Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/da8bc5cf-30e2-39ef-b903-1867abfd7058.roa
File:                     da8bc5cf-30e2-39ef-b903-1867abfd7058.roa (raw, json)
Hash identifier:          rCog7/D7iS1A3XUjKpbawUI+pqLmbRHjpBUW7JWoFD8=
Subject key identifier:   71:BD:83:6A:B1:21:BC:08:AF:4C:EE:1B:62:23:F0:06:8A:D8:16:FC
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584E1C7A053C7879C6111B28FF40
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/da8bc5cf-30e2-39ef-b903-1867abfd7058.roa
Signing time:             Tue 09 Jun 2026 05:37:00 +0000
ROA not before:           Tue 09 Jun 2026 05:37:00 +0000
ROA not after:            Mon 07 Sep 2026 05:37:00 +0000
asID:                     63023
IP address blocks:        104.193.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1c:7a:05:3c:78:79:c6:11:1b:28:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Jun  9 05:37:00 2026 GMT
            Not After : Sep  7 05:37:00 2026 GMT
        Subject: CN=f7d27932-d324-4278-ba01-1b0b883cb874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:5e:3e:07:e0:28:e4:fb:f8:64:24:94:a2:
                    12:23:e7:e8:bf:cd:b5:40:52:68:ef:1f:d2:8b:bf:
                    eb:04:8d:d7:a8:83:55:4c:67:f8:f0:8a:18:1c:d6:
                    e7:d5:73:f4:91:6a:e9:bb:ac:e5:c7:26:bd:5f:59:
                    19:7c:e6:01:bc:5f:68:78:d7:f1:da:2c:25:96:84:
                    70:ab:90:12:3f:85:c4:00:54:26:ac:9b:e2:7d:81:
                    97:55:41:b0:ac:e5:95:98:d2:13:93:ee:32:01:bf:
                    37:2b:f4:20:ec:05:6a:00:ea:07:e7:70:5c:69:50:
                    76:42:48:ad:28:96:23:2f:22:f0:51:56:2f:1f:04:
                    94:ca:75:8b:16:cc:bd:01:94:76:01:6f:f3:ae:83:
                    26:15:99:9d:48:04:7a:b7:11:67:cd:94:fb:12:ef:
                    e2:c0:e9:2d:48:dc:5f:09:9d:1a:f8:4f:f7:17:7c:
                    15:44:85:74:5f:5a:88:20:05:07:59:ca:91:62:35:
                    b1:de:1d:1f:c8:d2:06:72:83:f1:a8:d7:7d:3b:b6:
                    ed:9a:48:96:e5:f0:06:dc:65:9c:f1:7a:f7:38:fc:
                    a0:21:1f:de:85:67:d5:16:7d:01:c4:c3:fb:f0:89:
                    c4:d2:b4:d7:c0:9b:d6:65:cb:da:32:26:9f:85:4e:
                    69:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:83:6A:B1:21:BC:08:AF:4C:EE:1B:62:23:F0:06:8A:D8:16:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/da8bc5cf-30e2-39ef-b903-1867abfd7058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:ad:4f:49:af:d2:b7:01:af:94:c8:2e:6d:34:1b:26:ce:
         90:1f:0a:7b:79:26:a5:26:fd:e1:12:82:7d:06:03:47:54:17:
         7d:4a:91:53:59:e7:68:2f:52:37:5e:cf:fb:d6:da:a1:7b:a5:
         18:6c:1d:5a:f6:82:39:dc:a6:f4:df:89:54:81:91:fa:ba:b8:
         83:5d:6e:42:4c:97:29:e1:d5:99:5a:cb:9a:2a:07:a8:ef:0b:
         42:7e:c0:8c:23:42:06:5b:6a:60:26:7a:d2:84:50:66:61:1c:
         50:02:36:9e:cc:de:eb:17:90:4f:36:a5:a6:ec:a6:1f:18:81:
         0c:ce:f5:54:50:65:35:ff:f1:ff:78:22:09:43:6c:71:48:86:
         39:4f:36:3f:2c:b0:ee:04:ac:46:ff:e9:77:59:99:8e:db:3f:
         c2:4b:10:14:3e:9a:ba:8b:8a:8c:c8:c5:67:d8:72:23:d7:67:
         87:76:0a:69:62:7c:af:6e:65:ed:01:4b:fd:5d:23:cc:c3:73:
         3b:aa:b4:27:d4:f2:53:ec:89:6e:7c:e3:0e:78:08:8e:47:b3:
         4c:c7:e3:d6:92:51:4a:b7:9e:dd:8c:bd:7f:fe:4d:6d:43:bf:
         52:be:33:d4:2c:b6:27:60:d8:c8:ac:1a:a9:7a:97:e9:9f:53:
         2f:bd:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:27 2026 by rpki-client