Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          Pt0HeoiFfjuyYxYfssxfFtckhAHLNbzpfUTGUWSxK2w=
Subject key identifier:   37:EF:CE:9A:7C:22:B2:6D:5B:AE:E3:AF:80:FA:20:CD:34:D4:03:57
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       245F8308E19A67382DD4E4AA797D60C3305EFD39
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS30058.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     30058
IP address blocks:        207.180.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:83:08:e1:9a:67:38:2d:d4:e4:aa:79:7d:60:c3:30:5e:fd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=37EFCE9A7C22B26D5BAEE3AF80FA20CD34D40357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:ad:50:bc:6c:b6:73:00:02:05:e7:6b:d0:
                    5b:e8:8d:a1:6d:28:1b:70:22:6a:ad:be:97:37:a2:
                    97:66:90:4a:56:e9:db:7f:44:06:87:4c:8c:78:99:
                    58:ba:ed:a7:10:8d:fd:af:11:95:d8:6a:59:80:ca:
                    f7:10:ee:f4:0b:43:fc:6e:93:40:03:a1:d3:13:33:
                    63:f1:e8:6c:fb:8e:6a:4c:d3:6f:4e:5d:df:f7:dd:
                    80:1b:e8:f3:85:63:b4:49:07:60:31:06:6b:a5:cb:
                    6f:eb:ee:96:fe:31:d7:7e:ae:16:0c:60:b5:12:3a:
                    fd:82:b8:66:f3:e0:22:ac:25:28:0f:35:e0:9f:28:
                    f1:b5:84:d3:b1:10:9b:9b:1e:9c:af:68:f8:d3:c2:
                    30:ee:b6:bc:bf:06:c7:8d:86:50:af:6b:d0:3e:8d:
                    2d:41:17:07:93:f4:d3:88:04:6a:be:d6:fa:76:c3:
                    8c:11:a8:10:c1:34:f7:0a:d5:a2:f0:f6:30:72:83:
                    d7:51:da:97:e6:f8:0c:82:0e:c8:68:0b:7e:78:fe:
                    c1:d2:38:9e:1f:9e:4d:b5:9f:63:30:f4:89:68:fd:
                    62:f9:3c:be:29:bf:9d:3e:4a:fc:06:5b:9e:5f:31:
                    12:8a:c6:0f:ef:3f:b5:5a:b8:c7:0a:d4:0c:3e:ca:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EF:CE:9A:7C:22:B2:6D:5B:AE:E3:AF:80:FA:20:CD:34:D4:03:57
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:1f:e9:8c:d1:5c:1d:52:71:2e:f3:a4:17:0c:66:e1:f4:
         12:4f:3a:55:60:86:6d:84:c2:f8:22:f8:4e:28:f5:4f:26:0d:
         0c:df:db:25:c8:28:20:21:57:33:23:9c:37:8f:e7:d0:dc:2a:
         c1:81:bc:c5:f4:0b:48:d8:a1:0b:46:1e:5b:5d:43:6c:bd:ed:
         b6:8f:d4:41:23:1d:66:74:a2:e9:a5:ed:ec:14:26:e4:bc:ba:
         08:f6:bf:08:32:7d:a6:b1:6b:4b:68:ec:87:b9:54:4d:2a:b0:
         e5:84:64:2a:74:05:d8:a0:e1:c3:88:b9:41:34:e7:b1:5b:dc:
         77:d6:ec:72:5a:76:b8:ed:42:bd:df:e7:6d:e4:0d:cc:94:e2:
         ab:9f:e6:e7:52:da:34:07:91:a1:62:0e:10:64:76:ad:e7:cc:
         14:c1:96:4d:ef:32:87:48:17:79:8b:42:56:53:5a:94:7b:4a:
         87:a6:85:36:2e:89:d5:04:5b:92:69:c3:1b:48:d9:5d:2e:74:
         15:99:29:a8:85:58:41:9f:eb:dd:72:2f:58:f3:8f:4b:e8:b9:
         ef:ec:7c:b4:e6:c5:78:df:1b:ab:1b:a4:92:50:b6:0a:d8:09:
         a1:64:2c:90:89:e8:c5:15:88:9b:d0:50:79:13:a8:c8:b7:3a:
         9a:28:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:18 2026 by rpki-client