Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86a9fb10-ffb5-38bd-afee-b4c0639e69b9.roa
File:                     86a9fb10-ffb5-38bd-afee-b4c0639e69b9.roa (raw, json)
Hash identifier:          MhHd9pJ8amWLam8A9Z0FRt5CyjJV/IgiynFR8BFctJc=
Subject key identifier:   BD:17:2F:F5:4C:01:48:DC:CE:03:2B:81:72:1D:50:2C:9D:28:FC:CA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1FA9AD49FE6BA570357D17C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86a9fb10-ffb5-38bd-afee-b4c0639e69b9.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     396552
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:ad:49:fe:6b:a5:70:35:7d:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=5de059aa-df6f-43dc-90ce-e81afeedd576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5b:77:39:ee:9b:54:c3:d3:1a:71:e9:13:cb:
                    57:55:d3:30:5b:74:09:44:22:8b:58:c1:ca:b6:47:
                    b8:4d:af:ee:0a:0e:5c:69:f4:6e:6b:b7:86:63:50:
                    eb:bc:d0:91:ee:5c:9c:f1:86:4c:d6:ad:2d:6c:9b:
                    6d:60:67:ac:87:72:fd:59:80:25:35:cd:01:a8:33:
                    74:ef:f5:e6:1f:f1:78:bf:77:2b:49:ac:7d:38:0c:
                    1d:76:38:6e:29:6b:7d:07:4e:e2:7d:21:2a:63:97:
                    f6:cc:60:be:83:ee:15:ce:63:7e:43:c6:2a:f7:9c:
                    03:67:c8:ce:0c:3c:c7:21:15:47:25:fd:aa:02:33:
                    50:a3:7a:58:b4:9f:9c:ae:9d:d5:e7:44:9c:70:91:
                    55:13:ed:b8:0d:d5:47:56:7f:64:27:03:d4:97:5b:
                    40:1c:49:62:10:96:23:cb:de:1b:5a:d0:20:3f:58:
                    cb:9a:bb:e8:31:55:a1:69:66:21:e2:bb:52:59:d5:
                    b1:8f:ee:9f:11:0a:e4:a1:08:3a:88:27:f9:1a:b5:
                    64:ca:e7:7b:00:76:63:51:ff:ee:29:20:c5:16:b7:
                    99:f6:0e:d4:76:04:54:3d:00:4a:2a:76:ec:17:b5:
                    d1:d2:10:ef:6b:0a:57:e5:c9:0b:a3:53:92:69:eb:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:17:2F:F5:4C:01:48:DC:CE:03:2B:81:72:1D:50:2C:9D:28:FC:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86a9fb10-ffb5-38bd-afee-b4c0639e69b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:bb:89:e4:26:ca:04:38:83:eb:f7:ed:07:34:c6:83:b0:
         4e:5b:6c:1c:c3:fb:7d:db:a2:4f:12:5c:0d:28:f0:2b:b1:e2:
         f9:68:54:de:24:0b:af:59:97:27:ae:7a:5b:72:79:31:ef:a9:
         31:fd:38:36:fe:f1:25:9b:b5:7a:09:66:88:64:e9:9a:58:7a:
         25:76:73:0c:59:23:7f:ba:08:b0:4f:47:79:2c:e7:98:11:5b:
         47:3f:8d:1f:36:48:8d:12:65:ed:9e:be:1e:ab:77:da:8a:e4:
         85:21:b8:d3:ad:c6:b7:97:56:46:64:81:22:cb:1e:7d:e8:5c:
         6d:1a:87:64:9e:7b:f5:be:d9:ca:1c:6a:78:d4:5e:92:1c:77:
         3b:b8:d7:10:02:e8:61:73:d0:35:92:51:26:71:97:67:d6:08:
         47:d1:c7:50:d9:69:05:12:16:cf:18:2c:9a:b1:cd:05:7a:7b:
         ab:61:4a:e2:9f:2d:6b:3d:b4:0c:91:92:6f:ce:88:dc:6f:ff:
         e0:ad:78:36:92:b0:aa:b6:2f:9d:0b:ee:9a:2f:fe:80:55:dc:
         ce:ee:9d:53:34:5b:c2:32:cd:4b:3e:d7:7b:0d:9d:c0:f1:f4:
         1c:79:4e:12:ec:f6:fe:58:f0:3a:e1:d0:0b:ff:ce:de:00:61:
         97:3c:72:ee
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4fqa1J/mulcDV9F8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
NWRlMDU5YWEtZGY2Zi00M2RjLTkwY2UtZTgxYWZlZWRkNTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVt3Oe6bVMPTGnHpE8tXVdMwW3QJRCKLWMHK
tke4Ta/uCg5cafRua7eGY1DrvNCR7lyc8YZM1q0tbJttYGesh3L9WYAlNc0BqDN0
7/XmH/F4v3crSax9OAwddjhuKWt9B07ifSEqY5f2zGC+g+4VzmN+Q8Yq95wDZ8jO
DDzHIRVHJf2qAjNQo3pYtJ+crp3V50SccJFVE+24DdVHVn9kJwPUl1tAHEliEJYj
y94bWtAgP1jLmrvoMVWhaWYh4rtSWdWxj+6fEQrkoQg6iCf5GrVkyud7AHZjUf/u
KSDFFreZ9g7UdgRUPQBKKnbsF7XR0hDvawpX5ckLo1OSaessyQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL0XL/VMAUjczgMrgXIdUCydKPzKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODZhOWZiMTAtZmZiNS0z
OGJkLWFmZWUtYjRjMDYzOWU2OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBxobuJ5CbKBDiD6/ftBzTGg7BOW2wcw/t926JPElwNKPArseL5aFTe
JAuvWZcnrnpbcnkx76kx/Tg2/vElm7V6CWaIZOmaWHoldnMMWSN/ugiwT0d5LOeY
EVtHP40fNkiNEmXtnr4eq3faiuSFIbjTrca3l1ZGZIEiyx596FxtGodknnv1vtnK
HGp41F6SHHc7uNcQAuhhc9A1klEmcZdn1ghH0cdQ2WkFEhbPGCyasc0FenurYUri
ny1rPbQMkZJvzojcb//grXg2krCqti+dC+6aL/6AVdzO7p1TNFvCMs1LPtd7DZ3A
8fQceU4S7Pb+WPA64dAL/87eAGGXPHLu
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:22 2026 by rpki-client