Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa
File:                     e4783078-87cc-3032-b18d-3b5526db50f6.roa (raw, json)
Hash identifier:          rbyEyXKhVqZVgv5e/EIuDjOoNZBcwGhkobHL+Ci/N9o=
Subject key identifier:   B3:C2:85:32:F5:0B:48:B4:00:8D:F8:58:B1:01:F1:86:AF:EF:10:88
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584D6C0FB59490C3D177195AC800
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        206.146.135.0/24 maxlen: 24
                          206.146.136.0/24 maxlen: 24
                          206.146.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b5:94:90:c3:d1:77:19:5a:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=9b458354-c6f6-42e6-a5af-d70d4e0b33a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:3e:61:2c:ce:3d:c6:f9:69:aa:c1:58:05:
                    e8:54:65:81:88:92:49:66:a1:38:50:40:f8:7e:b7:
                    2a:ee:6f:3b:6d:21:f1:74:c4:ac:4c:3a:25:19:b3:
                    43:e1:9e:6c:74:dc:16:99:66:c7:59:4f:0b:c9:c4:
                    ac:f4:73:be:f5:85:86:9e:32:ff:db:07:b1:77:8b:
                    cb:7d:06:17:1a:b4:24:c9:12:11:76:e4:90:b6:c5:
                    90:41:82:0f:05:8d:aa:04:95:b6:45:d2:48:f3:7b:
                    4e:df:e6:65:fd:7a:b9:b3:da:cd:26:41:dc:06:c2:
                    fb:f1:f0:e4:70:e5:c3:87:5f:a1:e0:65:29:a3:3a:
                    6c:6a:43:56:fd:f6:e7:6a:2f:d5:32:bc:b1:57:59:
                    d5:b9:79:a6:25:38:9c:28:c0:3d:86:94:26:17:a9:
                    05:b4:5f:7f:b9:36:92:21:de:50:56:40:40:3d:16:
                    fe:2e:3e:2c:70:32:ff:a2:f7:69:a0:be:f1:a9:fd:
                    43:a9:bf:58:b8:4c:7a:5c:23:dc:9b:da:05:a7:f3:
                    c5:ea:59:48:c0:4a:64:cb:b5:86:27:bc:d6:52:49:
                    67:db:e9:95:14:00:b5:53:c4:5a:67:b0:12:1e:d2:
                    a7:c8:93:e0:de:17:8e:82:96:e4:ef:ff:50:3d:a3:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:85:32:F5:0B:48:B4:00:8D:F8:58:B1:01:F1:86:AF:EF:10:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.146.135.0-206.146.137.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:cf:e3:83:c1:9e:91:45:1d:c0:8f:96:ba:59:23:17:9e:65:
         1b:90:b5:08:56:68:60:60:66:2f:7f:8e:cf:a6:e2:7b:2b:5b:
         47:6f:ed:d4:19:a1:8a:c8:43:df:1f:96:d8:b5:33:8c:69:e9:
         a1:b9:09:a5:58:70:19:1c:c5:77:2f:53:27:10:d9:4d:b4:ff:
         82:9f:c5:39:c8:be:25:66:ea:05:be:b1:f9:fa:84:aa:6f:10:
         e2:3d:e6:0a:cd:82:a7:ca:f8:56:ef:91:d6:8a:52:a9:a5:86:
         50:09:95:36:f8:7d:75:e1:68:9c:73:1c:c2:f7:03:2a:e7:95:
         04:e0:01:88:67:e1:0f:da:74:82:7d:15:b2:23:65:a1:ec:5d:
         7e:ad:43:a7:c7:8b:83:5f:4e:67:51:d7:de:62:0f:72:0c:41:
         25:59:29:69:90:d9:2f:d3:58:03:ee:4e:39:f9:e5:dc:df:3a:
         ab:9d:4e:c0:83:ed:96:20:9e:56:32:fa:f4:3d:0a:3d:50:5c:
         8f:5d:ad:6c:1e:61:77:2d:9f:db:3c:a3:bb:ff:c1:ce:22:61:
         9c:5e:87:b4:b9:8c:db:44:e9:8b:10:fa:b2:fc:6d:1b:c0:8f:
         0d:c7:79:4b:f4:6e:5b:54:38:fc:c7:f2:90:9d:c6:d1:58:fe:
         35:bb:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:34:50 2026 by rpki-client