Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
File:                     30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa (raw, json)
Hash identifier:          IPEcyQ3dgiH6SYn2Bh8mAx/z/jLNP8v4nwuInwA47Ko=
Subject key identifier:   32:E2:45:78:46:1B:92:03:68:DF:8E:BE:84:1E:9E:B6:8B:03:6A:42
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584ED9C744423B0D95A6E14DBDE9
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     135377
IP address blocks:        23.91.96.0/22 maxlen: 24
                          23.91.100.0/23 maxlen: 24
                          23.236.126.0/24 maxlen: 24
                          23.248.162.0/23 maxlen: 24
                          23.248.174.0/23 maxlen: 24
                          23.248.184.0/23 maxlen: 24
                          45.40.56.0/23 maxlen: 24
                          45.43.36.0/23 maxlen: 24
                          45.43.52.0/22 maxlen: 24
                          45.43.56.0/21 maxlen: 24
                          104.218.162.0/23 maxlen: 24
                          104.218.164.0/22 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.126.0/23 maxlen: 24
                          107.155.15.0/24 maxlen: 24
                          107.155.43.0/24 maxlen: 24
                          107.155.45.0/24 maxlen: 24
                          107.155.48.0/24 maxlen: 24
                          107.155.50.0/24 maxlen: 24
                          107.155.55.0/24 maxlen: 24
                          107.155.56.0/24 maxlen: 24
                          107.155.60.0/24 maxlen: 24
                          128.1.38.0/23 maxlen: 24
                          128.1.40.0/21 maxlen: 24
                          128.1.48.0/23 maxlen: 24
                          128.1.79.0/24 maxlen: 24
                          128.1.131.0/24 maxlen: 24
                          128.1.132.0/22 maxlen: 24
                          128.1.136.0/23 maxlen: 24
                          128.1.138.0/24 maxlen: 24
                          128.14.224.0/20 maxlen: 24
                          169.197.113.0/24 maxlen: 24
                          172.96.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:44:42:3b:0d:95:a6:e1:4d:bd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=ebdcd904-8f22-406b-8203-0ad750980da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:ac:99:1d:b1:7e:cc:29:48:f7:ae:3c:eb:
                    09:bf:6f:cd:93:3d:10:eb:3c:4e:cc:ed:2d:d6:36:
                    cc:39:88:8a:15:25:ee:91:6f:61:1a:6b:35:9d:55:
                    46:fc:6e:c6:95:79:4a:f3:27:38:65:8a:2d:1c:ab:
                    08:40:b5:0d:7b:b0:7f:50:76:f4:54:6e:22:13:23:
                    25:72:9b:3f:de:1c:46:2f:7b:3e:43:38:d9:08:c1:
                    78:c8:d3:95:20:50:7a:43:e9:c9:8d:dc:83:fd:ff:
                    55:9b:e1:54:c2:f4:41:26:34:ac:af:ff:19:de:71:
                    8a:5a:f4:10:ce:ab:6c:aa:85:56:7b:bb:e4:de:04:
                    76:eb:57:b6:73:98:af:6f:68:a7:68:b4:f8:ab:97:
                    8f:e8:1d:ea:c3:f2:ea:09:1f:57:30:1a:c4:0e:68:
                    76:a8:ed:d5:ed:4c:c0:81:5b:b2:4e:58:72:36:df:
                    e4:7e:d3:54:14:17:37:5d:e0:ae:75:5d:5f:f1:bc:
                    6d:17:ff:ff:fd:3e:de:35:2e:41:68:67:b3:b2:c3:
                    b0:77:99:50:69:08:f9:88:d7:e6:34:89:13:88:46:
                    06:54:c0:0f:d0:2f:d6:a7:38:cf:fb:db:18:30:6a:
                    02:3b:85:70:65:17:ce:7b:66:d6:ac:91:b8:cb:3b:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E2:45:78:46:1B:92:03:68:DF:8E:BE:84:1E:9E:B6:8B:03:6A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0-23.91.101.255
                  23.236.126.0/24
                  23.248.162.0/23
                  23.248.174.0/23
                  23.248.184.0/23
                  45.40.56.0/23
                  45.43.36.0/23
                  45.43.52.0-45.43.63.255
                  104.218.162.0-104.218.167.255
                  107.150.96.0/19
                  107.155.15.0/24
                  107.155.43.0/24
                  107.155.45.0/24
                  107.155.48.0/24
                  107.155.50.0/24
                  107.155.55.0-107.155.56.255
                  107.155.60.0/24
                  128.1.38.0-128.1.49.255
                  128.1.79.0/24
                  128.1.131.0-128.1.138.255
                  128.14.224.0/20
                  169.197.113.0/24
                  172.96.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:b5:17:d1:e9:c9:f2:8e:17:ea:37:2f:c2:ac:82:9f:9f:
         08:44:b7:58:53:7e:dd:45:bb:4c:0c:ed:a3:0f:f7:71:27:6e:
         e4:87:ae:66:b1:46:8f:d9:8d:78:8b:92:41:9f:ec:83:33:88:
         c6:a4:32:e8:b9:1a:29:d1:51:f9:29:01:db:b3:3f:88:cd:9c:
         e3:3f:db:1f:4c:ad:87:81:3f:ab:ad:b5:9b:1d:24:eb:0d:13:
         e6:61:c0:79:6e:c5:55:72:ea:6f:7e:36:b4:10:e5:2a:5e:8e:
         e2:82:6d:c3:c7:23:01:fb:a8:2e:1c:5b:2f:b6:22:16:85:63:
         e3:2c:10:99:15:b1:b6:f0:3d:a2:d5:51:61:d9:73:e7:95:2c:
         d4:b7:b3:98:9b:f1:5b:e9:6e:d2:ce:c1:b0:a0:3a:b0:27:ef:
         15:79:4f:38:67:80:58:72:b5:7e:81:45:d5:81:b3:e0:a2:65:
         6c:61:f7:0e:89:38:ee:c0:b3:37:12:f8:f6:3a:16:3f:e3:a3:
         b7:f8:3d:07:22:de:6a:9f:93:29:b4:63:63:db:bc:df:a9:3e:
         df:94:4b:ab:e4:8d:16:29:77:ba:3e:79:1f:31:9a:e9:df:60:
         9a:2c:f7:94:b9:bc:68:86:73:fb:1b:d8:20:07:67:da:ee:71:
         c8:35:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:10:42 2026 by rpki-client