Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/945e3652-b330-38ea-a723-7b735fed0749.roa
File:                     945e3652-b330-38ea-a723-7b735fed0749.roa (raw, json)
Hash identifier:          KKxftdQ6kRZhk+odwYgJttpGRmlvoVP7/WXPr6cu1Ig=
Subject key identifier:   74:98:10:D8:9F:D3:23:BF:E9:9C:47:7B:AA:C2:C0:88:4A:96:B4:11
Certificate issuer:       /CN=53e58d27-0260-41c6-8a7b-df289923ed1e
Certificate serial:       010D0C9F4328584EC90710C070C6A40D58C3F880
Authority key identifier: 44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/945e3652-b330-38ea-a723-7b735fed0749.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     402224
IP address blocks:        139.151.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:10:c0:70:c6:a4:0d:58:c3:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e58d27-0260-41c6-8a7b-df289923ed1e
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=9933b463-f71b-49c5-b645-bd17f6d2eac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:09:07:e6:44:96:f3:53:76:8f:c4:63:53:
                    52:82:6f:da:6d:c2:29:e5:ad:28:2f:c2:f7:b5:12:
                    6d:c9:80:ee:a9:ea:3b:3e:95:4e:19:af:36:61:37:
                    fb:21:ad:36:65:66:27:20:01:41:b7:70:be:25:ee:
                    85:19:4d:68:b6:17:e4:1f:90:77:0b:1c:6b:cc:09:
                    8f:05:b0:fe:c5:ce:24:59:37:76:a2:71:64:60:83:
                    10:16:9d:19:21:3d:a7:3b:bc:62:07:04:6c:bd:6c:
                    39:b3:ef:54:35:9e:54:6a:72:6f:c7:2a:71:36:09:
                    72:55:35:2b:9a:61:3a:d6:bd:83:c4:11:50:9a:a9:
                    7a:6d:f7:01:0a:45:87:24:54:de:59:4d:ed:f2:38:
                    c1:27:8b:5f:9b:96:88:73:7d:39:4f:06:8a:c4:87:
                    9d:13:f5:fc:89:94:24:c8:b5:61:d2:6f:da:ad:e2:
                    c1:2d:06:cb:d8:5d:ee:2b:d2:ff:cf:31:b7:3c:9f:
                    f4:cb:6d:9e:1c:58:1c:72:13:ef:45:25:44:0a:61:
                    64:58:2d:ca:d7:6c:35:ac:1f:e2:59:60:44:85:43:
                    8c:3f:64:b7:ce:21:98:98:7b:0f:06:67:ab:ae:cc:
                    fb:b6:c0:95:38:c8:0d:98:05:ad:bb:d5:31:e0:88:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:98:10:D8:9F:D3:23:BF:E9:9C:47:7B:AA:C2:C0:88:4A:96:B4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/945e3652-b330-38ea-a723-7b735fed0749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl

            X509v3 Authority Key Identifier:
                keyid:44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.151.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3e:e7:1d:d9:10:62:9e:c5:b7:63:89:cf:07:37:76:d7:60:
         93:d8:b3:c0:8f:dc:08:e3:d9:f9:16:a1:4c:a4:e8:8b:db:04:
         01:d1:06:7b:e5:ab:c4:39:d4:d6:42:1d:97:7d:98:2a:8b:cf:
         3b:d1:d9:d9:15:50:f2:05:1e:d3:80:0f:cb:aa:98:27:aa:e4:
         fd:f0:c6:58:d8:c4:e0:90:a6:23:ab:ee:f5:b9:f3:c9:02:7c:
         2e:6b:e1:e8:64:e8:a6:9f:7c:c6:10:11:6e:0a:9b:94:6b:92:
         87:0f:ae:f6:08:92:95:16:e1:0d:c2:c9:9f:03:c1:27:f0:ec:
         e4:21:70:7e:33:f4:ea:a2:7c:54:84:f7:f4:e8:7d:da:90:b7:
         67:c4:27:c3:53:1c:4e:58:74:45:2c:6d:c0:44:b3:7e:51:b3:
         37:1b:71:ce:c8:f6:f2:92:f9:0e:9b:8d:29:10:0d:ea:9a:9d:
         b2:46:a8:74:d1:83:25:64:a6:a5:86:0f:85:f9:00:4e:9d:b0:
         20:ec:32:a9:24:c7:7c:1b:5b:d4:87:84:08:31:cc:59:2a:4a:
         26:b4:e2:c8:47:8a:ec:8a:e8:42:b6:74:43:eb:39:9d:7f:a6:
         8a:34:ff:31:93:e5:8e:92:e5:17:55:7a:63:7d:b3:f6:d8:cd:
         09:da:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:34:57 2026 by rpki-client