Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa
File:                     39dd6475-e512-3d33-a668-8df455daedf3.roa (raw, json)
Hash identifier:          6K+H5pidIZ2wPbYRvS2nz9mIvAMKtaeiz5YV3UH7frU=
Subject key identifier:   76:A8:AF:AB:3F:1F:C5:45:5B:2A:71:11:24:29:69:10:BA:99:63:70
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584B2A2C2D44DFAA179B9EAF4D00
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     46841
IP address blocks:        104.153.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2d:44:df:aa:17:9b:9e:af:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=bd120f40-3d88-4457-b4e9-13eb46744c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cb:f3:fd:72:9b:db:d8:02:71:74:5f:39:18:
                    23:be:4a:86:2b:50:63:17:64:b0:b6:30:f8:c0:cf:
                    8f:cb:97:dc:30:d8:d2:64:18:b4:6c:6c:ca:9d:a3:
                    b9:47:54:d7:0a:a4:ea:c3:40:a1:be:28:aa:f6:02:
                    00:c8:9c:28:9e:5d:15:fb:bf:41:7b:77:85:87:ec:
                    54:93:de:65:a6:60:dc:4c:05:ea:d7:28:25:1a:b6:
                    29:ce:a7:80:ab:ef:f7:64:1d:0f:33:b7:35:7f:e1:
                    cf:38:c3:0b:cb:db:e9:c4:91:2b:d6:e0:1d:1a:b0:
                    8d:84:8b:fa:a7:bf:de:63:50:cf:4a:3d:5f:f1:b1:
                    1f:37:44:1c:d8:70:f6:f8:37:15:41:b1:32:f8:7a:
                    95:a6:74:ae:57:7d:db:58:e7:b5:89:54:53:1f:5c:
                    13:6c:91:0a:15:13:8d:44:9f:c6:1f:d7:06:83:74:
                    e4:f2:4a:2a:9d:25:6d:55:1f:99:96:34:06:9f:c0:
                    56:f4:8b:38:db:a1:97:49:7c:6f:43:65:54:a3:19:
                    54:e5:80:16:7c:94:59:71:0e:e2:67:8c:f4:f2:c7:
                    4c:97:a3:0b:e3:88:ea:f0:2b:ac:5e:a1:9e:99:db:
                    58:2c:8b:21:ac:ff:d4:dd:fb:96:4f:42:87:1f:0e:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A8:AF:AB:3F:1F:C5:45:5B:2A:71:11:24:29:69:10:BA:99:63:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0a:da:0f:c4:c9:fd:27:9b:e9:2f:aa:15:86:64:95:45:e4:
         70:81:80:30:ed:bf:fb:61:ca:9a:37:80:25:65:ec:6d:7a:32:
         dc:41:3b:2f:62:58:cc:5b:2b:05:b3:96:e4:df:10:fd:00:4e:
         77:a6:b1:d9:6a:9a:36:c6:2d:7b:a1:75:5b:3d:af:b7:e6:a1:
         45:eb:3a:7d:bf:e2:78:f0:68:1d:79:7a:34:b3:b4:53:40:49:
         c9:25:96:39:1c:ae:a3:5b:92:d0:77:dd:31:fa:54:d6:b7:70:
         59:16:85:9f:9b:a8:a0:3d:02:92:a3:a1:8c:f3:c2:38:59:6d:
         a8:04:e6:34:8b:33:68:8d:7c:3b:00:22:91:52:67:94:b2:b2:
         b4:32:34:eb:0e:76:1f:de:45:9a:3a:d5:a8:73:4e:da:07:a8:
         60:42:77:7e:4f:a4:32:28:1a:44:5d:fb:49:b7:fc:0c:3a:ac:
         4e:e8:b8:3e:5b:45:d2:c8:7b:4a:96:dd:e1:c8:81:20:f9:a8:
         08:88:f3:4d:6d:18:f9:23:d6:0b:4d:99:e8:d4:49:13:84:b2:
         19:ad:b5:34:a1:e2:8e:0d:cb:3a:38:84:fa:98:9c:1c:41:d3:
         71:48:fd:34:78:a0:ec:85:40:18:cb:6a:1c:cb:6a:85:48:ee:
         6e:67:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:21 2025 by rpki-client