Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa
File:                     86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa (raw, json)
Hash identifier:          qko8pa+q11lM1Uakwf48xdpMz93VYMed+SJu1fsm99o=
Subject key identifier:   18:46:3A:1A:3F:D8:CD:76:A4:4D:FC:A4:34:6F:FA:DA:40:E7:2A:82
Certificate issuer:       /CN=81b7ac6c-80f4-4151-a607-46f1d9c9a264
Certificate serial:       010D0C9F4328584DFA706ECA23CF3D9E30CCF0DC
Authority key identifier: 27:94:C0:58:3C:E2:19:D8:1A:33:F0:A1:F5:7F:E4:0C:06:1B:A5:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     214483
IP address blocks:        23.137.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:6e:ca:23:cf:3d:9e:30:cc:f0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b7ac6c-80f4-4151-a607-46f1d9c9a264
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=7cb787dd-ced8-4dec-bee3-79a511dc676c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:e4:dd:34:68:12:da:d9:95:c6:0e:31:76:
                    8f:ae:12:4b:92:6c:6b:de:40:d7:04:ef:8b:b0:86:
                    db:90:2d:34:c1:5d:ed:45:20:62:de:01:6e:ec:73:
                    e2:6c:92:3c:c1:70:50:71:a2:ad:1c:43:44:c3:01:
                    79:bd:ae:30:9d:34:ad:ee:57:40:92:c9:35:ae:d5:
                    08:0e:d2:a4:1a:b2:c3:ce:b0:e9:27:7d:70:57:9f:
                    f5:d7:2b:77:c7:72:39:9b:6c:90:63:95:17:86:46:
                    31:6e:39:52:53:db:43:7d:be:27:a5:79:36:68:dd:
                    8c:97:d2:5e:7a:a0:45:14:f0:f8:cf:57:a0:7c:c9:
                    67:53:39:57:33:23:e4:af:69:56:ad:ab:d5:c9:ec:
                    fe:2a:22:9a:32:e6:74:40:96:51:ae:dd:ba:dd:b2:
                    56:9e:92:5b:10:3a:a0:1a:2d:e3:95:a0:6f:eb:09:
                    b4:02:7b:17:9e:74:5f:c6:27:da:2b:26:58:52:4c:
                    83:6d:3e:58:ed:4f:89:35:d2:14:a1:f1:b3:1e:e4:
                    d8:5b:56:57:cb:f0:f9:2e:3d:20:5e:34:93:94:9e:
                    56:f1:78:74:8f:c3:56:b2:4b:40:93:cf:ce:10:48:
                    43:77:c0:73:ce:5e:1d:fd:1d:8c:fc:2a:52:2c:d5:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:46:3A:1A:3F:D8:CD:76:A4:4D:FC:A4:34:6F:FA:DA:40:E7:2A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.crl

            X509v3 Authority Key Identifier:
                keyid:27:94:C0:58:3C:E2:19:D8:1A:33:F0:A1:F5:7F:E4:0C:06:1B:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b2:3e:a3:9e:d7:da:13:e4:e9:ae:b4:86:ff:c6:14:ea:54:
         f8:1f:d1:cc:1e:7c:7c:1c:44:e9:49:6b:dd:6c:d6:68:93:78:
         41:b3:0b:dc:20:7f:89:eb:18:6c:77:ed:a0:7a:d8:48:83:be:
         96:e5:87:56:83:34:1f:a3:c4:dc:51:1b:4c:7f:e6:cd:a4:bc:
         de:2b:60:d5:4e:dc:af:91:f8:97:e3:8e:d3:89:67:f2:d4:1a:
         51:b2:06:f7:69:96:7b:0c:ee:0b:2b:1b:f1:d9:25:04:9c:d9:
         d5:1e:ea:35:b9:61:2c:9e:d6:53:fe:c5:9b:20:bc:30:3e:2f:
         b6:71:bc:c2:da:c4:01:dc:f7:37:ac:41:67:43:73:dc:65:7e:
         b7:fc:e3:69:2b:8c:4a:0b:83:27:ae:28:dd:0a:90:31:be:13:
         e3:50:4d:9b:f0:1d:e1:3c:35:08:75:63:ec:5f:73:a9:a0:94:
         19:b3:29:15:a6:06:04:a0:66:19:0b:cb:1d:b4:ca:a4:d0:3f:
         e6:08:17:b8:4d:2f:bd:46:85:8d:29:30:be:4f:ac:5e:fc:f4:
         10:00:0b:c8:21:9f:b4:91:c9:96:45:69:d4:29:ac:3c:20:0f:
         f5:e7:8a:61:ea:22:b3:7d:0c:2f:c4:de:a8:c1:b5:74:25:96:
         a0:79:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:15:57 2026 by rpki-client