Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa
File:                     148d2078-1122-3908-b198-db0b1c465bcc.roa (raw, json)
Hash identifier:          iCBe/Jr5Bg8pzFiUv+zk1fuzpSu3RVDcqaojUo88B/I=
Subject key identifier:   73:37:E5:6F:36:4A:3C:4A:EC:3E:4E:DE:3A:C9:0F:C2:B3:9A:AF:45
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F4328584D7CCFD86AF1C874E61247B360
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     7106
IP address blocks:        68.65.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d8:6a:f1:c8:74:e6:12:47:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=df9b8196-ea9e-4762-a566-ba3f1260c4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:5f:75:e0:68:72:d8:f1:23:95:12:f2:70:
                    e6:37:2d:d0:ab:4a:30:bb:f3:36:1e:69:32:22:3c:
                    15:e9:f5:ab:d5:d7:ec:f6:5b:36:d8:c6:58:55:4e:
                    23:86:07:67:10:3f:d3:e5:d6:80:86:6a:3c:af:78:
                    8b:7e:b7:c5:9c:e4:34:4b:a0:e2:4b:9c:d7:46:11:
                    45:b7:c4:32:4c:d2:84:7a:be:4c:0b:25:16:3d:46:
                    69:1d:f7:76:1c:32:91:04:d3:3e:df:d1:95:09:0f:
                    db:7b:8e:bf:48:62:13:e3:e2:78:f7:2b:4a:5a:83:
                    25:ce:9c:3f:4c:84:e2:e6:b2:09:c1:f7:ca:90:74:
                    15:b0:0c:9d:20:e1:10:9e:f8:8f:3e:d1:e7:14:ad:
                    97:2b:b1:44:13:5c:d5:5a:69:3a:cb:80:fc:ee:4f:
                    2a:3a:ee:13:36:39:10:07:7f:74:96:97:db:27:62:
                    05:3d:09:39:54:da:21:5f:c7:67:d7:4d:f5:76:c6:
                    34:b5:10:52:c5:31:7d:f6:de:79:cd:89:06:00:78:
                    55:35:e4:7e:1c:6e:da:ac:cc:d0:cb:5d:90:ec:11:
                    04:61:10:ae:2d:c5:39:fc:85:c3:97:1c:77:82:8c:
                    50:aa:88:25:2f:c5:8d:b6:d0:11:3d:bf:a0:72:88:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:37:E5:6F:36:4A:3C:4A:EC:3E:4E:DE:3A:C9:0F:C2:B3:9A:AF:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:2d:fc:a7:05:ad:c4:fa:fd:d5:22:d4:b8:3c:71:0d:19:
         b6:b6:dc:e7:37:26:86:dd:af:a8:b5:c6:d0:f2:a7:da:e8:41:
         8f:63:19:57:9c:1f:c6:69:83:3b:33:b6:77:10:6e:74:2d:bb:
         57:87:eb:81:8c:ed:64:5b:d5:43:0e:f2:d5:03:03:2f:4d:e4:
         94:5b:0a:03:ae:3f:4c:b5:5b:1a:b0:e9:e8:ee:f9:f1:2d:2a:
         9a:39:f7:de:8a:ad:2d:1f:a4:eb:05:4c:6a:e5:e8:1e:23:51:
         ba:9e:c0:3c:0e:79:5b:60:16:55:e2:69:7d:7c:37:b6:15:ee:
         26:45:aa:da:1a:a4:98:99:31:48:56:3c:fe:3f:80:d4:ef:4b:
         8f:bf:05:9c:b8:98:9d:d7:d5:bf:08:6b:a2:48:84:28:44:9b:
         dc:25:4f:0d:e6:ae:57:2f:19:a1:e2:a2:23:8e:c9:c2:68:0a:
         09:98:83:30:fd:a8:31:0a:f6:8e:eb:0f:c4:a7:6d:21:d4:98:
         b7:d5:d0:76:b7:a8:1e:da:c4:1e:94:dd:37:82:76:fb:a2:af:
         77:69:38:74:1a:88:aa:58:1e:17:54:78:10:50:17:8f:7b:aa:
         54:93:4b:01:30:e4:00:13:92:7e:91:7d:b3:c2:2d:26:37:dd:
         4a:af:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:57 2026 by rpki-client