Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/86bae189-b50b-313a-99e1-ec0e97c7834a.roa
File:                     86bae189-b50b-313a-99e1-ec0e97c7834a.roa (raw, json)
Hash identifier:          gncFoNTAXP3F+rb3fXeci6TQZOiZoj2gRJwLKCo+lr0=
Subject key identifier:   ED:91:59:DE:F6:15:6B:12:5B:87:1D:09:AC:3F:48:78:24:8B:02:88
Certificate issuer:       /CN=136870e3-c4bf-4b79-9466-6d145047fcd9
Certificate serial:       010D0C9F4328584DE84B5E0E9B685EBA95808E80
Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/86bae189-b50b-313a-99e1-ec0e97c7834a.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     7029
IP address blocks:        48.44.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5e:0e:9b:68:5e:ba:95:80:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=684e5a39-b352-49c6-8008-f0f60693e634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:86:d7:5f:ca:60:d6:00:3f:a2:15:7f:c6:
                    10:a9:a2:70:58:c0:95:54:ca:03:97:1d:f1:07:70:
                    66:1d:f2:5f:3b:cb:dc:fe:c9:8a:94:a3:4c:20:56:
                    d1:6f:78:dc:b7:a0:30:02:dd:07:60:ae:38:be:fd:
                    97:64:76:f1:00:54:8b:27:72:d3:06:a0:67:43:46:
                    86:98:59:08:ea:0e:c1:9d:28:63:9e:3f:da:9e:29:
                    2a:6a:df:d1:51:e6:64:ef:cd:5a:06:fa:b4:8c:43:
                    73:3d:ef:10:fe:2a:44:7a:f6:a2:de:09:2e:0a:ff:
                    48:59:52:f7:32:77:42:ae:6e:0a:32:5f:51:09:a2:
                    c0:6b:b7:f6:99:a2:de:83:00:32:93:a5:8e:30:7d:
                    f7:6a:99:a1:fd:97:66:6b:19:16:38:cc:98:29:98:
                    f6:e6:9f:d1:d3:ef:b0:16:ea:55:f9:d9:dd:e5:46:
                    f1:a0:5c:6d:fd:cc:b9:a9:7c:e2:2b:3b:3f:25:6a:
                    a1:0d:39:02:e1:9f:50:42:86:91:c7:1f:b6:ef:e1:
                    8a:35:13:c7:83:a5:5a:41:51:8f:85:12:10:e5:90:
                    ce:3e:e9:51:56:4d:7f:72:13:53:2d:8e:f6:10:9e:
                    9d:44:10:15:d7:15:67:75:63:1a:03:c6:93:0e:4e:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:91:59:DE:F6:15:6B:12:5B:87:1D:09:AC:3F:48:78:24:8B:02:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/86bae189-b50b-313a-99e1-ec0e97c7834a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl

            X509v3 Authority Key Identifier:
                keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.44.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:85:66:3e:4f:60:8b:45:a5:a4:4c:36:f0:37:d0:cc:c8:
         23:e8:2a:43:15:90:d1:f2:19:5e:75:cc:83:72:a9:8f:a4:0b:
         d6:24:e8:1e:75:31:73:0c:4d:d6:88:e5:40:83:23:92:d9:39:
         51:86:ad:92:63:e1:17:3e:c6:67:94:cc:99:43:57:44:fd:85:
         1d:07:0f:2b:3f:d1:44:1a:0e:6d:3d:f7:08:88:8f:12:d2:50:
         12:d3:14:b1:8a:32:19:a1:6c:db:af:7a:bb:3a:7c:fe:f0:17:
         ad:ee:47:76:cc:10:93:ef:ef:8a:72:69:e1:c3:53:14:83:9f:
         cf:c5:c9:9e:f4:f5:31:12:14:ac:bc:b9:07:9c:ec:c3:4e:cf:
         ab:7f:e7:90:70:20:1f:96:b6:2f:8b:fb:5d:7d:1f:ac:31:e0:
         a1:5d:a1:51:2c:61:60:3a:1d:d8:d9:27:64:e3:90:62:5e:12:
         f6:31:38:e3:ae:f5:12:32:24:57:d4:45:c3:51:06:15:7a:3e:
         15:6f:3f:f3:ec:a7:0e:0c:91:e6:86:0e:f8:78:9c:3f:82:89:
         95:c0:a0:47:5f:8e:3c:4b:34:3a:9d:b0:cc:9c:c9:f7:cd:48:
         9f:15:12:d2:fd:4f:6e:bb:ba:91:fe:e1:e1:ba:df:d5:10:2b:
         6b:fb:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:31 2026 by rpki-client