Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/06183a5b-e2ae-3a78-bc40-35f9b42cd4e5.roa
File:                     06183a5b-e2ae-3a78-bc40-35f9b42cd4e5.roa (raw, json)
Hash identifier:          ndjWPC4krjc/K/nYYb1zaBNCn4/wfc988FC7flXWYQ4=
Subject key identifier:   F1:E3:E7:64:54:8F:F9:DD:86:F8:56:45:FD:2F:88:5F:4B:F2:D8:61
Certificate issuer:       /CN=136870e3-c4bf-4b79-9466-6d145047fcd9
Certificate serial:       010D0C9F4328584D7CCFE672EFB61F1614565E80
Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/06183a5b-e2ae-3a78-bc40-35f9b42cd4e5.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     5650
IP address blocks:        48.44.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e6:72:ef:b6:1f:16:14:56:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=db96f3b5-90a3-4a64-9603-263b62bd6850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:eb:b4:31:9b:0d:7c:f0:ad:9a:99:c8:a3:
                    b8:6f:fe:d7:eb:80:3b:31:7e:7c:67:3c:55:ba:9f:
                    c7:49:47:b0:da:c4:a9:90:c3:0a:ef:05:4b:6b:1f:
                    4f:93:f4:9b:9e:81:b3:ca:55:33:68:3d:58:87:0e:
                    8e:1a:2d:94:35:02:06:4e:28:20:fa:ac:9b:6c:92:
                    1f:7c:81:e7:38:87:4d:70:03:65:26:e8:af:19:40:
                    4c:44:7e:eb:b3:fc:c2:36:fa:e2:18:ea:f3:7b:0a:
                    9f:38:62:e4:ab:2e:6d:0b:e2:0b:75:97:e7:36:a0:
                    d5:cf:7f:7e:f3:36:14:7d:cd:38:b6:5e:f2:42:ce:
                    60:5d:a4:b1:d4:3d:0d:3a:c6:0f:2f:1c:3f:11:c7:
                    c9:f2:d4:82:a0:00:1a:b4:6d:bd:bd:38:a3:13:cc:
                    da:95:c2:c5:bd:a9:b4:1f:61:f7:dc:b6:42:fd:0b:
                    92:2e:66:75:b9:16:1e:8e:59:d4:5d:85:8b:54:86:
                    49:65:d1:b1:80:e8:55:54:67:83:39:c5:6c:e4:9e:
                    57:61:36:e4:03:d6:d5:5b:bf:82:68:63:20:dd:a6:
                    00:99:35:bf:a6:26:2b:f8:35:6c:21:cb:9e:a5:3f:
                    d6:90:7e:00:11:dd:10:76:0b:25:7d:57:52:80:d8:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E3:E7:64:54:8F:F9:DD:86:F8:56:45:FD:2F:88:5F:4B:F2:D8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/06183a5b-e2ae-3a78-bc40-35f9b42cd4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl

            X509v3 Authority Key Identifier:
                keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.44.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:77:7e:4f:47:03:6f:91:90:3a:52:85:50:81:70:12:c3:
         49:5d:42:d8:94:d6:1e:f3:6e:c2:e0:a6:50:22:43:3a:a3:c6:
         11:fa:b1:4c:9e:ab:35:82:55:11:fd:a9:7a:2a:b6:56:67:2a:
         15:4c:13:4d:18:ef:7a:57:41:54:fa:52:1f:e0:00:04:30:5b:
         3f:6b:64:7e:71:0a:9e:fe:4f:d4:29:28:5c:d4:e1:20:44:90:
         aa:22:c4:f6:3a:be:f5:bd:40:b7:36:f7:f7:e1:57:ee:62:e4:
         09:48:40:b5:59:d7:64:25:f4:d7:f5:26:5d:75:87:26:5f:41:
         79:3c:29:8f:35:e9:72:97:fa:44:37:7d:cd:1a:39:61:e2:19:
         71:72:c0:27:15:bc:c0:b1:27:95:d0:d1:22:01:ce:09:3f:f4:
         59:ea:c1:45:28:ac:c9:94:29:3f:73:56:fd:97:ad:65:15:ba:
         25:f9:d0:d8:4e:68:60:15:d6:70:41:e4:87:fd:bb:39:b2:2e:
         f7:07:d7:b7:c5:ba:9c:0e:04:8f:d6:22:ba:76:b6:71:61:12:
         60:5a:d3:e6:22:83:ab:9d:10:2d:be:6a:30:c7:40:ec:16:3f:
         bf:22:23:43:7d:4a:97:af:0a:6d:c8:6a:c4:69:99:52:d8:a1:
         80:cc:02:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:47 2026 by rpki-client