Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/3aee1c38-e399-3b32-9c1f-6fb4937f4b84.roa
File:                     3aee1c38-e399-3b32-9c1f-6fb4937f4b84.roa (raw, json)
Hash identifier:          riPlodd8qTYEbSprSw7F9MbsSfytYRfgiXTE6VkgFoY=
Subject key identifier:   2A:71:FA:57:B1:4C:5B:5B:31:4F:B8:03:A6:28:71:BE:F7:19:32:B0
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584F4973D95D25273C9D5164ECC0
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/3aee1c38-e399-3b32-9c1f-6fb4937f4b84.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46841
IP address blocks:        104.193.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d9:5d:25:27:3c:9d:51:64:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=286bfd30-394b-45bf-aebe-f949c06b4eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:6e:20:82:cf:cb:a0:cc:b5:cb:cb:af:16:
                    38:ea:cb:86:b9:02:83:97:1b:70:b8:86:14:82:c1:
                    de:ba:65:e2:ac:9e:e1:59:54:49:1f:90:95:6d:9b:
                    72:e6:86:c6:2b:1e:46:83:72:9c:f5:2d:d4:e6:ed:
                    42:98:77:d9:72:1d:91:78:da:05:f1:a5:fc:93:c0:
                    9b:62:f8:af:1a:e1:72:2b:60:c2:c1:a8:6e:9d:22:
                    05:47:1b:20:68:17:0a:10:82:b0:8c:b8:d0:eb:95:
                    94:36:28:3d:68:d9:4c:12:50:b9:32:48:b3:a0:1a:
                    e7:c3:2f:6b:d9:d1:ff:9f:a5:b5:51:e8:6b:68:46:
                    85:5d:8c:b5:54:e8:53:98:6d:b4:dc:6b:92:d6:fb:
                    0d:e5:63:3d:8f:e5:a1:62:29:1f:d7:77:17:bc:ef:
                    46:5d:79:5c:49:28:8a:5f:df:18:d1:47:6e:3d:66:
                    82:a6:c0:dc:88:4f:0c:89:f5:7e:4a:77:61:88:ee:
                    13:f5:73:44:fe:fe:1d:34:ca:8b:c4:5d:6a:37:b2:
                    8b:2e:2e:cf:77:e9:4b:a1:97:a2:24:66:33:13:79:
                    9f:35:b7:52:5c:8b:f7:47:12:de:39:d8:53:1b:1d:
                    f9:43:a0:dd:27:ca:a5:2f:35:68:c1:fd:ad:fd:9b:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:71:FA:57:B1:4C:5B:5B:31:4F:B8:03:A6:28:71:BE:F7:19:32:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/3aee1c38-e399-3b32-9c1f-6fb4937f4b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:1c:f8:9b:49:d8:43:35:0c:b0:10:fc:2e:67:f8:bb:1a:
         e2:32:f8:3a:7b:f6:df:f5:bb:59:ef:a2:7e:67:c0:04:d1:87:
         21:d5:7b:e0:4b:d0:f9:03:a9:ee:71:f1:42:c1:b5:46:06:52:
         7c:08:ad:2e:c4:cf:77:dc:61:62:bf:2c:b5:79:02:54:6a:c1:
         57:aa:86:79:da:92:d6:cc:9b:56:90:8a:5d:9b:00:3b:0e:8d:
         e9:3a:f8:20:b6:d8:cc:35:2a:1e:1e:8b:c9:27:fd:8c:9c:77:
         ec:0f:42:eb:c8:f0:4f:7d:10:b4:c5:43:fe:e1:81:50:0d:7e:
         e8:f4:57:6c:96:8f:fa:8a:e9:df:22:32:bc:e5:57:e6:a3:3c:
         7d:3b:98:00:d6:48:74:36:5f:da:53:1e:f8:9f:df:7b:a5:59:
         98:fb:eb:a1:c9:c1:a5:45:ef:c4:ff:ec:4e:c7:c1:54:d3:e8:
         06:a5:e7:98:36:42:05:46:f0:db:35:11:0e:ff:a9:72:3e:ae:
         e1:cb:c1:c3:71:6e:bd:c8:f6:a2:f2:9b:4e:36:89:43:44:49:
         43:ba:25:54:fa:89:c3:3d:b0:a0:fa:1b:cb:bf:39:ad:1b:c6:
         c1:75:4f:25:46:d9:d7:37:d1:f4:c8:d1:21:8a:8c:4a:b8:87:
         91:98:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:45:13 2026 by rpki-client