Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa
File:                     8983653f-7534-3c16-93d0-78e539d747fd.roa (raw, json)
Hash identifier:          j/yobWegJ4j4HT1chil3T4f275gX77bQJ1U0bT7cQHw=
Subject key identifier:   BB:0F:22:76:5F:41:D5:8F:DE:FA:29:BB:A2:CC:51:08:BB:73:A9:C2
Certificate issuer:       /CN=bcc3c2b1-4073-40d5-bff6-495413d86664
Certificate serial:       010D0C9F4328584E37646A8CE62F682BAD384FC0
Authority key identifier: 3F:0C:46:74:7A:1F:18:39:17:85:08:8E:FA:90:37:20:35:1F:07:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     54746
IP address blocks:        136.175.128.0/22 maxlen: 22
                          136.175.128.0/24 maxlen: 24
                          136.175.129.0/24 maxlen: 24
                          136.175.130.0/24 maxlen: 24
                          136.175.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6a:8c:e6:2f:68:2b:ad:38:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc3c2b1-4073-40d5-bff6-495413d86664
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=63944c42-9aee-498f-9faf-e255386aa497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:66:af:e9:d5:1c:c1:34:b4:17:98:59:4e:
                    43:ba:6e:5c:48:bd:84:15:22:81:f7:ed:6d:35:a8:
                    2b:54:9a:0e:1f:c3:fb:5c:47:29:b1:46:b2:4c:5f:
                    a7:72:96:af:0b:ad:12:d2:43:8a:a9:c1:1a:83:15:
                    86:dd:d4:82:8d:b5:a9:49:2c:31:31:ea:0f:22:cb:
                    b4:7b:6b:a6:c6:b2:cb:29:60:d8:a6:93:90:3b:d3:
                    7a:5f:03:7c:4d:56:5a:0b:f6:de:f5:e7:1a:ed:24:
                    81:07:dc:31:ac:db:ab:c8:f5:b5:87:5e:03:63:7e:
                    57:4e:e3:40:1b:d2:f3:0d:f6:d7:eb:64:f8:bf:42:
                    03:31:c4:06:d9:21:d1:2e:ad:c4:af:65:c3:85:c3:
                    ac:02:9c:28:83:df:dd:e4:2e:a5:59:7d:43:d9:b4:
                    11:a4:f0:a1:0a:b3:05:47:84:69:84:ba:74:0a:41:
                    85:f5:a5:c3:33:d2:c9:69:13:7c:fc:c3:6f:99:32:
                    00:7f:3f:e6:36:a7:b1:5b:c2:fc:cb:db:05:16:07:
                    bd:bd:81:49:ee:ca:40:68:97:b7:78:b7:f1:96:8b:
                    3a:82:1f:5d:bf:12:1c:5d:1b:7d:b3:fe:c1:69:da:
                    5a:6b:af:a4:a9:87:aa:38:fa:bc:3e:d5:eb:3c:80:
                    1a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:22:76:5F:41:D5:8F:DE:FA:29:BB:A2:CC:51:08:BB:73:A9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.crl

            X509v3 Authority Key Identifier:
                keyid:3F:0C:46:74:7A:1F:18:39:17:85:08:8E:FA:90:37:20:35:1F:07:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:67:0b:fe:76:ec:82:c3:b5:3e:d6:68:09:34:4a:d9:b7:
         22:4f:5e:10:b9:82:ec:1b:ec:cd:cd:11:a2:d9:c7:53:fe:3f:
         06:fc:93:73:bb:e9:46:67:43:9d:e6:52:c8:7b:72:0b:dc:8a:
         42:15:0b:10:d4:44:06:d4:38:56:b1:93:11:d1:a4:ca:c3:53:
         f4:d3:93:1e:37:6e:9e:86:51:51:09:24:0a:3a:71:c7:a1:c5:
         52:44:bc:80:f9:c1:5f:a9:22:08:b2:30:a7:c2:d9:21:61:cf:
         e6:cf:ee:16:84:8e:f1:5f:22:d4:0e:a8:c2:1d:2a:a9:ac:49:
         c2:18:bf:e7:87:51:ca:24:00:5c:2e:34:75:db:55:20:c7:5a:
         ab:d7:45:62:6f:a5:52:44:07:ae:e1:f9:89:74:69:20:96:e3:
         74:ce:56:fc:1f:f6:99:dd:6c:59:78:c3:56:d3:e9:95:95:25:
         b6:f3:6b:28:7a:15:5f:b4:c4:e6:29:69:78:2f:7e:74:65:1d:
         65:33:20:78:1d:e7:f0:65:dc:dd:56:1a:47:ce:c6:9f:9c:2a:
         5a:9f:af:96:53:0b:98:a9:89:77:87:a7:47:8c:86:43:d7:27:
         09:5d:89:f1:f8:dc:76:0f:90:f5:72:f2:76:e7:b4:e3:91:2b:
         67:e6:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:59 2026 by rpki-client