Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa
File:                     1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa (raw, json)
Hash identifier:          hrPORNYsd68E3x+wKcq7T0td+dfx4lS3/39yYWUwp4k=
Subject key identifier:   B4:C2:CD:95:6A:A4:D0:75:0C:D8:54:90:F9:48:E5:4F:2F:AE:59:90
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584DCAFAF726A9A7D030CE5C3260
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     396194
IP address blocks:        104.153.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f7:26:a9:a7:d0:30:ce:5c:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=a4227374-07f6-4e96-ab37-aa7b15705607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:c5:9f:a5:03:30:0a:8d:10:24:0a:db:d2:
                    22:1d:95:23:cc:dc:0e:ad:93:7a:3e:7d:6d:1a:43:
                    85:ca:66:71:67:f4:3f:25:4e:f2:90:40:9f:d1:ae:
                    de:c3:5a:30:b2:ea:26:6e:0e:4a:2d:ee:14:60:6d:
                    9a:0a:a3:21:98:87:91:3b:d4:44:84:24:16:6b:87:
                    4b:03:04:8f:3a:b4:84:79:f5:b7:72:52:a0:be:ff:
                    25:82:02:4f:96:96:db:58:28:65:24:d6:98:55:24:
                    fb:16:99:f2:4c:cd:ce:29:8c:17:02:63:32:b2:2b:
                    83:a2:a0:24:9e:66:ea:3c:a3:d5:66:b5:41:1d:15:
                    89:ed:29:4c:2d:f0:a2:87:24:43:1a:cc:86:ee:ec:
                    c6:29:31:88:92:cf:81:d8:3a:6d:81:1f:da:43:8c:
                    e2:ff:76:4f:66:3f:c9:d8:3e:d2:b1:8e:c2:36:37:
                    1b:0b:e7:a2:6f:c3:8c:db:64:ad:5d:77:86:3b:ad:
                    9b:49:35:f9:3e:a1:f9:8c:f5:4c:9c:24:44:31:21:
                    25:6f:be:59:85:11:13:6c:1d:2c:1f:6a:ae:65:de:
                    d5:76:5f:a6:da:c0:55:20:27:cd:4a:6b:40:b4:da:
                    09:fe:db:9c:d5:41:6d:4e:6e:33:27:56:ff:92:62:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:CD:95:6A:A4:D0:75:0C:D8:54:90:F9:48:E5:4F:2F:AE:59:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:76:a4:f2:56:27:20:5f:70:ad:4a:e0:84:53:f2:f5:75:77:
         98:2a:9d:17:a8:7c:14:f1:fa:d1:8d:33:86:7c:5e:21:32:59:
         14:bd:94:b4:6a:a7:b4:60:89:80:18:ce:b7:f7:ab:c3:1a:ba:
         6a:a4:83:b6:4a:57:a8:07:55:33:f6:eb:40:13:4a:36:0b:29:
         a3:36:66:a2:6a:84:c9:a6:18:8a:00:7c:9b:ea:bd:22:0c:e1:
         2d:be:13:94:84:06:80:3d:cd:4b:bb:f3:83:93:db:a3:92:1d:
         83:d3:02:a0:db:9f:19:2a:1e:6a:97:db:98:56:e0:be:78:68:
         a0:61:c0:c9:3c:f0:bb:36:03:0e:54:44:89:40:59:e5:ed:0c:
         09:59:f3:4e:92:f7:74:b8:1f:f5:1f:bc:f8:e9:d7:d5:4c:9d:
         84:e5:c0:d5:04:51:d4:37:25:05:29:5d:dd:bd:4a:e7:96:d4:
         aa:36:61:2e:7a:3e:e7:74:de:51:1f:0f:6f:e6:a1:56:f8:25:
         07:f2:19:3f:4a:95:44:6c:db:6d:32:36:cc:5d:c3:96:84:60:
         9f:5f:c3:ec:12:7f:67:b6:0e:13:b5:03:9d:3c:03:ee:8d:8c:
         bc:ff:05:16:36:62:0c:54:8b:be:4a:87:74:42:17:91:df:61:
         c9:0c:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:15 2026 by rpki-client