Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/580198ec-4f6a-32ca-b3bd-1eb2f4d66c42.roa
File:                     580198ec-4f6a-32ca-b3bd-1eb2f4d66c42.roa (raw, json)
Hash identifier:          xlItD7Qu1/nqvJzyQXfbvbT4Q56NspbYozlaDTO+aaI=
Subject key identifier:   66:5D:D6:9E:31:3D:52:35:00:5C:B5:B9:0A:A5:E9:F2:32:DD:BE:89
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B947532AA5003251E78C600
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/580198ec-4f6a-32ca-b3bd-1eb2f4d66c42.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        136.226.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:75:32:aa:50:03:25:1e:78:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=138ce11a-137f-462a-ace9-08529415e884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d4:66:ff:2e:50:ed:73:ad:18:5d:dc:af:85:
                    48:d8:5b:03:24:f4:f5:5b:a1:96:2e:14:4e:fc:5b:
                    e1:95:4a:d2:a5:ef:cb:09:22:eb:c2:eb:be:f4:74:
                    89:75:70:65:83:82:40:f8:83:94:b5:2f:c1:4d:9c:
                    bb:58:de:d4:56:68:59:2f:c8:75:3a:b5:ef:5b:03:
                    22:36:fb:c2:8b:92:46:5b:2d:5a:10:44:02:ff:2f:
                    26:75:66:14:65:4f:db:7b:98:b9:03:4a:c0:04:c2:
                    01:30:47:80:e7:91:84:11:f2:42:7e:1c:79:7e:81:
                    7e:37:4c:52:7a:73:3e:61:e1:57:84:14:64:e3:e4:
                    86:98:75:68:6a:91:dd:e7:04:01:82:cd:e4:e4:d2:
                    f4:49:2a:34:03:23:b2:1d:58:b7:02:94:07:66:e8:
                    24:e7:bf:ad:58:96:42:26:3e:f5:ca:fc:56:58:5d:
                    87:e0:ce:13:7d:9f:8f:10:1e:a4:7a:57:e0:15:0a:
                    16:3b:f1:e1:32:ae:af:a8:b6:75:d7:af:6d:70:08:
                    5c:b7:0c:ff:7a:0a:38:e6:4b:e0:a1:ee:d7:52:e2:
                    bc:90:e9:1a:e8:d5:0f:45:04:00:d3:e9:f0:5b:f0:
                    f8:0c:ad:65:30:ab:77:b3:20:5f:11:eb:94:2a:e5:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5D:D6:9E:31:3D:52:35:00:5C:B5:B9:0A:A5:E9:F2:32:DD:BE:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/580198ec-4f6a-32ca-b3bd-1eb2f4d66c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:af:52:f7:3b:bd:62:3e:6d:d4:83:1c:a0:e7:b4:c9:9a:
         10:e4:56:18:e6:cc:0a:85:5d:7f:89:84:09:8f:a1:f5:4c:37:
         26:a9:ef:79:a8:7d:83:7a:cc:f5:b8:82:81:ab:b3:6f:1e:1b:
         89:45:00:c3:77:52:9b:81:7c:80:fc:58:a3:d9:a3:d0:e7:82:
         87:72:fd:4b:82:af:8f:b5:80:be:e1:48:88:73:97:c1:a6:06:
         2c:3c:01:a1:a2:0e:b2:2b:44:79:a6:e3:2e:ec:8a:ef:92:df:
         ef:03:e7:48:4a:86:2f:12:81:b0:37:0c:61:87:2c:83:67:af:
         54:9b:bd:b1:9a:5c:6c:61:bd:a3:89:0e:a2:41:de:83:24:cb:
         d6:3c:cf:3e:d5:fa:10:1e:f7:9d:78:d1:bd:df:5f:d5:1c:b8:
         02:aa:4e:f3:ba:74:cd:ed:f0:84:a8:c3:e0:b5:29:6f:3d:cd:
         f3:0d:8e:5c:1e:da:78:87:6b:39:09:e6:93:13:ba:4f:7b:e0:
         4c:fb:1d:9c:51:12:8d:79:05:9a:6d:ff:64:ba:7c:bd:92:41:
         c2:04:d8:66:90:04:9d:b5:8a:d4:b1:1c:b1:6e:76:07:11:c7:
         e7:bd:21:40:21:b3:a7:40:7d:cb:2a:c3:76:00:0b:66:86:5c:
         a5:39:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:37 2026 by rpki-client