Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa
File:                     88089700-6560-3403-a85d-651c59fddc52.roa (raw, json)
Hash identifier:          wuQMmjfm2y1xTfodMpeP5d0IKlTInPc1FdmJnbICetI=
Subject key identifier:   8B:D8:B0:42:05:0F:EF:AA:92:34:1E:85:2F:9C:45:BB:49:49:FF:D2
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584CEA5CD6DF5FABB27043443D40
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     46841
IP address blocks:        162.218.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d6:df:5f:ab:b2:70:43:44:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=df1216d0-3b9d-49a8-b7f4-43b01b6dbe83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:4f:7c:9e:79:12:45:bc:ed:8b:6e:bc:ab:
                    8c:e4:b9:87:7e:98:45:b4:b9:7e:42:19:de:75:73:
                    e5:22:12:4f:23:de:49:95:a7:5a:1d:b3:eb:79:62:
                    3a:50:bf:0c:45:bf:26:80:36:33:26:31:7f:2c:67:
                    f9:83:33:2f:74:c0:37:66:89:de:b0:3c:33:e1:65:
                    7c:fe:11:a2:ad:7a:f3:ca:24:59:28:91:57:6f:5f:
                    2e:14:b1:38:97:bc:41:90:4e:90:58:0b:e4:ea:c6:
                    35:49:c6:f2:84:63:11:51:f0:07:d3:e6:8d:b6:ef:
                    49:d3:b1:fa:cf:43:00:6b:02:05:f6:d1:4c:a4:c0:
                    d8:53:bc:19:6f:e6:43:8e:09:48:fc:c2:2c:44:a8:
                    56:03:02:f0:c7:df:65:2e:6a:7b:12:ca:21:17:fa:
                    67:9b:37:8a:56:a8:d0:97:22:ba:35:17:89:a9:e6:
                    5c:ca:c7:83:da:c1:10:0b:63:6a:83:fe:3f:ee:1c:
                    2b:ad:0a:0a:5d:3b:74:13:d7:f9:c1:7c:24:96:b9:
                    f3:d0:7b:62:d2:b0:ab:ed:ba:88:df:fb:22:95:5a:
                    9a:14:1c:db:d5:22:4e:53:09:03:06:35:b3:1a:eb:
                    65:96:56:70:a0:9b:4c:23:fd:1f:1d:ff:8c:cc:1f:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D8:B0:42:05:0F:EF:AA:92:34:1E:85:2F:9C:45:BB:49:49:FF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:72:67:60:5a:18:7f:68:f2:de:b2:b4:11:86:9a:9c:98:
         cb:8e:e3:a1:7f:4c:71:c5:d5:36:08:cc:49:16:ff:80:38:44:
         cb:8c:83:46:39:de:6e:73:26:86:81:7b:71:9e:db:2c:e4:df:
         66:15:8c:ff:f3:0c:a2:12:f8:47:fb:f4:e0:79:d7:02:18:8c:
         9c:e7:13:bc:fc:43:1f:0c:16:75:bc:a6:de:b8:d9:0f:28:2d:
         08:88:1a:3a:e2:f9:ec:66:cd:87:64:e7:77:06:a5:e5:1c:f4:
         3f:1e:e2:a0:bb:c6:b2:b6:a4:0b:7c:7e:7c:b1:6f:77:b5:ae:
         72:f4:df:c4:27:99:c6:5e:0f:0e:3c:9d:a7:ff:f6:ca:92:ad:
         86:43:9d:db:1d:1e:16:52:bf:97:f1:e0:72:ea:50:55:d3:41:
         de:01:ed:1a:6f:dd:af:11:04:22:88:67:a3:30:7b:a9:56:9f:
         91:c9:ab:25:dd:1b:15:a8:57:0e:6b:b1:96:b4:9e:39:dd:43:
         bd:aa:37:df:07:4c:a3:b9:2b:48:41:07:54:25:a2:b0:d8:7a:
         5f:60:16:03:fe:5d:d5:aa:28:ad:f1:a5:cf:13:28:49:59:60:
         35:85:c6:31:78:48:0f:01:81:d2:93:bb:16:36:68:10:a6:b5:
         28:87:03:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:56 2026 by rpki-client