Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dba1186-0d5e-3558-b7b2-11c0d2288acd.roa
File:                     4dba1186-0d5e-3558-b7b2-11c0d2288acd.roa (raw, json)
Hash identifier:          IuIo4ebC1rhiVG9ALoijKMtRFjElJW5WtYrTUrc9hiU=
Subject key identifier:   BE:1E:6A:3A:1C:56:C3:54:E7:81:3E:FB:A7:97:8C:7D:BA:91:F8:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6302F8B1332CA4829DE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dba1186-0d5e-3558-b7b2-11c0d2288acd.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        69.136.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:30:2f:8b:13:32:ca:48:29:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=46b6ebf6-9364-4552-b0dd-b545cb55a5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:db:37:01:46:04:47:46:f9:0e:04:28:eb:0a:
                    ac:f2:21:f3:93:f8:64:46:ce:ba:89:63:8c:7e:c0:
                    d6:a8:31:19:ac:72:a1:e2:73:e1:a6:e9:c6:e9:ee:
                    f8:1f:73:77:c5:bb:8c:0a:89:2d:a5:f0:09:29:ec:
                    a0:a6:7b:ed:89:80:a9:67:99:e5:7a:bb:73:7f:4d:
                    2b:70:c2:05:5f:96:87:b5:f8:df:16:ba:83:8e:c5:
                    50:41:7c:45:3e:ea:d8:9f:84:78:1b:32:62:27:48:
                    d1:bb:6b:de:c2:e1:a0:18:44:a9:45:ae:38:43:c5:
                    02:a7:5d:7f:27:72:23:62:08:d8:40:e1:e9:63:02:
                    cb:86:2e:6a:b2:ba:09:bd:b3:da:dd:8d:37:d5:57:
                    08:be:4d:78:ea:b7:95:05:28:55:af:83:ae:af:e5:
                    93:34:b8:d7:aa:0e:dc:4e:a8:4e:ad:72:eb:ba:19:
                    60:b4:5a:ae:11:41:35:61:49:a5:1a:46:e6:4f:29:
                    ff:02:a9:fc:f0:92:57:93:a8:21:af:c6:49:dc:da:
                    2d:fd:d5:e9:09:26:b9:19:8e:26:a1:f5:fd:09:6d:
                    2e:c6:22:c7:c6:3e:f4:9a:88:ee:b0:8d:c4:8f:98:
                    b8:d4:00:91:97:ac:91:41:4a:44:9e:4f:a3:3c:ad:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1E:6A:3A:1C:56:C3:54:E7:81:3E:FB:A7:97:8C:7D:BA:91:F8:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dba1186-0d5e-3558-b7b2-11c0d2288acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.136.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:da:bb:16:58:cc:bf:e3:23:a5:48:62:cc:75:a9:6a:54:9f:
         3a:52:0f:b3:7a:67:0d:38:50:08:32:6f:0d:97:3e:b7:91:af:
         63:e4:7b:a5:66:cb:81:f1:54:ce:57:50:c8:08:dc:5b:56:f3:
         37:6e:99:54:bf:bb:4c:57:cf:b5:20:b9:72:74:f9:32:12:46:
         e8:76:d2:ac:8b:27:83:22:26:61:cf:d6:dd:58:67:86:16:b1:
         4e:e8:98:cd:b5:e3:44:77:46:3a:c3:aa:a3:5f:7f:1e:da:49:
         fc:30:a7:44:05:bd:dd:e4:60:ba:e9:7f:89:3b:af:5b:4f:96:
         72:c3:0f:eb:99:35:d3:b2:28:24:62:cf:03:75:13:36:74:26:
         b6:dc:cf:60:35:55:e9:d4:0b:dd:90:3b:ac:b3:7e:c6:95:10:
         2a:b6:d7:fd:ab:07:12:e7:31:8b:b2:f0:1d:e5:41:ff:3d:84:
         17:25:e1:33:04:e2:be:e5:3c:a4:c0:08:7f:5f:7f:9a:ec:ae:
         88:5f:a7:ac:98:62:04:13:31:2a:9b:ad:20:7e:1c:6d:8d:95:
         2e:14:b7:1c:ff:4b:90:4f:33:15:fc:9c:40:5e:b0:cc:4c:75:
         3e:9d:f2:fb:0b:87:c1:ee:db:f2:c2:3b:e8:12:de:0c:e2:c5:
         fa:df:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:58:20 2026 by rpki-client