Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
File:                     30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa (raw, json)
Hash identifier:          9ugAKEkurQ1NKknBh9iRCJYV8QL+ICjkFWLNOIP42pU=
Subject key identifier:   29:3C:C3:9C:94:76:14:D0:B1:39:83:CD:D0:86:B2:CF:87:E6:6C:FC
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B970CD3B76B2575C626647E00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     135377
IP address blocks:        23.91.96.0/22 maxlen: 24
                          23.91.100.0/23 maxlen: 24
                          23.236.126.0/24 maxlen: 24
                          23.248.162.0/23 maxlen: 24
                          23.248.174.0/23 maxlen: 24
                          23.248.184.0/23 maxlen: 24
                          45.40.56.0/23 maxlen: 24
                          45.43.36.0/23 maxlen: 24
                          45.43.52.0/22 maxlen: 24
                          45.43.56.0/21 maxlen: 24
                          104.218.162.0/23 maxlen: 24
                          104.218.164.0/22 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.126.0/23 maxlen: 24
                          107.155.15.0/24 maxlen: 24
                          107.155.43.0/24 maxlen: 24
                          107.155.45.0/24 maxlen: 24
                          107.155.48.0/24 maxlen: 24
                          107.155.50.0/24 maxlen: 24
                          107.155.55.0/24 maxlen: 24
                          107.155.56.0/24 maxlen: 24
                          107.155.60.0/24 maxlen: 24
                          128.1.38.0/23 maxlen: 24
                          128.1.40.0/21 maxlen: 24
                          128.1.48.0/23 maxlen: 24
                          128.1.79.0/24 maxlen: 24
                          128.1.131.0/24 maxlen: 24
                          128.1.132.0/22 maxlen: 24
                          128.1.136.0/23 maxlen: 24
                          128.1.138.0/24 maxlen: 24
                          128.14.224.0/20 maxlen: 24
                          169.197.113.0/24 maxlen: 24
                          172.96.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d3:b7:6b:25:75:c6:26:64:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=876049cd-1c87-46f9-bebc-dfd6d437b2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:00:4e:80:e3:d0:fd:84:73:ce:a7:e6:e9:
                    ca:7b:2c:09:51:a6:0b:e0:5e:68:6b:45:d5:12:f2:
                    aa:bb:fc:5e:e4:3a:93:a0:ec:1d:b3:09:e8:37:dc:
                    4f:3d:98:fc:df:70:13:a1:95:a9:61:00:eb:f8:16:
                    dc:85:dd:2c:b1:e2:b9:56:cc:be:dd:01:3a:a9:1b:
                    67:f4:83:26:db:f0:38:88:58:e0:08:34:f5:37:0a:
                    93:a4:65:30:55:e4:fa:d0:40:10:47:85:98:2a:fa:
                    36:61:72:1c:77:a3:23:66:f0:ef:17:82:7d:11:56:
                    a8:46:fd:a2:06:f0:8d:c4:a7:3e:bc:e2:a0:bf:36:
                    b8:7e:e1:ba:6f:b6:53:dc:0f:44:fc:2d:87:36:d6:
                    f4:de:94:94:86:a1:d4:5e:9f:94:06:ef:20:74:dd:
                    95:99:17:87:ba:10:ef:61:df:ba:b1:7d:35:a3:49:
                    ca:87:9c:1d:73:58:65:13:30:88:93:49:dd:c2:7b:
                    a6:ed:b9:b3:88:5d:ba:c9:90:3c:77:77:21:16:ec:
                    79:53:6b:18:47:70:92:5b:5f:db:25:e5:84:7a:65:
                    26:7b:79:08:27:e7:1c:1d:71:db:9d:44:76:43:56:
                    fd:15:be:15:1d:ea:09:52:fe:af:6c:83:bb:c0:c8:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3C:C3:9C:94:76:14:D0:B1:39:83:CD:D0:86:B2:CF:87:E6:6C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0-23.91.101.255
                  23.236.126.0/24
                  23.248.162.0/23
                  23.248.174.0/23
                  23.248.184.0/23
                  45.40.56.0/23
                  45.43.36.0/23
                  45.43.52.0-45.43.63.255
                  104.218.162.0-104.218.167.255
                  107.150.96.0/19
                  107.155.15.0/24
                  107.155.43.0/24
                  107.155.45.0/24
                  107.155.48.0/24
                  107.155.50.0/24
                  107.155.55.0-107.155.56.255
                  107.155.60.0/24
                  128.1.38.0-128.1.49.255
                  128.1.79.0/24
                  128.1.131.0-128.1.138.255
                  128.14.224.0/20
                  169.197.113.0/24
                  172.96.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:3e:50:46:70:08:8a:a0:49:a4:74:1b:66:3c:1d:8e:41:
         6f:b6:b8:40:55:5f:4b:2a:dc:ea:a2:46:1a:1c:d2:41:67:b4:
         fa:9e:c9:e4:07:a7:4e:7a:eb:2a:fb:cb:a9:50:6c:ab:ad:cb:
         c2:f5:92:a4:00:fe:47:a5:8f:7d:c0:0e:95:ac:a1:fe:79:fb:
         30:99:84:aa:d5:60:09:8d:c6:66:e6:58:67:f9:2d:19:68:9d:
         af:cf:09:cc:3f:e2:33:eb:8c:76:3a:18:2a:ba:4a:5f:c6:1c:
         bd:fd:15:01:d3:b2:e4:71:f9:dd:55:b4:49:cb:06:fc:d6:6c:
         c8:47:1b:e5:ce:4e:ed:a1:fb:43:0a:ef:4f:76:d0:06:28:d2:
         84:36:af:03:25:d2:45:b1:1d:e6:8c:c3:c7:87:34:5c:84:9e:
         54:b6:e5:e2:4b:54:49:cc:e2:29:f5:43:d6:8f:5c:3c:a2:57:
         d5:d6:d1:47:ad:98:61:4b:2a:73:0f:4f:64:0a:de:86:6b:83:
         f9:bf:fc:75:b6:c5:d4:7b:91:55:21:ef:47:c7:c0:ad:30:a3:
         3a:a6:97:b1:14:bd:98:11:14:fd:75:63:97:c6:ca:06:3a:47:
         bf:da:73:8a:3f:0f:4e:dd:dc:5d:3e:2f:a1:5e:37:a6:64:dc:
         f2:4f:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:18:37 2025 by rpki-client