Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b2899e2d-906e-3527-a2ac-03f252e1468c.roa
File:                     b2899e2d-906e-3527-a2ac-03f252e1468c.roa (raw, json)
Hash identifier:          25vbAQ+0FxjN1eZgnu+Y7Jk082FZ8I+QFjqg7MHVS6Q=
Subject key identifier:   26:2D:51:EC:80:80:45:60:7D:5A:BC:56:5E:7A:15:8E:10:FC:CF:5C
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584F0DF2EDB26DC0E0B5C85A1900
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b2899e2d-906e-3527-a2ac-03f252e1468c.roa
Signing time:             Thu 03 Sep 2026 17:30:26 +0000
ROA not before:           Thu 03 Sep 2026 17:30:26 +0000
ROA not after:            Wed 02 Dec 2026 18:30:26 +0000
asID:                     33651
IP address blocks:        162.218.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:f2:ed:b2:6d:c0:e0:b5:c8:5a:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Sep  3 17:30:26 2026 GMT
            Not After : Dec  2 18:30:26 2026 GMT
        Subject: CN=bcb69e39-af7c-4827-88d4-869e1072b115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:e8:c2:69:0b:fa:f5:b8:0b:d0:d3:da:9f:
                    f0:8d:74:d4:c3:42:91:41:73:0b:e8:b7:1e:a8:34:
                    15:af:12:f7:ba:6d:42:d0:7f:f1:eb:d5:e4:b3:33:
                    6c:84:bc:93:6f:76:ef:b4:09:d5:a6:8b:61:32:76:
                    2d:c7:f5:c9:32:92:3d:1c:72:bb:66:12:dc:e5:7f:
                    40:00:b0:6c:3d:9b:69:1e:55:09:c9:a1:81:bf:2e:
                    57:b0:c0:19:16:54:8e:18:49:d7:04:8c:d6:15:33:
                    39:9f:50:2a:f0:c6:6b:46:5f:c5:3c:95:55:e2:55:
                    cc:5d:e9:a0:f5:f5:77:03:af:8c:21:49:27:45:42:
                    fc:c0:d8:d3:d1:c5:24:ff:af:d3:67:fe:69:3a:92:
                    a1:4f:49:c5:ac:25:38:8d:c2:d1:78:03:ac:54:44:
                    05:27:57:9d:e2:89:4a:bd:43:10:cd:15:be:c8:1f:
                    b4:0c:cd:ee:53:3d:2e:88:d4:15:9c:ee:35:bb:fd:
                    36:50:42:57:00:59:22:73:89:31:c7:6a:77:8e:c6:
                    1b:7c:39:78:32:fa:0b:a2:4b:20:27:c7:e4:8e:a8:
                    ff:ca:1a:10:eb:dd:3f:90:4e:a7:26:d4:96:85:8a:
                    ca:b0:86:2f:d9:49:66:38:f8:91:6f:8d:a5:5a:02:
                    c1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:51:EC:80:80:45:60:7D:5A:BC:56:5E:7A:15:8E:10:FC:CF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b2899e2d-906e-3527-a2ac-03f252e1468c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:81:a4:f5:96:6c:ea:f8:0d:f3:5c:5b:8e:9e:31:37:df:
         25:50:51:07:65:32:3c:7b:2d:10:52:df:f2:78:ff:ca:13:2a:
         65:5f:aa:c6:3b:c0:c9:fe:e7:3b:3e:02:43:df:54:8f:d7:a2:
         22:e8:bb:c9:5c:92:23:53:f2:83:3d:e4:e3:5e:f3:c0:81:97:
         71:ea:24:62:65:3f:04:93:52:fc:b7:dc:d5:12:69:0b:f0:d2:
         db:64:c7:82:45:ed:d7:3f:23:e8:30:f4:5f:f5:7f:c9:a7:e9:
         6d:77:c7:85:a9:a8:c1:99:fe:7f:6e:2a:7b:16:d7:bd:a7:1e:
         ca:66:77:2b:cb:e3:05:b4:0a:e1:ae:af:e1:a1:80:cc:e7:96:
         c7:97:2a:5e:a0:21:04:3b:5f:dd:41:3b:c0:8f:cd:51:47:eb:
         b7:dd:cb:b4:d5:c8:c7:ae:6c:8c:65:fe:5b:17:2b:ab:27:c9:
         60:46:a7:ef:69:22:51:46:61:9f:d8:07:c8:73:62:91:04:bf:
         a5:e8:88:5c:2a:b1:76:1a:b3:2c:94:94:10:eb:61:72:f3:fa:
         e2:25:c3:8f:f1:63:b9:3f:ba:dc:ae:f4:1c:b1:22:e5:79:f7:
         9a:78:0c:47:9c:6d:14:92:84:a5:a9:23:aa:ff:98:1f:56:4d:
         4a:0f:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:49:01 2026 by rpki-client