Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa
File:                     53a28954-9970-39e6-a84e-6fc7573780fa.roa (raw, json)
Hash identifier:          qXj1IfJBdEvDHifBu4m94k1n6274lyZ8p+ucQHTl3Hs=
Subject key identifier:   B6:60:A3:90:84:71:15:3F:10:C6:CD:D8:56:CE:85:D6:77:66:88:D1
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F4328584F2EED12D7769E863E270068C0
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     8075
IP address blocks:        170.39.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:12:d7:76:9e:86:3e:27:00:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=2023f6c9-791b-443c-8dba-d9cb6841a293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:1d:0c:89:2d:98:ed:91:b8:9e:64:0d:53:
                    a2:74:c6:9b:39:37:23:00:af:18:fd:bf:9a:cd:08:
                    1a:82:3b:42:9f:8d:07:6e:de:2d:0d:05:81:e6:fb:
                    d5:93:dc:f6:e6:19:32:3e:50:7b:9f:f5:e9:4c:29:
                    5d:1e:14:93:bf:db:c8:1d:2b:3e:5a:9b:5e:a3:e6:
                    b5:d7:e4:1d:67:99:a0:1f:96:f9:58:fd:98:dc:1d:
                    f5:cd:13:59:1a:1d:a5:1a:ec:8b:e4:2f:86:50:01:
                    2e:96:20:55:e1:27:8d:30:58:02:7c:84:fa:e4:f4:
                    f4:77:1f:6b:c5:7d:80:41:79:fa:ef:d1:d2:66:07:
                    db:a6:76:bc:1a:28:01:73:76:ed:79:5f:82:80:e1:
                    90:11:46:34:63:69:6c:8c:4c:59:88:08:9f:fd:02:
                    6b:24:20:8d:73:f9:0f:1c:7a:c1:f6:47:bf:3a:8d:
                    aa:c1:29:10:75:b6:8b:36:01:bf:48:df:a0:bc:7f:
                    f9:cc:0b:f4:97:c3:bd:29:b9:12:9b:c8:bb:6f:22:
                    da:b1:c6:1c:0a:38:83:2b:4c:2b:60:7e:d6:19:76:
                    f9:17:fc:41:aa:91:e4:4e:a0:7e:23:4e:25:3d:8b:
                    e6:ac:c6:a2:a0:a8:a5:1c:0d:fd:17:33:76:5b:bc:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:60:A3:90:84:71:15:3F:10:C6:CD:D8:56:CE:85:D6:77:66:88:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:21:da:11:e1:ca:92:d1:63:d9:55:ee:65:2d:e8:ce:bd:e4:
         5d:99:b4:a0:00:07:12:35:f5:12:04:30:a9:98:c6:84:fc:57:
         f4:d7:c8:14:e9:ab:95:a5:e4:8a:8e:d5:a2:09:d4:48:26:73:
         c1:9c:7d:e5:15:38:f8:51:80:89:2d:aa:6b:e5:7f:a0:bd:de:
         f4:bd:3d:60:83:49:ea:d9:54:e5:96:94:53:f9:80:d4:35:83:
         07:36:53:ed:c4:a0:c8:30:b4:b4:6b:fd:24:e7:1f:c0:e5:38:
         74:4b:84:fe:46:cc:7a:0d:7a:0e:21:f9:a6:e1:bf:cd:36:69:
         51:f2:de:f4:01:77:a5:49:dd:00:75:20:43:52:0c:09:23:37:
         7d:cb:98:62:df:68:a3:22:23:a2:7e:25:f7:6c:67:6f:ac:2a:
         6c:c5:2c:c9:b9:8c:f6:c7:85:91:f9:d3:67:21:54:1c:aa:e3:
         40:00:e5:04:b1:cd:61:64:5d:93:3c:61:34:6c:b6:f1:c0:26:
         a2:25:ce:29:e3:35:0f:c4:0e:16:e2:b1:08:89:79:a5:f3:42:
         1a:6b:35:8b:9a:e8:8a:12:a6:43:95:ee:43:ee:f7:10:70:bf:
         e6:71:85:b9:be:63:f4:68:c3:87:b0:4b:29:fb:33:15:84:de:
         f5:21:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:17:41 2026 by rpki-client