Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/fd2b1244-68f0-3490-a9c8-ff84fe722542.roa
File:                     fd2b1244-68f0-3490-a9c8-ff84fe722542.roa (raw, json)
Hash identifier:          1cnuj609j9ZrsV5jCDQwQ4unhB3Sjs+/HseICYH17b8=
Subject key identifier:   52:53:3D:42:29:E1:5C:68:60:C5:D4:34:F3:35:71:C3:C9:D8:95:07
Certificate issuer:       /CN=136870e3-c4bf-4b79-9466-6d145047fcd9
Certificate serial:       010D0C9F4328584F0DBC8F006CD7EB4696626F80
Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/fd2b1244-68f0-3490-a9c8-ff84fe722542.roa
Signing time:             Thu 03 Sep 2026 15:40:53 +0000
ROA not before:           Thu 03 Sep 2026 15:40:53 +0000
ROA not after:            Wed 02 Dec 2026 16:40:53 +0000
asID:                     6079
IP address blocks:        48.46.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:bc:8f:00:6c:d7:eb:46:96:62:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9
        Validity
            Not Before: Sep  3 15:40:53 2026 GMT
            Not After : Dec  2 16:40:53 2026 GMT
        Subject: CN=69652196-16f5-40cc-bdfa-ca9419822228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:3c:f7:52:60:3b:74:df:eb:f0:3c:bc:32:
                    ac:0d:02:22:e0:22:71:2f:2f:40:1e:44:be:a8:1d:
                    38:64:2f:7e:51:d3:d3:e6:16:23:21:fc:27:c1:25:
                    bc:27:73:ee:cf:79:48:4a:e9:f8:86:d8:2f:8e:d7:
                    27:ed:82:31:6e:18:22:4b:2f:07:c3:fd:7f:51:2c:
                    b6:96:98:5b:6c:c1:ba:96:04:18:7e:96:af:32:02:
                    d9:0e:cd:c2:f5:c4:8c:2d:7e:4c:b7:41:08:58:a9:
                    ef:d1:63:52:1d:f0:8a:49:65:b1:5a:0a:c0:ff:73:
                    af:a1:e4:e2:c5:d5:0f:3d:4e:b1:49:59:c9:50:e8:
                    97:39:e1:40:27:ef:82:8c:4f:68:1d:56:c6:49:90:
                    03:1d:87:65:bd:38:d6:2a:9e:de:0b:e3:84:91:38:
                    2a:5a:5b:7b:0c:30:71:60:c1:af:9a:a8:95:98:da:
                    22:e6:21:d0:55:3d:1e:69:f4:73:0b:78:a0:96:e6:
                    2d:c0:e1:28:4e:d7:97:4d:a5:3b:16:c7:b0:9b:5c:
                    67:54:44:2c:20:aa:0a:49:fb:e8:21:6b:6b:c9:ea:
                    64:f8:18:2a:eb:2d:02:96:b9:4e:f4:3e:d8:8f:73:
                    9d:40:6f:ba:93:be:79:fb:70:56:93:a2:30:d5:a4:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:53:3D:42:29:E1:5C:68:60:C5:D4:34:F3:35:71:C3:C9:D8:95:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/fd2b1244-68f0-3490-a9c8-ff84fe722542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl

            X509v3 Authority Key Identifier:
                keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.46.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:eb:22:5b:8e:5f:b7:04:f0:37:61:f1:3d:af:b2:17:ee:23:
         9d:72:ae:52:91:36:73:40:5e:53:2a:d2:ba:95:c9:07:10:76:
         5f:fe:46:68:28:34:16:f8:55:69:5b:e4:9e:0f:d3:5b:be:2e:
         a4:ed:23:55:1f:97:db:22:4b:b0:98:56:ed:40:0e:6b:2f:55:
         f2:1b:56:ae:6a:06:8e:26:39:97:88:78:31:ac:92:2a:b4:59:
         f3:19:36:db:f1:73:b7:c5:2e:f9:9d:01:ae:ba:f0:4c:ab:79:
         e8:27:b2:2c:46:9e:2b:fb:ee:96:f2:67:4d:2d:da:1c:ce:b1:
         6c:d0:0a:24:85:7a:15:d6:b0:4c:d8:25:c9:2f:5c:b3:c8:aa:
         35:bd:b0:16:87:4d:cc:32:7e:42:9d:c7:e2:29:0d:05:1c:2b:
         71:a6:ec:30:8a:4c:37:4c:55:c8:dd:b8:bd:50:fa:4f:fb:3d:
         82:63:dd:3b:d7:be:19:c7:16:a8:14:50:99:c6:4c:f0:2d:d5:
         07:1f:70:d1:91:9f:c7:1d:88:28:0e:58:76:0e:2e:99:48:b0:
         c8:9c:02:4c:bf:61:e5:b2:ff:f8:70:32:fb:e9:87:35:6c:74:
         ca:c4:f5:ec:f1:23:44:8f:20:c6:f0:6a:b0:66:7c:09:a1:64:
         01:b0:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:30:21 2026 by rpki-client