Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/10a86c61-a879-33f5-bcc7-030c9b97e655.roa
File:                     10a86c61-a879-33f5-bcc7-030c9b97e655.roa (raw, json)
Hash identifier:          jO/uhmbyHChwkiKLeG5ik8oTHoqp2cn0yeefR+wngXA=
Subject key identifier:   C5:AF:EC:23:0F:04:7D:94:A5:3E:D7:6C:36:D6:2B:7C:3F:51:1C:50
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584DDA55C490076956F843BB9500
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/10a86c61-a879-33f5-bcc7-030c9b97e655.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     11215
IP address blocks:        162.210.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:c4:90:07:69:56:f8:43:bb:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=b2f014f4-a76f-4f48-bac9-7c4c4172922a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:35:dd:89:22:7d:f1:be:c2:fa:7d:15:c0:
                    cd:bd:03:c1:f5:38:0e:3e:ad:33:a5:1e:06:35:d6:
                    ea:73:10:a8:6b:b8:b0:75:b6:4b:97:80:1f:d8:ad:
                    81:be:c3:03:2b:56:3c:29:6c:3c:ac:d6:d0:0e:d5:
                    9f:63:bb:72:4c:c9:35:a9:af:1a:9c:66:65:ba:4a:
                    31:20:09:14:fc:03:d8:32:40:dd:d0:d9:09:a8:a0:
                    4a:2a:22:ef:22:7d:ba:b3:f2:52:ec:7d:1d:b8:e8:
                    54:86:0b:0c:f0:89:ba:22:a2:4b:0a:1f:24:7c:3a:
                    7f:f0:2b:1e:89:2f:f2:ff:67:fa:26:ed:57:28:f8:
                    d7:de:b0:d8:ca:64:b5:fa:c6:f3:a6:b6:23:d9:ca:
                    28:15:1c:71:f7:da:ae:09:53:3d:ce:23:7f:f8:85:
                    eb:a9:b3:06:8a:0e:c5:15:53:53:37:63:4e:b8:94:
                    3b:d4:94:14:4d:53:d2:74:27:9a:b0:cd:73:15:02:
                    93:df:8a:7e:4f:01:5c:94:d4:52:8f:dd:c9:17:90:
                    bd:a0:fe:37:90:c7:a7:97:c1:8a:5b:29:45:c7:36:
                    f6:93:a1:2c:7a:d9:f0:c1:24:4e:7f:9e:f5:88:d9:
                    94:80:04:d2:f6:68:37:9e:9e:84:79:b2:a7:dc:81:
                    37:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AF:EC:23:0F:04:7D:94:A5:3E:D7:6C:36:D6:2B:7C:3F:51:1C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/10a86c61-a879-33f5-bcc7-030c9b97e655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:5f:a8:28:32:72:c1:6c:ad:b1:54:c6:81:d1:71:3a:02:
         6d:80:75:c8:0b:28:cc:df:2a:4a:ac:4d:93:30:f0:94:75:4b:
         88:cd:5b:92:20:fe:9c:a2:30:28:dd:7d:7a:9c:a9:d0:c9:1d:
         cf:2c:35:34:e9:eb:3f:07:81:9b:01:32:8d:91:2f:71:a6:08:
         c5:60:1c:18:6f:d2:7b:55:cf:58:9b:16:07:a4:0c:e4:5d:b5:
         76:4c:92:ec:6b:d9:28:26:6e:df:64:14:03:47:c2:25:88:bb:
         7e:68:8e:fd:c7:52:55:57:75:7c:76:e1:5c:88:fd:6b:14:4a:
         84:4d:f5:78:8c:62:0f:83:f0:4a:0a:27:33:a3:81:a5:1c:a5:
         6f:7b:d6:4d:dc:f4:ac:32:8c:19:56:db:10:c1:9d:c7:42:db:
         3f:57:38:11:a5:f0:d7:3d:5a:b8:ce:8b:1c:0f:e8:82:8d:07:
         0d:9a:7e:de:b4:2c:1c:c2:5e:c5:14:00:fe:8d:78:10:27:61:
         89:21:fe:b7:36:80:e4:fa:fe:ef:f3:fb:5f:eb:b3:e8:b2:b3:
         51:53:63:52:33:7a:b8:8d:78:c3:89:7e:68:19:7b:f3:94:72:
         4e:cc:ec:47:d0:b2:c8:fd:e9:88:42:fb:5e:31:3e:57:cc:c3:
         0b:13:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 08:38:39 2026 by rpki-client