Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/3aee1c38-e399-3b32-9c1f-6fb4937f4b84.roa
File:                     3aee1c38-e399-3b32-9c1f-6fb4937f4b84.roa (raw, json)
Hash identifier:          RE7lxTqRbu4b1H8o/0QUSXzrwyweTlBHE0XC/W97U20=
Subject key identifier:   4D:7A:60:23:2A:FF:7B:1B:93:64:B0:FD:7B:30:BE:44:0D:75:B9:E3
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584CEA5CDDBA3138D563660D7900
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/3aee1c38-e399-3b32-9c1f-6fb4937f4b84.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     46841
IP address blocks:        104.193.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:dd:ba:31:38:d5:63:66:0d:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=69459995-bb74-4581-8694-228751c5123d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:75:18:fb:1b:8c:2c:ca:3e:63:88:50:3c:
                    bb:05:a8:e9:6e:21:55:3f:69:7b:de:75:cb:18:52:
                    64:9b:7e:ac:9f:c9:79:68:fe:7e:c5:ed:31:61:05:
                    b8:27:88:30:1f:f4:9a:95:ab:d7:f4:11:1b:63:43:
                    8d:2e:9b:67:66:8e:a2:df:59:e8:95:85:84:56:39:
                    91:f5:9d:41:9a:c4:bc:20:9b:51:56:99:7a:fe:5f:
                    29:42:52:c8:5f:82:3a:e5:0c:4a:58:01:ed:bd:f6:
                    f0:f0:1d:0c:17:46:9b:39:ce:a2:ea:60:14:2b:9f:
                    92:cb:ad:11:e0:37:5f:da:36:a3:81:ed:e3:3b:af:
                    e5:66:4e:e7:49:30:48:a8:7c:a3:68:0d:f6:dc:a7:
                    23:94:cc:00:90:f3:c4:39:28:4c:10:9f:d0:de:77:
                    46:94:3a:60:8d:82:ad:2c:ec:c9:f2:4b:68:7f:60:
                    8a:f4:a4:de:b1:35:27:30:f1:16:c2:69:15:84:d1:
                    87:82:af:dd:5d:41:97:ef:40:c7:ca:3b:4a:8a:9d:
                    2f:f4:b0:7d:75:6c:26:9f:f4:fb:a4:53:90:2d:a7:
                    ce:2f:59:90:31:da:bf:40:23:32:1f:76:6a:74:4e:
                    8a:ea:eb:50:8f:ac:a1:44:08:ed:42:3a:8c:75:67:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7A:60:23:2A:FF:7B:1B:93:64:B0:FD:7B:30:BE:44:0D:75:B9:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/3aee1c38-e399-3b32-9c1f-6fb4937f4b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:4f:26:c0:aa:81:5b:32:d9:e0:22:f9:8d:0f:68:db:00:d2:
         24:ce:41:2b:4c:af:26:81:1d:88:ab:a8:68:77:18:cc:3d:e9:
         8f:56:24:69:71:4c:c4:da:d2:51:b0:90:fb:b8:d2:47:dc:af:
         3f:ec:dd:32:8f:24:8c:ad:7b:76:81:15:18:21:1b:25:f2:ec:
         af:88:45:e8:56:a3:92:10:28:0d:2e:5c:2d:93:98:31:72:96:
         cc:e1:8a:2e:24:b1:35:cf:79:01:87:4d:93:90:36:7d:b0:d3:
         96:4a:5c:1b:56:af:fe:1b:48:17:e3:2c:35:e6:8e:fc:06:ed:
         49:3b:d8:63:d0:54:87:21:7a:45:4f:a1:bf:15:be:f6:64:42:
         a1:3b:b2:29:d8:29:bb:5e:c9:20:51:80:ce:bc:d9:5f:6c:f6:
         12:e6:8c:fa:5b:7a:45:f8:8d:53:be:97:1b:4a:70:e4:63:47:
         69:aa:e3:cf:7c:55:f4:49:2d:35:6c:cf:24:c6:8b:59:1f:68:
         a2:83:e5:67:1d:ea:02:5b:5b:a2:e9:f1:d5:3f:b8:5a:03:88:
         df:b4:57:72:f6:1a:ac:e0:3c:29:dd:2d:da:fd:b5:df:cb:ce:
         63:65:7d:46:ca:68:99:3b:00:fe:9a:18:64:58:b3:cd:57:ba:
         cb:6c:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:33 2026 by rpki-client