Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/ad254220-a2f2-37e9-8b95-8a3c8dc1d9e1.roa
File:                     ad254220-a2f2-37e9-8b95-8a3c8dc1d9e1.roa (raw, json)
Hash identifier:          hsFqfBymzD4zZ/8UoDmUSbW30FjXxcia+OKtu+YoCKI=
Subject key identifier:   66:BF:CD:28:2F:48:0D:4E:52:76:FD:0A:E8:A6:DF:C3:02:AA:33:37
Certificate issuer:       /CN=136870e3-c4bf-4b79-9466-6d145047fcd9
Certificate serial:       010D0C9F4328584D667A589A51A8DA9B47D1A340
Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/ad254220-a2f2-37e9-8b95-8a3c8dc1d9e1.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     5650
IP address blocks:        48.44.0.0/24 maxlen: 24
                          48.44.5.0/24 maxlen: 24
                          48.44.10.0/23 maxlen: 23
                          48.44.15.0/24 maxlen: 24
                          48.44.25.0/24 maxlen: 24
                          48.44.35.0/24 maxlen: 24
                          48.44.45.0/24 maxlen: 24
                          48.44.55.0/24 maxlen: 24
                          48.44.60.0/22 maxlen: 22
                          48.44.70.0/24 maxlen: 24
                          48.44.80.0/24 maxlen: 24
                          48.44.90.0/23 maxlen: 23
                          48.44.100.0/24 maxlen: 24
                          48.44.108.0/24 maxlen: 24
                          48.44.116.0/24 maxlen: 24
                          48.44.120.0/23 maxlen: 23
                          48.44.125.0/24 maxlen: 24
                          48.46.64.0/24 maxlen: 24
                          48.46.70.0/24 maxlen: 24
                          48.46.74.0/23 maxlen: 23
                          48.46.80.0/24 maxlen: 24
                          48.46.90.0/24 maxlen: 24
                          48.46.100.0/24 maxlen: 24
                          48.46.110.0/23 maxlen: 23
                          48.46.118.0/24 maxlen: 24
                          48.46.126.0/24 maxlen: 24
                          48.47.236.0/22 maxlen: 22
                          48.47.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:58:9a:51:a8:da:9b:47:d1:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=9d9fa2bd-3532-4a2e-8ca0-cb086831598b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:03:29:f0:38:d3:35:84:88:4f:db:ed:ce:
                    68:ca:52:cb:d7:fb:53:bb:15:24:92:e2:c5:2e:09:
                    19:83:31:57:da:19:c9:67:78:f3:95:f4:a5:c6:3d:
                    a2:fd:7c:bd:6d:96:d0:93:2f:2b:f7:80:58:dc:e0:
                    3b:6d:73:15:84:c7:c7:9b:0d:1f:d2:05:d2:0d:93:
                    35:42:cd:dd:33:de:6f:27:90:33:af:85:f0:a2:33:
                    73:0d:7c:f0:cd:01:af:68:ed:c8:61:31:04:18:6d:
                    3d:2e:37:76:91:1b:aa:46:a0:06:09:8c:4a:33:b5:
                    6c:92:2a:54:7e:0c:98:51:4b:24:8e:30:5d:c0:08:
                    fd:9e:98:2e:68:9d:cc:85:1e:63:a6:2c:31:97:bb:
                    32:dd:68:e6:a7:31:77:70:9a:13:30:f0:95:34:03:
                    dc:67:36:4a:3c:ba:17:59:2c:a3:70:d6:ff:17:fb:
                    3a:3f:64:55:9b:da:ea:a9:c3:0c:8b:32:06:3a:aa:
                    fb:c4:de:6c:02:fd:05:42:18:04:73:13:00:8e:ea:
                    45:e6:af:0e:8b:b7:96:95:a8:19:19:2d:2f:ae:6c:
                    51:79:19:00:a2:8c:72:59:1a:2b:50:d2:56:0a:d4:
                    84:46:30:e9:78:40:c9:6e:41:f3:ac:53:70:5e:64:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BF:CD:28:2F:48:0D:4E:52:76:FD:0A:E8:A6:DF:C3:02:AA:33:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/ad254220-a2f2-37e9-8b95-8a3c8dc1d9e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl

            X509v3 Authority Key Identifier:
                keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.44.0.0/24
                  48.44.5.0/24
                  48.44.10.0/23
                  48.44.15.0/24
                  48.44.25.0/24
                  48.44.35.0/24
                  48.44.45.0/24
                  48.44.55.0/24
                  48.44.60.0/22
                  48.44.70.0/24
                  48.44.80.0/24
                  48.44.90.0/23
                  48.44.100.0/24
                  48.44.108.0/24
                  48.44.116.0/24
                  48.44.120.0/23
                  48.44.125.0/24
                  48.46.64.0/24
                  48.46.70.0/24
                  48.46.74.0/23
                  48.46.80.0/24
                  48.46.90.0/24
                  48.46.100.0/24
                  48.46.110.0/23
                  48.46.118.0/24
                  48.46.126.0/24
                  48.47.236.0/22
                  48.47.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a7:b9:81:8b:e7:8c:44:4b:5f:01:dc:5d:82:13:79:2b:db:
         c7:f3:f9:bc:7b:ab:43:87:d4:ce:aa:eb:fe:dc:29:78:54:8e:
         d2:28:71:d8:93:38:e7:4f:3e:4b:99:67:95:9d:c3:f8:ee:f0:
         f8:45:c3:27:2d:01:0d:51:fd:92:57:3b:36:f9:81:94:3b:a7:
         9b:87:33:31:f3:4d:4a:31:2c:e2:4f:b7:c5:3c:49:b8:84:13:
         23:16:6f:96:45:89:c6:59:23:ef:02:7a:6b:10:d1:4a:35:63:
         a7:a5:42:fc:de:25:18:b9:70:37:b4:6b:af:e2:dd:35:8e:e0:
         09:19:fd:af:14:db:2b:97:83:fa:49:88:58:40:f8:1a:92:20:
         a9:47:53:b9:ec:24:02:50:12:c6:d1:1a:b6:1a:ac:58:e6:87:
         60:7d:50:21:ae:23:9d:a8:b5:7a:64:44:69:ba:b2:ed:40:52:
         2b:fa:c1:f9:f9:f6:4c:94:0b:e1:65:3e:4c:33:0c:4f:03:23:
         b7:83:d4:96:35:56:72:16:4e:56:26:07:92:57:80:73:97:3c:
         b7:9a:95:26:70:61:7a:39:2c:69:bb:a7:8e:dc:42:9a:1d:59:
         11:b0:be:13:d2:1a:3b:c1:37:f4:30:15:74:f1:47:a4:ad:f7:
         d1:f8:2a:e9
-----BEGIN CERTIFICATE-----
MIIG6jCCBdKgAwIBAgIUAQ0Mn0MoWE1meliaUajam0fRo0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM2ODcwZTMtYzRiZi00Yjc5LTk0NjYtNmQxNDUwNDdm
Y2Q5MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk
OWQ5ZmEyYmQtMzUzMi00YTJlLThjYTAtY2IwODY4MzE1OThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja0DKfA40zWEiE/b7c5oylLL1/tTuxUkkuLF
LgkZgzFX2hnJZ3jzlfSlxj2i/Xy9bZbQky8r94BY3OA7bXMVhMfHmw0f0gXSDZM1
Qs3dM95vJ5Azr4XwojNzDXzwzQGvaO3IYTEEGG09Ljd2kRuqRqAGCYxKM7VskipU
fgyYUUskjjBdwAj9npguaJ3MhR5jpiwxl7sy3WjmpzF3cJoTMPCVNAPcZzZKPLoX
WSyjcNb/F/s6P2RVm9rqqcMMizIGOqr7xN5sAv0FQhgEcxMAjupF5q8Oi7eWlagZ
GS0vrmxReRkAooxyWRorUNJWCtSERjDpeEDJbkHzrFNwXmS7eQIDAQABo4ID/DCC
A/gwHQYDVR0OBBYEFGa/zSgvSA1OUnb9Cuim38MCqjM3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4
NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0N2ZjZDkvYWQyNTQyMjAtYTJmMi0z
N2U5LThiOTUtOGEzYzhkYzFkOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM2ODcwZTMtYzRiZi00Yjc5LTk0
NjYtNmQxNDUwNDdmY2Q5LzEzNjg3MGUzLWM0YmYtNGI3OS05NDY2LTZkMTQ1MDQ3
ZmNkOS5jcmwwHwYDVR0jBBgwFoAUiNUKyZV1bH917Mf755uCq6l+ROwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0
NTA0N2ZjZDkuY2VyMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAAw
LAADBAAwLAUDBAEwLAoDBAAwLA8DBAAwLBkDBAAwLCMDBAAwLC0DBAAwLDcDBAIw
LDwDBAAwLEYDBAAwLFADBAEwLFoDBAAwLGQDBAAwLGwDBAAwLHQDBAEwLHgDBAAw
LH0DBAAwLkADBAAwLkYDBAEwLkoDBAAwLlADBAAwLloDBAAwLmQDBAEwLm4DBAAw
LnYDBAAwLn4DBAIwL+wDBAEwL/owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgqe5gYvnjERLXwHcXYITeSvb
x/P5vHurQ4fUzqrr/twpeFSO0ihx2JM4508+S5lnlZ3D+O7w+EXDJy0BDVH9klc7
NvmBlDunm4czMfNNSjEs4k+3xTxJuIQTIxZvlkWJxlkj7wJ6axDRSjVjp6VC/N4l
GLlwN7Rrr+LdNY7gCRn9rxTbK5eD+kmIWED4GpIgqUdTuewkAlASxtEathqsWOaH
YH1QIa4jnai1emREabqy7UBSK/rB+fn2TJQL4WU+TDMMTwMjt4PUljVWchZOViYH
kleAc5c8t5qVJnBhejksabunjtxCmh1ZEbC+E9IaO8E39DAVdPFHpK330fgq6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:12:10 2026 by rpki-client