Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
File:                     30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa (raw, json)
Hash identifier:          ESRO/aEE2d/414gjLYEWgzXDIvBCQZTLzbBgHs5Mx20=
Subject key identifier:   21:F0:41:2F:C5:D9:C0:1A:2C:C3:0F:45:64:8F:06:A4:3C:6C:9F:3B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E3764680C24579E584381B000
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     135377
IP address blocks:        23.91.96.0/22 maxlen: 24
                          23.91.100.0/23 maxlen: 24
                          23.236.126.0/24 maxlen: 24
                          23.248.162.0/23 maxlen: 24
                          23.248.174.0/23 maxlen: 24
                          23.248.184.0/23 maxlen: 24
                          45.40.56.0/23 maxlen: 24
                          45.43.36.0/23 maxlen: 24
                          45.43.52.0/22 maxlen: 24
                          45.43.56.0/21 maxlen: 24
                          104.218.162.0/23 maxlen: 24
                          104.218.164.0/22 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.126.0/23 maxlen: 24
                          107.155.15.0/24 maxlen: 24
                          107.155.43.0/24 maxlen: 24
                          107.155.45.0/24 maxlen: 24
                          107.155.48.0/24 maxlen: 24
                          107.155.50.0/24 maxlen: 24
                          107.155.55.0/24 maxlen: 24
                          107.155.56.0/24 maxlen: 24
                          107.155.60.0/24 maxlen: 24
                          128.1.38.0/23 maxlen: 24
                          128.1.40.0/21 maxlen: 24
                          128.1.48.0/23 maxlen: 24
                          128.1.79.0/24 maxlen: 24
                          128.1.131.0/24 maxlen: 24
                          128.1.132.0/22 maxlen: 24
                          128.1.136.0/23 maxlen: 24
                          128.1.138.0/24 maxlen: 24
                          128.14.224.0/20 maxlen: 24
                          169.197.113.0/24 maxlen: 24
                          172.96.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:68:0c:24:57:9e:58:43:81:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=6227cc87-abc0-4d8f-9b17-535ec9e57d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:8a:80:c1:ec:cf:21:4d:d0:58:f1:9a:37:
                    ed:16:d0:5f:c8:fc:c8:71:78:3f:fe:e0:66:f9:6b:
                    c0:ae:df:83:8c:8e:03:ce:6e:60:43:1b:21:ad:b0:
                    8d:bc:02:f7:69:c9:b4:53:4c:3c:7b:8d:72:3c:ee:
                    90:6c:2e:c5:0a:48:f8:74:a6:08:41:26:17:87:85:
                    00:85:b4:94:75:f5:41:77:cb:cc:c3:d5:8d:1d:79:
                    2f:33:7a:01:0c:aa:35:f5:f7:6c:6b:22:03:8d:1f:
                    f1:dd:6d:36:1f:b6:e1:56:e5:25:97:3d:9f:3a:12:
                    1f:5b:4e:59:fc:17:bc:c6:00:da:e5:42:80:1c:13:
                    45:24:74:56:54:10:37:f4:2f:a9:5f:25:70:dc:0c:
                    dc:69:ef:68:5f:27:c0:6f:8f:77:d6:7d:a0:9f:e3:
                    3d:a0:da:fe:d2:b6:72:e7:ef:46:72:29:6a:d1:02:
                    15:e0:c9:e9:f4:5f:16:2c:3e:18:5f:d5:68:75:79:
                    f4:3e:c7:cd:ee:b5:5e:ba:36:83:66:74:41:d0:7b:
                    01:43:8e:f0:1f:05:18:d2:43:0d:a7:21:00:4e:61:
                    59:e0:27:29:32:9b:08:03:4d:6d:76:29:64:26:27:
                    6a:ae:7b:8d:2c:8d:89:8b:29:16:32:c7:53:05:ae:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F0:41:2F:C5:D9:C0:1A:2C:C3:0F:45:64:8F:06:A4:3C:6C:9F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0-23.91.101.255
                  23.236.126.0/24
                  23.248.162.0/23
                  23.248.174.0/23
                  23.248.184.0/23
                  45.40.56.0/23
                  45.43.36.0/23
                  45.43.52.0-45.43.63.255
                  104.218.162.0-104.218.167.255
                  107.150.96.0/19
                  107.155.15.0/24
                  107.155.43.0/24
                  107.155.45.0/24
                  107.155.48.0/24
                  107.155.50.0/24
                  107.155.55.0-107.155.56.255
                  107.155.60.0/24
                  128.1.38.0-128.1.49.255
                  128.1.79.0/24
                  128.1.131.0-128.1.138.255
                  128.14.224.0/20
                  169.197.113.0/24
                  172.96.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f2:41:8d:53:38:c6:6c:14:85:51:89:83:5e:58:fe:2d:7d:
         5a:48:d2:e3:fd:bf:a8:29:06:ad:44:a5:3e:92:d8:9d:3a:43:
         7f:44:b3:51:d8:4c:14:8d:27:3c:83:bd:68:3d:3f:5c:8c:53:
         19:7f:2c:c3:75:e4:40:81:08:41:31:2c:56:50:56:62:b4:ad:
         fb:c4:1f:bb:26:cd:33:1a:00:7c:fc:08:76:d4:fb:ca:58:87:
         51:f9:48:72:79:bc:8b:e9:d1:f0:34:14:1d:48:7d:11:5b:59:
         ba:dd:41:51:40:27:28:c6:f8:c8:41:a6:d9:41:5a:f4:51:5f:
         fb:d3:89:f6:53:9e:1a:0b:89:d1:e0:c8:1e:ec:df:d9:80:b7:
         c7:5c:ce:bc:6c:58:37:50:bd:e9:e9:1d:a2:2f:c2:ad:76:3c:
         44:04:f4:c8:a3:b0:6e:4f:d0:56:b1:40:98:b9:fd:77:94:4a:
         32:3f:43:cc:8b:c2:b5:2d:c5:58:26:08:7b:a6:e3:f9:ff:01:
         eb:29:c1:2a:0a:6e:d5:72:8f:fa:26:db:75:3e:d2:b3:7b:a9:
         ed:a8:06:eb:3a:f5:89:4c:15:06:f8:98:a2:21:9e:ca:09:83:
         54:17:f6:51:30:af:7d:7c:b3:57:9c:2a:0f:56:24:23:86:95:
         37:a0:e9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:57:09 2026 by rpki-client