Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa
File:                     4c146698-99de-3bf6-915e-d2a6ca46429b.roa (raw, json)
Hash identifier:          Gf/WDGtS7Y2sjWyuWci+QXoFLh3DKXj7YEaZGrMsQBg=
Subject key identifier:   A0:80:AB:48:54:A4:AF:93:04:6A:BB:FD:E0:C5:D2:90:55:CF:1B:5F
Certificate issuer:       /CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Certificate serial:       010D0C9F4328584D4D5A6AA8EE5A20563C36DF80
Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     22794
IP address blocks:        131.226.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6a:a8:ee:5a:20:56:3c:36:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=99c67db2-4226-44e9-af62-89964d3fc726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:1e:cb:67:8e:6c:13:a0:c0:09:71:07:f8:
                    ea:46:4d:39:b7:08:3e:15:fd:f1:99:e6:87:54:ae:
                    d8:2f:9f:d6:47:96:2e:f9:36:9d:6b:36:a9:7c:47:
                    cb:2f:60:b4:31:a3:4d:a0:fb:a6:a4:c6:da:5f:be:
                    b9:cc:dc:a5:21:96:a0:a3:4c:b1:78:0f:e2:6a:f4:
                    ae:33:b3:28:42:93:b5:4b:ef:d3:59:27:cd:27:43:
                    91:69:49:06:46:88:ed:28:8a:87:26:79:51:a9:6a:
                    14:0d:33:7c:6d:b2:1b:ca:f1:8c:18:23:5d:8e:b1:
                    a3:09:12:47:3c:0a:0d:85:2c:b4:1f:de:9e:1b:e3:
                    07:be:60:0c:3d:a7:a2:87:df:2c:76:15:f7:2a:0a:
                    7a:15:c1:54:4c:ba:c7:10:0a:ea:c1:2d:3a:f0:3c:
                    65:65:c9:98:8a:d4:f2:02:89:88:67:a2:68:44:fa:
                    aa:da:04:e0:de:c8:4a:b9:e5:79:0b:92:6d:d5:02:
                    ba:83:a6:30:cc:df:e7:35:9c:54:15:5c:09:ca:0e:
                    11:a5:03:89:9f:00:de:99:5a:8a:20:e4:26:27:bb:
                    1b:4e:19:3c:a7:c8:78:d4:e7:8a:13:b1:5d:ef:c0:
                    69:25:43:64:c2:16:fa:d5:c0:5f:83:bb:12:3e:c9:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:80:AB:48:54:A4:AF:93:04:6A:BB:FD:E0:C5:D2:90:55:CF:1B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl

            X509v3 Authority Key Identifier:
                keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:f5:2f:14:49:c7:2c:88:30:1b:eb:0d:60:9a:39:23:20:53:
         a8:02:3b:d7:49:a2:50:11:a2:55:c8:92:7b:b2:d1:90:97:e0:
         16:b1:c0:1a:fb:45:b6:89:cc:5b:fa:b4:57:72:22:4d:4c:4d:
         5c:61:d8:79:bb:7d:6f:78:dd:68:94:67:ad:12:f4:75:be:69:
         a7:88:53:2c:6b:4d:16:a7:33:9a:ce:5a:58:fe:88:1f:ec:c4:
         17:97:93:b8:4a:0b:88:8d:97:cd:58:b0:93:b1:be:b5:68:65:
         af:6e:a0:f7:ee:fa:f4:bf:b9:09:4d:b9:2e:4a:bb:ee:2c:cd:
         a2:d8:b6:59:2a:e3:ea:8c:96:8c:41:4a:c9:be:07:3e:56:97:
         e6:21:dc:bf:f3:52:cb:ba:63:3e:10:4e:81:e2:03:1e:4e:3a:
         2c:c0:d8:15:94:39:c1:6e:b4:61:d3:3c:74:3c:b4:03:a5:2e:
         6c:86:6d:08:3a:c9:4e:6d:d0:58:d0:a2:e6:c8:6e:cb:a8:db:
         4f:27:be:d4:a1:3e:8e:13:be:ac:a5:fa:62:87:83:e4:92:0d:
         13:d4:7b:f7:86:0a:54:0b:00:6a:32:c0:f3:21:16:b0:27:90:
         7b:f7:d7:f2:94:60:9d:97:cb:3d:cb:47:93:07:b7:1f:01:29:
         9f:8c:92:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:30:56 2026 by rpki-client