:22:c5:57:
         ce:32:e0:7a:f6:93:d1:9b:b2:81:c1:74:22:2c:3a:ed:cb:c4:
         a6:17:3a:b9:d6:e1:52:d3:26:2c:b7:87:fb:b7:20:18:a7:a8:
         21:2d:0d:48:ae:63:94:15:2c:6c:a3:f6:73:30:47:e5:d1:17:
         1a:3d:34:2d:c8:c2:b4:8f:a2:cb:ba:dd:fc:28:31:08:11:3e:
         59:de:ba:4e:b8:4d:b5:99:e3:12:2a:2b:06:66:18:dc:72:ce:
         65:bf:04:64:e7:9e:18:76:00:9d:de:f2:dd:61:6a:96:40:cd:
         3c:cb:34:8d:bd:3c:71:ee:d3:81:4c:e6:3a:a8:1c:48:7a:dc:
         e9:bc:67:5d:c8:da:2a:87:bc:54:8d:b8:95:9a:a9:2b:bd:07:
         93:be:71:7b:6f:3a:36:b7:09:57:4c:f7:69:ef:45:92:08:1c:
         53:53:3b:37:7e:95:75:96:e6:87:fb:1f:51:5e:21:a1:35:58:
         57:f2:1a:18:ad:1c:c3:fb:ee:f6:97:05:5b:1f:19:38:66:b8:
         97:48:83:54:50:6c:ef:c1:bf:3c:05:24:28:b7:88:a7:df:c2:
         36:1d:3e:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJgDuYU/3xCHWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU2YWEzM2QtZGY5NC00NTdhLTkyOTgtYmM3NjVjMTUz
ZDMxMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
YWE4N2Y1ODItN2ZiNS00ZTAxLWI1NjItNzM2MGQzYjZjZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD0vehn6oq/pt9I9FO09/Nb9bCVzSd2U/zLg
CZUDC85/Pz5KxVV3cA+MRY4qxThlF60JubUQ38OWjZgo9YNCxGWC4Vep25NsPPUF
oWd92GEkELqaBEF4gzTOVDtrbl3VOwVtDwvLRkUtVmX8BrMFDkqGpdTojbL/lMu3
mRS7At3mVXCacp4T9AuLdBlwfJ3FENSTNO9UQJn6MG2nPVO7zifkfuWM5ppyjnj3
kWT+QbRIUCO+MW9W1GjQrrLrBpz5w3j+Fha4uGE2t/wZct45ZMtzCCg6nIDrvTmz
6FSobnVf5NHL7z08hB9gvo8+Evo5F++V9To/w1z4QabWZyWczQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEiU3NSi7EsSaWIE8IB3nA1f7T/oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZTZh
YTMzZC1kZjk0LTQ1N2EtOTI5OC1iYzc2NWMxNTNkMzEvODZlNGVkZmYtNmUwNy0z
NzAyLWFjNTUtNDNiYzIxNGM4MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWU2YWEzM2QtZGY5NC00NTdhLTky
OTgtYmM3NjVjMTUzZDMxL2FlNmFhMzNkLWRmOTQtNDU3YS05Mjk4LWJjNzY1YzE1
M2QzMS5jcmwwHwYDVR0jBBgwFoAUQ7N2X9ncOcdq1Pm+UFAhdNzj5aIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZTZhYTMzZC1kZjk0LTQ1N2EtOTI5OC1iYzc2
NWMxNTNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4skMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAajRbR28vJuT4Am+ieHEzbZCOKjFOU/pyWkE44xdMGmUSLFV84y4Hr2
k9GbsoHBdCIsOu3LxKYXOrnW4VLTJiy3h/u3IBinqCEtDUiuY5QVLGyj9nMwR+XR
Fxo9NC3IwrSPosu63fwoMQgRPlneuk64TbWZ4xIqKwZmGNxyzmW/BGTnnhh2AJ3e
8t1hapZAzTzLNI29PHHu04FM5jqoHEh63Om8Z13I2iqHvFSNuJWaqSu9B5O+cXtv
Oja3CVdM92nvRZIIHFNTOzd+lXWW5of7H1FeIaE1WFfyGhitHMP77vaXBVsfGThm
uJdIg1RQbO/BvzwFJCi3iKffwjYdPkg=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:23:40 2026 by rpki-client