Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/14668e74-0828-3d3b-942c-312639448644.roa
File:                     14668e74-0828-3d3b-942c-312639448644.roa (raw, json)
Hash identifier:          wD5JL6QUKOxFJsEw6lL9JYJw3/Jv5/tFJ3JYtDR8tsk=
Subject key identifier:   12:F6:2F:98:DB:A4:10:3B:BD:30:BD:56:61:19:20:6A:E5:C4:A6:AF
Certificate issuer:       /CN=136870e3-c4bf-4b79-9466-6d145047fcd9
Certificate serial:       010D0C9F4328584F0DC43058305042C7FBF04180
Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/14668e74-0828-3d3b-942c-312639448644.roa
Signing time:             Thu 03 Sep 2026 15:56:15 +0000
ROA not before:           Thu 03 Sep 2026 15:56:15 +0000
ROA not after:            Wed 02 Dec 2026 16:56:15 +0000
asID:                     6079
IP address blocks:        48.46.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:c4:30:58:30:50:42:c7:fb:f0:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9
        Validity
            Not Before: Sep  3 15:56:15 2026 GMT
            Not After : Dec  2 16:56:15 2026 GMT
        Subject: CN=887e56e5-bf7c-48c4-8d4b-9ecb6294dbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:32:61:14:40:c4:2e:7e:7e:88:30:f3:c4:30:
                    37:34:4e:d2:11:a6:e8:84:19:2b:90:93:ae:b3:44:
                    57:e4:47:a1:f8:fb:f9:15:86:ae:1d:9d:77:7e:7f:
                    ca:14:fe:f5:5c:45:b4:e8:e5:47:8d:e4:d2:85:8b:
                    88:3c:ec:4d:50:46:2f:f9:de:3b:fa:4c:f9:9e:a7:
                    b9:1d:4f:27:38:0b:88:58:bd:16:d7:5c:35:97:80:
                    02:c8:fa:b6:7d:4a:0a:9f:7b:bd:0b:14:a9:1d:3e:
                    90:c2:74:0c:ac:60:78:dd:eb:c4:ed:4e:c6:27:06:
                    c9:0e:6f:08:d0:c8:4f:ff:ad:e8:dd:5a:92:2f:c2:
                    40:88:8a:54:f5:63:84:d6:52:f5:1b:21:56:9b:4c:
                    39:eb:68:fa:5f:28:03:94:1f:e5:b6:75:61:64:8f:
                    9f:84:1d:b3:62:7a:43:d6:a3:8a:08:05:d7:bc:94:
                    8d:cd:68:1a:bc:23:32:1f:f3:1f:24:8f:6e:c8:05:
                    89:aa:d9:dd:89:9a:f0:ff:84:bd:65:d1:93:60:7e:
                    7a:6e:d3:fa:6c:c3:2a:40:5a:cb:d7:02:f3:42:b3:
                    49:e0:e7:81:32:68:85:b7:06:fc:46:b3:2f:c4:0b:
                    6c:25:53:b2:5f:f6:ea:25:a6:12:fe:de:9e:3f:aa:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F6:2F:98:DB:A4:10:3B:BD:30:BD:56:61:19:20:6A:E5:C4:A6:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/14668e74-0828-3d3b-942c-312639448644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl

            X509v3 Authority Key Identifier:
                keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.46.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:19:27:b9:e9:f7:e8:cd:06:d6:d0:9d:64:1b:d8:97:24:68:
         e8:b2:86:ef:74:42:8f:c9:ff:f4:9c:59:be:98:ac:22:83:c4:
         ef:17:1f:54:e3:41:6f:c4:e4:bf:ff:50:e3:39:02:a2:27:6f:
         01:cf:bd:92:5f:eb:79:fe:2e:54:4b:35:6b:8c:70:64:df:11:
         7b:a4:36:00:43:1e:7b:35:57:d6:d7:d5:5a:19:4d:2e:f1:94:
         77:f7:8e:9a:9c:2b:6b:cf:20:1a:a2:e0:41:bf:ef:66:04:8d:
         3e:ec:11:22:25:40:d3:52:ee:df:46:b2:e4:c4:d9:2b:fb:44:
         8d:00:7f:a2:c9:36:61:f4:33:7b:82:3c:e5:0a:a8:46:3d:04:
         13:71:2e:79:34:38:f4:b2:28:2a:bd:32:6b:4e:ff:e5:19:77:
         0a:0a:9a:98:53:b9:76:30:b9:c0:dc:85:c0:d5:6f:f0:5f:da:
         cb:bc:79:6d:38:b9:43:4f:69:dc:3a:6c:61:70:93:a7:40:48:
         03:d0:ad:74:ce:13:09:ea:83:ed:3c:6a:7a:7f:12:5f:25:0e:
         62:ac:4a:19:e8:98:c8:ee:1c:39:7d:dd:ce:7b:91:1a:8c:68:
         b5:21:9d:d3:d4:d3:10:fd:2e:49:6e:62:58:41:e8:4b:63:ac:
         0f:09:d6:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NxDBYMFBCx/vwQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM2ODcwZTMtYzRiZi00Yjc5LTk0NjYtNmQxNDUwNDdm
Y2Q5MB4XDTI2MDkwMzE1NTYxNVoXDTI2MTIwMjE2NTYxNVowLzEtMCsGA1UEAxMk
ODg3ZTU2ZTUtYmY3Yy00OGM0LThkNGItOWVjYjYyOTRkYmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTJhFEDELn5+iDDzxDA3NE7SEabohBkrkJOu
s0RX5Eeh+Pv5FYauHZ13fn/KFP71XEW06OVHjeTShYuIPOxNUEYv+d47+kz5nqe5
HU8nOAuIWL0W11w1l4ACyPq2fUoKn3u9CxSpHT6QwnQMrGB43evE7U7GJwbJDm8I
0MhP/63o3VqSL8JAiIpU9WOE1lL1GyFWm0w562j6XygDlB/ltnVhZI+fhB2zYnpD
1qOKCAXXvJSNzWgavCMyH/MfJI9uyAWJqtndiZrw/4S9ZdGTYH56btP6bMMqQFrL
1wLzQrNJ4OeBMmiFtwb8RrMvxAtsJVOyX/bqJaYS/t6eP6rkEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBL2L5jbpBA7vTC9VmEZIGrlxKavMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4
NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0N2ZjZDkvMTQ2NjhlNzQtMDgyOC0z
ZDNiLTk0MmMtMzEyNjM5NDQ4NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM2ODcwZTMtYzRiZi00Yjc5LTk0
NjYtNmQxNDUwNDdmY2Q5LzEzNjg3MGUzLWM0YmYtNGI3OS05NDY2LTZkMTQ1MDQ3
ZmNkOS5jcmwwHwYDVR0jBBgwFoAUiNUKyZV1bH917Mf755uCq6l+ROwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0
NTA0N2ZjZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMC7kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkZJ7np9+jNBtbQnWQb2JckaOiyhu90Qo/J//ScWb6YrCKDxO8XH1Tj
QW/E5L//UOM5AqInbwHPvZJf63n+LlRLNWuMcGTfEXukNgBDHns1V9bX1VoZTS7x
lHf3jpqcK2vPIBqi4EG/72YEjT7sESIlQNNS7t9GsuTE2Sv7RI0Af6LJNmH0M3uC
POUKqEY9BBNxLnk0OPSyKCq9MmtO/+UZdwoKmphTuXYwucDchcDVb/Bf2su8eW04
uUNPadw6bGFwk6dASAPQrXTOEwnqg+08anp/El8lDmKsShnomMjuHDl93c57kRqM
aLUhndPU0xD9LkluYlhB6EtjrA8J1tU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:48:05 2026 by rpki-client