Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0580c67c-07b5-3913-8347-d5f5d02490de.roa
File:                     0580c67c-07b5-3913-8347-d5f5d02490de.roa (raw, json)
Hash identifier:          3IVyU6NmHFvP/dQ67anlQ7i1m/Uo/uV6jCGZELrqOSY=
Subject key identifier:   80:7E:54:44:9E:AA:03:AB:E2:9C:6E:C0:B7:5B:48:F0:F5:BB:1C:10
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E561A1485DAFE5AD3573DDC00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0580c67c-07b5-3913-8347-d5f5d02490de.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     9009
IP address blocks:        38.180.0.0/22 maxlen: 24
                          38.180.6.0/23 maxlen: 24
                          38.180.8.0/23 maxlen: 24
                          38.180.11.0/24 maxlen: 24
                          38.180.14.0/24 maxlen: 24
                          38.180.16.0/22 maxlen: 24
                          38.180.20.0/22 maxlen: 24
                          38.180.25.0/24 maxlen: 24
                          38.180.26.0/23 maxlen: 24
                          38.180.28.0/22 maxlen: 24
                          38.180.32.0/23 maxlen: 24
                          38.180.35.0/24 maxlen: 24
                          38.180.48.0/23 maxlen: 24
                          38.180.52.0/22 maxlen: 24
                          38.180.56.0/24 maxlen: 24
                          38.180.58.0/23 maxlen: 24
                          38.180.60.0/22 maxlen: 24
                          38.180.64.0/23 maxlen: 24
                          38.180.72.0/21 maxlen: 24
                          38.180.86.0/23 maxlen: 24
                          38.180.92.0/22 maxlen: 24
                          38.180.100.0/22 maxlen: 24
                          38.180.106.0/23 maxlen: 24
                          38.180.108.0/23 maxlen: 24
                          38.180.118.0/23 maxlen: 24
                          38.180.128.0/23 maxlen: 24
                          38.180.135.0/24 maxlen: 24
                          38.180.138.0/23 maxlen: 24
                          38.180.140.0/24 maxlen: 24
                          38.180.143.0/24 maxlen: 24
                          38.180.144.0/24 maxlen: 24
                          38.180.147.0/24 maxlen: 24
                          38.180.148.0/22 maxlen: 24
                          38.180.152.0/23 maxlen: 24
                          38.180.154.0/24 maxlen: 24
                          38.180.188.0/22 maxlen: 24
                          38.180.194.0/23 maxlen: 24
                          38.180.196.0/22 maxlen: 24
                          38.180.200.0/23 maxlen: 24
                          38.180.202.0/24 maxlen: 24
                          38.180.205.0/24 maxlen: 24
                          38.180.214.0/23 maxlen: 24
                          38.180.224.0/23 maxlen: 24
                          38.180.226.0/24 maxlen: 24
                          38.180.235.0/24 maxlen: 24
                          38.180.236.0/24 maxlen: 24
                          38.180.239.0/24 maxlen: 24
                          38.180.240.0/24 maxlen: 24
                          38.180.249.0/24 maxlen: 24
                          38.180.253.0/24 maxlen: 24
                          38.244.130.0/23 maxlen: 24
                          38.244.132.0/23 maxlen: 24
                          38.244.146.0/23 maxlen: 24
                          38.244.148.0/22 maxlen: 24
                          38.244.156.0/23 maxlen: 24
                          38.244.164.0/22 maxlen: 24
                          38.244.168.0/22 maxlen: 24
                          38.244.172.0/23 maxlen: 24
                          38.244.176.0/23 maxlen: 24
                          38.244.180.0/22 maxlen: 24
                          38.244.184.0/23 maxlen: 24
                          38.244.190.0/23 maxlen: 24
                          38.244.195.0/24 maxlen: 24
                          38.244.196.0/23 maxlen: 24
                          38.244.198.0/24 maxlen: 24
                          38.244.201.0/24 maxlen: 24
                          38.244.202.0/24 maxlen: 24
                          38.244.207.0/24 maxlen: 24
                          38.244.212.0/24 maxlen: 24
                          149.33.1.0/24 maxlen: 24
                          149.33.2.0/23 maxlen: 24
                          149.33.4.0/23 maxlen: 24
                          149.33.10.0/23 maxlen: 24
                          149.33.16.0/24 maxlen: 24
                          149.33.18.0/24 maxlen: 24
                          149.33.25.0/24 maxlen: 24
                          149.33.26.0/23 maxlen: 24
                          149.33.28.0/23 maxlen: 24
                          149.33.30.0/23 maxlen: 24
                          149.33.32.0/24 maxlen: 24
                          149.33.34.0/24 maxlen: 24
                          149.33.38.0/24 maxlen: 24
                          149.33.42.0/23 maxlen: 24
                          149.33.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:14:85:da:fe:5a:d3:57:3d:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=d01b049f-74b2-49fa-a8c6-809f2cdeb761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:1d:52:e7:48:79:83:f2:44:53:28:f6:17:
                    13:df:25:df:eb:69:9e:55:be:54:7d:46:3c:5a:b8:
                    11:88:63:6b:7e:c9:32:15:dd:b4:fc:00:e0:39:8c:
                    e4:a0:10:a0:72:00:97:99:d2:17:ac:33:9c:07:c2:
                    74:43:14:7c:c9:34:ba:c2:99:4b:f2:41:15:25:23:
                    fe:99:4b:77:04:de:f2:5d:38:6f:9e:c9:c1:74:84:
                    49:a3:7e:c7:a7:26:2b:8f:f2:41:dc:71:f4:9d:cd:
                    91:3a:ee:cc:0f:29:38:0e:7f:48:b1:c0:13:0f:07:
                    31:55:44:8d:3f:1f:c1:7a:70:c3:d7:da:f5:64:21:
                    f4:a2:45:7f:c9:db:d6:12:ba:fc:e3:34:84:3e:18:
                    c7:17:0c:ff:a2:88:41:10:73:97:23:bc:83:39:c4:
                    fb:77:70:b6:78:1f:8f:3a:8e:32:0d:14:16:d3:db:
                    55:61:5b:78:4e:d2:1e:a9:c9:d8:4a:cf:d6:8e:28:
                    05:3f:7c:88:4e:e9:28:47:30:a7:9e:f7:56:93:67:
                    3f:24:8a:73:76:2a:b2:ac:0a:4b:9b:84:ef:d3:27:
                    b9:8a:28:1e:df:20:91:10:46:71:da:e4:1b:f1:11:
                    8a:3c:95:4b:19:57:4c:5c:c0:30:7d:e2:56:4d:fc:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7E:54:44:9E:AA:03:AB:E2:9C:6E:C0:B7:5B:48:F0:F5:BB:1C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0580c67c-07b5-3913-8347-d5f5d02490de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.180.0.0/22
                  38.180.6.0-38.180.9.255
                  38.180.11.0/24
                  38.180.14.0/24
                  38.180.16.0/21
                  38.180.25.0-38.180.33.255
                  38.180.35.0/24
                  38.180.48.0/23
                  38.180.52.0-38.180.56.255
                  38.180.58.0-38.180.65.255
                  38.180.72.0/21
                  38.180.86.0/23
                  38.180.92.0/22
                  38.180.100.0/22
                  38.180.106.0-38.180.109.255
                  38.180.118.0/23
                  38.180.128.0/23
                  38.180.135.0/24
                  38.180.138.0-38.180.140.255
                  38.180.143.0-38.180.144.255
                  38.180.147.0-38.180.154.255
                  38.180.188.0/22
                  38.180.194.0-38.180.202.255
                  38.180.205.0/24
                  38.180.214.0/23
                  38.180.224.0-38.180.226.255
                  38.180.235.0-38.180.236.255
                  38.180.239.0-38.180.240.255
                  38.180.249.0/24
                  38.180.253.0/24
                  38.244.130.0-38.244.133.255
                  38.244.146.0-38.244.151.255
                  38.244.156.0/23
                  38.244.164.0-38.244.173.255
                  38.244.176.0/23
                  38.244.180.0-38.244.185.255
                  38.244.190.0/23
                  38.244.195.0-38.244.198.255
                  38.244.201.0-38.244.202.255
                  38.244.207.0/24
                  38.244.212.0/24
                  149.33.1.0-149.33.5.255
                  149.33.10.0/23
                  149.33.16.0/24
                  149.33.18.0/24
                  149.33.25.0-149.33.32.255
                  149.33.34.0/24
                  149.33.38.0/24
                  149.33.42.0-149.33.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:9b:04:78:46:98:1e:5f:22:b7:a2:97:3b:a9:82:32:eb:
         d9:60:00:27:88:cc:b6:b3:4e:3f:74:a0:ae:fc:37:0c:68:b5:
         e9:df:52:33:80:b0:a5:17:93:21:76:f8:84:5e:1a:c4:ce:be:
         c9:8d:6f:5e:ab:8c:b1:d3:77:b8:3f:eb:32:e9:3f:09:aa:24:
         7e:df:9f:ca:c3:04:3e:7e:2e:a5:66:dd:0b:c7:9f:92:d1:b0:
         df:cd:21:a3:a8:1c:78:89:3f:0c:eb:22:69:3e:d0:f2:9d:14:
         b1:74:fe:8e:cf:e0:06:c9:d1:18:89:c2:ec:99:c4:0a:c2:5f:
         28:64:8e:7c:00:79:b5:3a:23:23:f5:3c:de:22:38:c3:f8:8d:
         ce:65:9d:3f:62:95:18:62:23:62:eb:89:13:c6:46:79:48:fd:
         bd:99:0f:ae:d5:81:cd:bc:0d:77:56:88:f1:df:0d:bd:2f:04:
         77:93:09:31:5e:45:4f:ff:39:72:68:00:ec:9b:00:5f:ac:3a:
         49:89:9f:96:02:61:f6:54:77:e3:55:6e:0c:70:e3:39:44:83:
         57:1c:ed:2b:a5:e7:4d:1b:66:3d:bc:23:fb:d9:ed:a5:5b:a3:
         df:af:06:fc:7f:dc:58:ef:4e:7e:48:88:d7:59:b4:08:e6:c8:
         31:ba:6f:9c
-----BEGIN CERTIFICATE-----
MIIIFTCCBv2gAwIBAgIUAQ0Mn0MoWE5WGhSF2v5a01c93AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZDAxYjA0OWYtNzRiMi00OWZhLWE4YzYtODA5ZjJjZGViNzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFAdUudIeYPyRFMo9hcT3yXf62meVb5UfUY8
WrgRiGNrfskyFd20/ADgOYzkoBCgcgCXmdIXrDOcB8J0QxR8yTS6wplL8kEVJSP+
mUt3BN7yXThvnsnBdIRJo37HpyYrj/JB3HH0nc2ROu7MDyk4Dn9IscATDwcxVUSN
Px/BenDD19r1ZCH0okV/ydvWErr84zSEPhjHFwz/oohBEHOXI7yDOcT7d3C2eB+P
Oo4yDRQW09tVYVt4TtIeqcnYSs/WjigFP3yITukoRzCnnvdWk2c/JIpzdiqyrApL
m4Tv0ye5iige3yCREEZx2uQb8RGKPJVLGVdMXMAwfeJWTfxEGwIDAQABo4IFJzCC
BSMwHQYDVR0OBBYEFIB+VESeqgOr4pxuwLdbSPD1uxwQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDU4MGM2N2MtMDdiNS0z
OTEzLTgzNDctZDVmNWQwMjQ5MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMIIB7wYIKwYBBQUHAQcBAf8EggHeMIIB2jCCAdYEAgABMIIB
zgMEAia0ADAMAwQBJrQGAwQBJrQIAwQAJrQLAwQAJrQOAwQDJrQQMAwDBAAmtBkD
BAEmtCADBAAmtCMDBAEmtDAwDAMEAia0NAMEACa0ODAMAwQBJrQ6AwQBJrRAAwQD
JrRIAwQBJrRWAwQCJrRcAwQCJrRkMAwDBAEmtGoDBAEmtGwDBAEmtHYDBAEmtIAD
BAAmtIcwDAMEASa0igMEACa0jDAMAwQAJrSPAwQAJrSQMAwDBAAmtJMDBAAmtJoD
BAImtLwwDAMEASa0wgMEACa0ygMEACa0zQMEASa01jAMAwQFJrTgAwQAJrTiMAwD
BAAmtOsDBAAmtOwwDAMEACa07wMEACa08AMEACa0+QMEACa0/TAMAwQBJvSCAwQB
JvSEMAwDBAEm9JIDBAMm9JADBAEm9JwwDAMEAib0pAMEASb0rAMEASb0sDAMAwQC
JvS0AwQBJvS4AwQBJvS+MAwDBAAm9MMDBAAm9MYwDAMEACb0yQMEACb0ygMEACb0
zwMEACb01DAMAwQAlSEBAwQBlSEEAwQBlSEKAwQAlSEQAwQAlSESMAwDBACVIRkD
BACVISADBACVISIDBACVISYwDAMEAZUhKgMEAZUhLDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATqZsEeEaY
Hl8it6KXO6mCMuvZYAAniMy2s04/dKCu/DcMaLXp31IzgLClF5MhdviEXhrEzr7J
jW9eq4yx03e4P+sy6T8JqiR+35/KwwQ+fi6lZt0Lx5+S0bDfzSGjqBx4iT8M6yJp
PtDynRSxdP6Oz+AGydEYicLsmcQKwl8oZI58AHm1OiMj9TzeIjjD+I3OZZ0/YpUY
YiNi64kTxkZ5SP29mQ+u1YHNvA13Vojx3w29LwR3kwkxXkVP/zlyaADsmwBfrDpJ
iZ+WAmH2VHfjVW4McOM5RINXHO0rpedNG2Y9vCP72e2lW6Pfrwb8f9xY705+SIjX
WbQI5sgxum+c
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:58 2026 by rpki-client