Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d49786d-aac8-3a25-bd87-ef174da19fae.roa
File:                     2d49786d-aac8-3a25-bd87-ef174da19fae.roa (raw, json)
Hash identifier:          EEcqToMrA5vOnEmEwaPmjyr1XxkT+qraT9EalMqTvE0=
Subject key identifier:   55:4D:82:0D:50:63:F8:FC:3F:89:D7:B1:59:94:4D:47:6F:7D:D9:DD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E380FB05C16987EBCBE4B0840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d49786d-aac8-3a25-bd87-ef174da19fae.roa
Signing time:             Fri 19 Jun 2026 02:45:23 +0000
ROA not before:           Fri 19 Jun 2026 02:45:23 +0000
ROA not after:            Thu 17 Sep 2026 02:45:23 +0000
asID:                     396982
IP address blocks:        136.86.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:0f:b0:5c:16:98:7e:bc:be:4b:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 19 02:45:23 2026 GMT
            Not After : Sep 17 02:45:23 2026 GMT
        Subject: CN=f7ccd1e7-7245-4d7a-ba4f-3f397b875a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fa:af:a6:4c:ad:d9:c6:f6:dd:71:2b:8d:99:
                    0f:03:6b:3c:f4:9f:3c:8e:44:e8:41:8e:71:ef:5e:
                    80:98:32:72:e4:60:a4:5c:fe:0f:d6:86:92:e1:ee:
                    d8:a2:00:65:91:06:22:51:46:01:3a:f6:14:4c:bd:
                    33:52:71:81:54:c2:9e:35:0d:bc:69:b9:4a:b1:6f:
                    97:0f:b8:8b:68:a8:96:41:7a:ec:d7:51:d9:ea:22:
                    d1:e1:26:c8:23:20:e6:7b:7b:24:42:88:61:be:c3:
                    85:73:b4:84:66:81:8f:26:ac:8c:89:f4:80:d3:09:
                    fc:d9:d3:c5:a0:81:10:f7:f8:0a:47:2d:80:73:7f:
                    71:cf:4c:c2:35:71:e2:c8:8a:2e:39:45:d6:d8:a6:
                    a6:1e:8c:ac:0b:81:c9:8e:c1:0b:f8:66:53:46:b2:
                    e0:89:ee:20:0e:d3:c0:93:db:34:e5:5c:c9:a4:6f:
                    61:9d:ef:0d:47:b6:9c:ec:ef:02:39:53:27:c0:61:
                    5c:c0:53:43:53:75:41:26:bb:a7:83:92:b1:6d:a5:
                    4c:5a:19:bc:dd:1c:aa:ac:53:54:51:14:45:e7:a6:
                    b7:db:df:0a:cc:b5:33:04:79:42:f8:67:bd:2b:ba:
                    f6:a7:ee:f5:ac:28:92:f5:58:50:0d:c3:37:d0:23:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4D:82:0D:50:63:F8:FC:3F:89:D7:B1:59:94:4D:47:6F:7D:D9:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d49786d-aac8-3a25-bd87-ef174da19fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.86.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ff:8b:9f:e1:24:fd:6b:06:ce:78:75:1a:73:c2:a8:7d:a9:
         dd:5b:f7:ad:99:3d:86:24:41:49:fd:76:76:7b:cb:a7:13:b8:
         28:2f:47:e9:c7:8c:26:14:5a:b3:3b:45:03:a5:a5:dd:42:42:
         77:62:d7:ae:b1:61:91:71:a7:2e:f4:eb:00:46:57:69:5c:47:
         3e:ca:68:c8:01:4d:4e:15:37:7c:28:3f:ad:9d:a2:cd:22:b4:
         43:83:03:ff:9b:fc:8e:30:be:1e:b4:bf:7e:d6:87:c8:98:11:
         19:1f:09:0f:9d:bb:1c:0e:98:ae:a6:ce:57:b3:5d:3f:0c:14:
         1c:49:98:08:0a:ad:fe:e0:c0:e7:15:6c:ef:bf:e5:cf:8d:7a:
         1c:28:0b:8b:29:c1:9b:2f:8f:09:60:58:25:fb:9a:3f:d4:94:
         e0:00:c6:27:e7:1b:01:a6:95:5f:37:2c:c1:18:67:22:4a:ad:
         96:4e:9b:88:ff:f2:4b:8c:df:01:02:d5:73:df:f8:02:b5:5f:
         65:cd:30:b4:40:e9:33:29:f0:4c:5f:0c:46:74:d1:d2:bf:20:
         67:50:43:a4:4e:c5:5a:ca:c9:a6:d7:2c:10:6b:03:e6:83:a9:
         73:a3:8e:15:59:ab:8b:bf:5f:1c:0d:de:6c:0a:ba:21:bc:9b:
         e7:fb:65:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 13:26:37 2026 by rpki-client