Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa
File:                     eb9326df-0150-3250-b938-62f7bde0ad4b.roa (raw, json)
Hash identifier:          LZp2PHRxaOkVFNSIcw0AbcqmdJHu8EVYuX6qx+r9X6g=
Subject key identifier:   29:C2:A1:32:F5:01:A7:B1:00:14:42:B6:CA:76:C6:AF:34:03:F5:68
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584AB650F358FC407CD92DB791C0
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     399441
IP address blocks:        104.153.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f3:58:fc:40:7c:d9:2d:b7:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=e9897c21-dc4a-4c23-9d6a-81a20e74dd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:7f:b2:f5:66:58:44:2b:df:5f:db:01:9f:
                    82:96:04:48:89:ab:37:7c:35:a3:47:9c:45:81:53:
                    25:64:5d:bd:bc:87:07:e9:bf:95:5d:de:ec:ce:19:
                    39:5c:f6:21:71:c1:28:94:ba:53:f6:16:d8:8a:3d:
                    03:1d:38:e4:a1:8c:58:c3:da:a4:56:f0:f2:9a:8d:
                    6d:66:2e:49:5a:67:86:8b:36:f3:13:49:83:b5:e3:
                    72:08:a9:b4:b2:cd:5c:d1:c1:77:e4:47:9e:ef:25:
                    f5:21:f2:0b:9d:3b:96:51:ab:f9:3b:bc:f8:93:6e:
                    64:ba:43:ae:11:fa:0f:e3:a2:fb:73:02:07:71:d3:
                    ff:a2:01:b7:4d:58:7a:ec:4e:bc:65:c3:51:ec:0c:
                    19:5a:28:4f:8d:05:2a:8f:62:9c:a8:f7:1f:ba:8a:
                    f2:9f:b7:2a:66:1d:fe:1c:a7:80:8e:d0:d8:39:26:
                    e2:49:47:dd:a5:30:72:07:a5:b6:23:c7:b3:33:80:
                    07:3c:fb:e6:39:77:ee:58:8f:87:02:ae:70:0c:e4:
                    c8:3d:5b:8f:eb:dd:35:44:59:02:e7:d6:00:8f:2b:
                    64:5d:7b:58:40:c6:f2:04:71:c0:ed:b5:7a:b0:3b:
                    4a:d4:f7:18:da:7b:3f:7d:ca:54:50:47:0f:b9:43:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C2:A1:32:F5:01:A7:B1:00:14:42:B6:CA:76:C6:AF:34:03:F5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:5d:88:5d:de:a6:0a:b9:47:35:d8:0e:50:5c:e8:1b:c2:51:
         36:36:fa:8f:68:55:2c:a0:66:ef:77:5b:c5:69:33:46:a3:83:
         a0:94:57:0a:60:46:bd:d7:01:47:40:69:e1:90:d6:8a:cd:ad:
         90:9e:1e:a1:08:c4:36:7d:89:93:83:da:93:3e:5f:d7:31:75:
         1c:dd:99:13:e6:d4:98:ad:67:2e:11:a3:15:f4:29:95:e8:ca:
         15:b9:1e:68:47:03:b3:ce:cd:e1:13:ba:db:19:18:d5:5e:5e:
         3a:ab:99:4d:cb:e4:e0:e9:e7:4e:93:27:7e:29:91:23:01:0d:
         fa:5e:e3:c5:63:de:d6:78:90:fb:6d:23:93:95:85:61:57:ad:
         ac:57:56:ea:bd:22:80:0e:fe:cb:f1:d6:2f:19:b9:9a:c3:01:
         b8:8c:ba:6c:b1:8d:fa:6d:ef:31:19:59:e1:4b:2f:d4:1c:ca:
         f6:a1:81:c6:10:60:ea:78:9f:03:31:dd:fc:f5:8a:f6:4d:80:
         a8:c2:ac:3d:f2:67:c1:9c:d1:9e:4a:57:c9:c9:bb:eb:b0:37:
         5b:8a:24:69:4f:c0:d5:3d:99:10:58:86:5b:f9:16:49:9c:9c:
         51:7b:dc:e4:be:06:b8:0d:a4:b4:c3:de:6b:1d:72:4b:df:b1:
         46:97:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:00:40 2025 by rpki-client