Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/4a201fd5-adb3-3cd9-8bfe-ad841a580747.roa
File:                     4a201fd5-adb3-3cd9-8bfe-ad841a580747.roa (raw, json)
Hash identifier:          owbyxJMK1voqS7arRd1NcgfoDvnlL0axVB/yS6VcI+Q=
Subject key identifier:   DF:95:50:37:05:D5:DF:49:42:B2:58:EB:13:57:31:47:48:CE:2B:A1
Certificate issuer:       /CN=136870e3-c4bf-4b79-9466-6d145047fcd9
Certificate serial:       010D0C9F4328584D07ACE2E0892011C2582DF380
Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/4a201fd5-adb3-3cd9-8bfe-ad841a580747.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     7922
IP address blocks:        48.44.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:e2:e0:89:20:11:c2:58:2d:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=29e0107a-37a8-4ade-bf10-5f0534efb0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:24:c7:25:35:f2:2c:22:8c:c1:2f:ea:be:
                    e8:19:2a:b1:d7:65:09:a0:07:fb:12:41:6d:16:eb:
                    6d:d1:40:b7:02:05:1a:eb:be:51:04:10:c6:2e:ac:
                    5f:dd:04:d2:b6:8d:8e:43:72:7f:9c:66:4b:e5:36:
                    59:f4:58:72:0c:d8:c3:6b:20:cb:f3:55:e6:22:18:
                    6d:8c:3d:a3:e7:cb:0b:35:6c:fa:7b:f9:d8:0c:a2:
                    b5:38:8c:d0:e1:7a:6b:72:65:4b:75:b9:55:08:4b:
                    72:a6:f4:69:69:60:35:1c:5d:8d:43:ff:22:d3:f9:
                    3a:ad:84:93:8e:b7:30:5b:bf:30:bc:04:86:39:22:
                    14:fe:a0:a4:2d:fa:d4:fc:a5:2b:1d:25:ba:86:58:
                    b0:9d:76:f7:bd:1a:7a:cb:a1:60:6b:e8:bc:16:16:
                    8a:fd:f1:85:1a:d0:23:e4:7d:1d:0e:50:80:db:72:
                    93:af:38:ae:54:76:82:4b:f1:ba:0e:aa:26:eb:c5:
                    fe:48:06:43:a0:32:3a:08:2d:87:af:74:a2:86:f1:
                    a4:6e:74:41:28:51:c8:ba:4b:89:21:61:04:e8:77:
                    d7:00:ae:53:7a:18:52:cd:2f:1f:15:8c:33:d6:4f:
                    75:4f:0b:6a:ea:dd:8c:db:37:df:41:f9:2b:ec:d0:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:50:37:05:D5:DF:49:42:B2:58:EB:13:57:31:47:48:CE:2B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/4a201fd5-adb3-3cd9-8bfe-ad841a580747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl

            X509v3 Authority Key Identifier:
                keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.44.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:73:ff:51:f3:a2:7b:c9:62:92:96:cd:96:35:85:d2:db:8f:
         f9:bd:76:5c:b3:1c:ed:07:38:e2:e3:85:6f:ad:15:c0:c7:68:
         c3:d1:f5:e4:22:49:a2:ba:28:db:dd:9c:72:9f:8f:87:f4:21:
         22:19:23:b0:67:22:f6:cd:7d:29:e8:ae:da:04:89:b7:72:7c:
         2a:7b:16:89:fe:98:fd:d6:42:11:70:cd:b7:29:eb:1f:f4:c9:
         b0:94:9b:56:fb:70:c9:30:a5:4a:15:6d:4b:8b:31:83:ad:fa:
         da:78:10:8e:9a:f6:83:06:90:e9:62:7d:3f:dc:35:6e:dd:56:
         e4:b3:be:96:c4:d7:16:5b:74:62:ad:68:56:7d:a3:6b:6c:82:
         0a:5d:be:8e:92:a7:c7:6b:6e:c0:c5:a8:5d:bb:e9:49:1d:34:
         b4:02:2d:c9:a0:2d:e2:ce:7f:18:02:ab:0c:a3:15:17:46:b2:
         fe:22:7c:3b:c9:03:3b:d1:d4:b6:d0:28:9f:7d:ed:32:cb:25:
         69:e7:47:c1:2b:8e:ee:ec:15:b6:cc:1a:a8:46:45:9e:d1:1e:
         5d:99:9f:69:65:d6:ca:56:af:42:72:fb:c0:26:73:f4:26:27:
         ff:10:69:7b:2b:fa:46:f2:b4:bd:fe:2c:c8:fb:66:89:68:9c:
         c0:4c:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:15 2026 by rpki-client