Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa
File:                     8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa (raw, json)
Hash identifier:          TjS/YVcmRyIFhBKy8McjRpXq+riHCx9k0u6HvjO7yCs=
Subject key identifier:   BB:61:15:66:E9:99:78:8C:CD:D9:00:57:A0:B8:B9:69:6D:0B:BD:0C
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584E3E5F220FBD845C679E2C9700
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6453
IP address blocks:        64.86.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:22:0f:bd:84:5c:67:9e:2c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=1669e86c-0b1d-4e50-a183-28b03cffd838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6c:4c:09:fb:83:86:df:2a:08:e8:d0:1d:a4:
                    2f:58:42:95:8f:34:38:a8:1f:6f:79:b5:a0:b8:6e:
                    19:0e:89:04:2d:a9:79:c5:1c:b2:c6:30:0c:1b:59:
                    61:89:d3:1f:47:1f:cd:6d:7b:8d:7d:17:59:88:8b:
                    d8:f0:73:70:6a:09:5a:55:cb:64:7c:ea:b9:c9:e3:
                    59:db:bb:16:d4:11:4b:12:27:63:49:e0:7a:4c:3c:
                    de:c9:e5:c0:44:ae:07:41:30:a3:fb:7c:a4:fc:ed:
                    ea:82:63:d3:b6:df:04:d9:08:f1:47:74:49:63:19:
                    e1:fa:34:6b:7b:8d:f9:b5:13:6d:6f:b3:41:ff:b9:
                    b8:de:e3:4c:1d:e6:bf:19:42:81:48:8f:e3:c6:44:
                    44:6c:54:0d:50:b4:0c:06:44:89:cd:53:46:e2:62:
                    42:35:f7:7a:c2:10:04:2b:dd:df:de:fc:15:8d:f6:
                    67:27:39:d6:89:94:86:d0:51:88:5d:6d:9b:67:b5:
                    3d:c1:11:ed:58:5d:42:fe:4e:1f:fd:bd:6c:79:ff:
                    9b:2a:33:bd:61:97:47:90:c8:63:0e:43:31:dd:43:
                    75:77:4d:f6:4f:06:d6:3f:fb:ff:df:ac:f0:c2:32:
                    e7:c7:51:22:c1:57:3c:b8:88:38:ee:84:45:22:b6:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:61:15:66:E9:99:78:8C:CD:D9:00:57:A0:B8:B9:69:6D:0B:BD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:4d:b7:28:51:27:ce:eb:9a:8b:c1:90:fa:98:ab:93:82:
         80:e2:a7:42:ca:f2:c6:a3:e5:c0:d1:71:c7:0e:b2:6e:5f:6f:
         78:1d:1d:f3:e9:ed:5a:ce:37:5c:c4:cd:70:2e:95:7b:84:54:
         1a:ea:19:ea:dd:2a:b5:bb:73:6d:d1:b5:a4:f6:b8:30:bd:71:
         2f:db:ed:ae:81:79:f7:c0:7b:33:ec:d5:11:f8:a7:90:c8:68:
         71:bb:ce:16:9b:14:ba:bb:1d:3e:79:ef:2d:d6:25:da:58:c6:
         a5:5a:08:39:2b:19:51:2d:47:77:ed:e5:f6:02:3c:c4:3d:0b:
         f2:cb:19:1d:8b:0b:65:47:2c:ba:7b:8c:48:13:8b:be:c5:65:
         22:6e:c2:87:a3:13:ee:23:9f:88:8f:0d:30:5e:47:35:8f:9e:
         62:46:fe:c0:3f:ef:5e:a8:65:18:39:e7:a8:29:64:f8:37:93:
         dc:69:90:9a:66:ad:69:d2:ad:01:05:d7:18:17:c7:9d:60:86:
         d3:90:77:66:30:b7:58:df:8e:b3:76:71:9d:62:fc:95:08:ae:
         a4:82:9e:1e:62:b6:8d:aa:6f:4f:e6:73:e7:f4:7a:17:20:0f:
         70:e0:7a:4b:e6:76:06:0e:22:8c:bf:99:ed:fd:f7:27:1f:4e:
         6e:11:d9:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XyIPvYRcZ54slwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MTY2OWU4NmMtMGIxZC00ZTUwLWExODMtMjhiMDNjZmZkODM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2xMCfuDht8qCOjQHaQvWEKVjzQ4qB9vebWg
uG4ZDokELal5xRyyxjAMG1lhidMfRx/NbXuNfRdZiIvY8HNwaglaVctkfOq5yeNZ
27sW1BFLEidjSeB6TDzeyeXARK4HQTCj+3yk/O3qgmPTtt8E2QjxR3RJYxnh+jRr
e435tRNtb7NB/7m43uNMHea/GUKBSI/jxkREbFQNULQMBkSJzVNG4mJCNfd6whAE
K93f3vwVjfZnJznWiZSG0FGIXW2bZ7U9wRHtWF1C/k4f/b1sef+bKjO9YZdHkMhj
DkMx3UN1d032TwbWP/v/36zwwjLnx1EiwVc8uIg47oRFIra+5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLthFWbpmXiMzdkAV6C4uWltC70MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvODc4NmYxNjctMDlhZC0z
NDg1LWFiZGItNGJkYjEwZDFmNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFZxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtPTbcoUSfO65qLwZD6mKuTgoDip0LK8saj5cDRcccOsm5fb3gdHfPp
7VrON1zEzXAulXuEVBrqGerdKrW7c23RtaT2uDC9cS/b7a6BeffAezPs1RH4p5DI
aHG7zhabFLq7HT557y3WJdpYxqVaCDkrGVEtR3ft5fYCPMQ9C/LLGR2LC2VHLLp7
jEgTi77FZSJuwoejE+4jn4iPDTBeRzWPnmJG/sA/716oZRg556gpZPg3k9xpkJpm
rWnSrQEF1xgXx51ghtOQd2Ywt1jfjrN2cZ1i/JUIrqSCnh5ito2qb0/mc+f0ehcg
D3DgekvmdgYOIoy/me399ycfTm4R2Wo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:23:02 2026 by rpki-client