Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
File:                     a6e045d3-3586-3be0-8f1c-ee95cb321013.roa (raw, json)
Hash identifier:          HJpyOaXs8hQfSqn/7BbgZSsptqYpKuc9gbUMACEmcXE=
Subject key identifier:   49:83:5B:82:A4:66:29:F8:17:08:30:F3:D3:12:40:9E:09:BA:25:D3
Certificate issuer:       /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial:       010D0C9F4328584E86F4FFAC92DE836A7EDE5980
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     5065
IP address blocks:        174.136.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ff:ac:92:de:83:6a:7e:de:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=635a6335-f42b-4d2f-93e9-e0456f383393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:9d:30:47:37:d4:e1:04:fc:b4:a1:90:fc:
                    7b:45:ca:cc:93:a9:7b:a2:11:6f:56:04:bb:76:07:
                    d0:bf:65:18:06:2d:34:76:31:44:75:61:ea:20:7d:
                    ca:66:79:b3:1e:39:7d:29:b3:5c:32:02:5d:2c:70:
                    25:35:d3:b3:fa:63:d0:46:28:fe:72:62:e6:bd:28:
                    e6:96:7b:6b:f7:ae:e5:95:13:24:11:d7:4d:eb:01:
                    3f:d6:7c:69:c3:90:b5:69:9f:75:5e:b5:b7:e5:d8:
                    87:9f:fc:5a:1b:cb:c6:7d:9b:7f:c0:a7:f0:7d:6a:
                    6e:ba:6b:1b:14:66:fa:1e:f6:7c:32:72:4b:da:f9:
                    85:6c:5b:a4:51:9c:f6:42:94:b6:7d:1f:99:35:3b:
                    64:ff:8e:b5:32:60:b8:3c:8d:34:bc:b7:35:1a:cf:
                    4f:62:5a:5d:9d:21:8a:d1:88:84:1e:36:91:83:cd:
                    fb:e4:65:88:80:64:2d:50:c6:43:4b:66:ab:5b:0a:
                    f5:ff:9d:ac:50:e5:07:e5:0a:ba:ab:9c:2e:5c:0c:
                    99:fd:f1:f2:90:d2:59:b0:a4:91:ed:51:0a:78:77:
                    9c:7f:0d:04:09:7a:8b:48:12:a3:32:77:bd:3b:4d:
                    fc:09:a8:42:a4:ca:1d:4c:8a:1b:3d:34:ff:19:d0:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:83:5B:82:A4:66:29:F8:17:08:30:F3:D3:12:40:9E:09:BA:25:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl

            X509v3 Authority Key Identifier:
                keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:87:e2:ee:84:25:31:33:4a:39:71:8d:6a:e8:ba:53:79:56:
         ac:b3:8e:25:16:4b:c9:fe:cf:f7:b9:82:75:8e:53:75:14:94:
         26:43:1e:77:d1:89:ec:c8:7c:56:d1:ef:9b:43:c2:ee:55:1a:
         4b:4b:43:c4:21:93:70:6f:a8:03:03:08:b9:f1:b7:4b:f5:c4:
         71:79:13:63:fe:86:08:cc:94:c9:3a:41:3a:d1:f5:79:35:7d:
         d8:cb:28:c0:24:02:f2:80:0f:54:6c:45:3b:88:b2:38:54:81:
         f1:66:3f:94:33:54:04:03:38:18:ad:c9:db:d4:2a:ac:1e:54:
         ed:86:2b:10:1f:6a:01:66:96:d3:77:bd:75:75:7e:12:d7:6f:
         99:57:58:d2:c7:75:54:2b:21:91:4f:90:2e:46:53:bd:68:a9:
         96:6b:6a:96:f1:94:00:fc:df:5f:1e:ff:14:bf:18:34:1d:4e:
         fa:f4:f0:2d:ff:e4:58:d7:25:24:6b:ae:a0:ea:18:ee:c8:d3:
         d0:b8:89:9f:4f:5f:95:06:2b:b0:36:26:80:91:dc:2d:6f:2d:
         68:a0:ee:00:04:b5:b4:a9:8e:06:85:f1:55:b5:23:b6:7a:d9:
         1a:d6:dc:9e:04:30:aa:ab:bc:61:92:ee:7b:9f:1f:79:6b:63:
         57:a4:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:33:04 2026 by rpki-client