Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/0a99490f-f3d5-3f66-bb15-2d0381c8b061.roa
File:                     0a99490f-f3d5-3f66-bb15-2d0381c8b061.roa (raw, json)
Hash identifier:          hJrpLaMem2xsfnOmQpzD6ppgqGoatl06PixmkmCq+ic=
Subject key identifier:   69:0B:6C:4D:58:A1:20:65:80:CC:43:4F:E6:17:76:DD:D4:79:C1:19
Certificate issuer:       /CN=136870e3-c4bf-4b79-9466-6d145047fcd9
Certificate serial:       010D0C9F4328584F07D77E115FE7EBAB0CF5E680
Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/0a99490f-f3d5-3f66-bb15-2d0381c8b061.roa
Signing time:             Tue 01 Sep 2026 13:00:12 +0000
ROA not before:           Tue 01 Sep 2026 13:00:12 +0000
ROA not after:            Mon 30 Nov 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        48.44.0.0/17 maxlen: 17
                          48.44.12.0/23 maxlen: 23
                          48.44.14.0/24 maxlen: 24
                          48.44.16.0/22 maxlen: 22
                          48.44.21.0/24 maxlen: 24
                          48.44.22.0/23 maxlen: 23
                          48.44.24.0/24 maxlen: 24
                          48.44.26.0/23 maxlen: 23
                          48.44.40.0/22 maxlen: 22
                          48.44.46.0/23 maxlen: 23
                          48.44.48.0/23 maxlen: 23
                          48.44.56.0/22 maxlen: 22
                          48.44.132.0/22 maxlen: 22
                          48.44.136.0/21 maxlen: 21
                          48.44.176.0/20 maxlen: 20
                          48.44.192.0/19 maxlen: 19
                          48.45.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:d7:7e:11:5f:e7:eb:ab:0c:f5:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9
        Validity
            Not Before: Sep  1 13:00:12 2026 GMT
            Not After : Nov 30 14:00:12 2026 GMT
        Subject: CN=39ee5091-6722-4423-90d2-20d77f881b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:67:d6:2c:12:39:f5:f2:03:da:36:5c:ba:
                    8c:84:df:54:a2:8f:a9:c6:1f:72:7e:51:c6:95:8f:
                    b4:44:11:77:32:28:ce:da:4f:4a:62:05:86:c2:30:
                    a0:95:29:60:32:7f:7c:21:40:45:48:6b:e2:16:13:
                    ff:1e:fe:ef:c0:0a:66:10:03:a5:e9:6e:0d:f8:ff:
                    c5:ff:95:27:ee:92:5a:c5:41:bb:e1:4c:96:43:ef:
                    33:87:d7:44:dd:9e:44:47:e2:47:77:7d:7e:e1:79:
                    39:96:91:ec:bf:14:a9:d1:57:80:a7:02:45:ca:49:
                    cc:be:d5:56:ea:aa:38:69:f8:aa:46:78:e4:29:b3:
                    79:52:31:02:56:c9:ff:73:6d:d9:9f:cb:40:3e:32:
                    06:68:d8:38:33:b7:8d:53:56:03:66:85:23:74:ba:
                    ba:51:37:7b:f5:44:d6:60:89:f4:5a:1a:ec:b9:f1:
                    9a:2d:f2:aa:59:52:2d:f4:e3:ff:5f:ae:32:00:46:
                    2b:6d:af:d1:d6:e2:cb:95:10:6c:a5:6e:67:11:26:
                    1d:4b:4c:79:23:2d:95:49:22:16:7a:f5:7a:67:af:
                    3e:24:34:8c:77:5b:6d:5e:c4:49:1e:b8:01:e9:c7:
                    8c:8c:e9:c3:ec:23:a6:90:f4:d3:96:31:54:84:a2:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:6C:4D:58:A1:20:65:80:CC:43:4F:E6:17:76:DD:D4:79:C1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/0a99490f-f3d5-3f66-bb15-2d0381c8b061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl

            X509v3 Authority Key Identifier:
                keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.44.0.0/17
                  48.44.132.0-48.44.143.255
                  48.44.176.0-48.44.223.255
                  48.45.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:09:2d:6e:19:82:bc:4d:10:69:74:e7:66:57:ad:79:00:34:
         3d:17:f4:fe:04:1c:d8:91:5a:70:43:07:6e:29:b8:9f:1e:39:
         c2:1f:2d:d8:a1:dc:9a:40:97:0b:5b:e7:ae:fa:ea:c2:a5:5f:
         45:9b:cf:a4:6e:de:d5:23:ba:8f:63:36:f7:08:03:ed:a2:b9:
         fb:a9:dd:71:91:3d:a3:c4:95:b5:90:c3:58:fd:54:bc:c3:7c:
         2a:dd:22:3c:bd:15:8e:d6:17:af:18:57:a5:af:26:e4:1b:61:
         5e:f4:55:85:ef:73:b8:a2:cc:d5:9c:20:30:d3:0b:bc:d1:95:
         06:56:95:ee:a1:75:e2:f2:e9:32:32:24:5d:53:59:44:04:0d:
         a7:3f:e7:b0:21:aa:29:e9:34:c3:49:a1:7d:f6:9b:f4:a6:36:
         08:08:11:0f:cc:0d:0b:04:8a:5e:2f:21:5b:ee:c1:b2:1a:33:
         39:4d:35:dd:2c:48:7c:66:5b:27:c9:a5:bc:f0:a3:0a:66:e9:
         d1:85:97:17:f4:8e:eb:38:27:5f:be:79:b6:7a:17:20:93:b6:
         e9:25:6c:27:3f:64:58:e1:9d:97:34:58:8f:90:e9:5d:28:4d:
         f2:2c:7b:6f:90:66:0a:0a:5d:19:2d:a2:e5:1e:fc:5c:1a:8a:
         e5:6d:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:51 2026 by rpki-client