Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
File:                     f56d3816-15da-338f-94ed-ce0338ad89a9.roa (raw, json)
Hash identifier:          e9JTyihFmv9nJTu3OK/OC9PyfNp78s8kxuitOpUdpO4=
Subject key identifier:   92:D8:95:D1:D4:61:70:28:A2:E4:78:64:2A:6E:04:05:CE:94:69:CE
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F4328584E6144BC5A79375D0B614FF3E0
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     30083
IP address blocks:        50.30.32.0/20 maxlen: 24
                          69.64.32.0/19 maxlen: 24
                          148.72.128.0/24 maxlen: 24
                          148.72.130.0/23 maxlen: 24
                          148.72.132.0/23 maxlen: 24
                          148.72.136.0/21 maxlen: 24
                          148.72.149.0/24 maxlen: 24
                          148.72.152.0/23 maxlen: 24
                          148.72.164.0/22 maxlen: 24
                          148.72.168.0/21 maxlen: 24
                          148.72.176.0/23 maxlen: 24
                          162.211.120.0/21 maxlen: 24
                          173.201.32.0/20 maxlen: 24
                          173.224.112.0/20 maxlen: 24
                          192.155.96.0/20 maxlen: 24
                          199.189.84.0/22 maxlen: 24
                          199.217.112.0/21 maxlen: 24
                          207.38.80.0/21 maxlen: 24
                          207.38.88.0/23 maxlen: 24
                          207.38.92.0/22 maxlen: 24
                          209.126.96.0/19 maxlen: 24
                          209.239.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:bc:5a:79:37:5d:0b:61:4f:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=c2b6fe42-64c8-45e8-8cc2-f4791d2e002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:24:14:d7:ef:85:00:8a:d2:5e:12:6d:a0:
                    c7:6e:02:43:dc:0c:b4:57:64:b6:c0:cb:0e:5c:bb:
                    c3:66:43:70:3a:99:e2:d4:da:f0:03:74:8e:76:8d:
                    b5:48:8b:1b:ff:c5:45:e4:ca:9e:06:72:2c:94:d7:
                    d9:01:dc:a5:ca:8e:18:ba:66:5d:06:2d:8b:8c:a5:
                    e4:49:b4:9c:5c:14:95:db:87:ad:d6:99:0f:3f:8b:
                    41:35:fd:be:28:20:9a:b5:f2:9d:a7:25:6e:d3:34:
                    0a:45:07:db:dd:9a:0f:5b:64:dd:20:f2:32:0c:5c:
                    73:c3:43:d3:41:6f:74:58:59:79:fb:d3:d1:75:52:
                    c7:5b:5e:88:4b:e4:da:f8:b3:15:f0:31:bf:e4:37:
                    07:f5:ae:e4:1a:ec:a9:d6:38:ea:49:9c:76:86:6a:
                    e3:8b:d6:b0:36:07:24:c9:6f:22:ce:cb:0b:61:a2:
                    70:77:57:67:f6:47:6a:34:af:c1:6b:dd:16:5b:11:
                    c4:89:b9:1d:5f:4a:02:c6:c8:03:a0:6c:97:bc:08:
                    97:92:64:f0:79:32:e0:15:e4:43:35:30:b9:b5:3e:
                    1d:d6:82:b8:3b:a1:91:45:f4:a5:fe:85:c4:80:ee:
                    05:41:7f:69:a3:93:c2:c1:24:68:6a:f4:c1:9d:17:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D8:95:D1:D4:61:70:28:A2:E4:78:64:2A:6E:04:05:CE:94:69:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.32.0/20
                  69.64.32.0/19
                  148.72.128.0/24
                  148.72.130.0-148.72.133.255
                  148.72.136.0/21
                  148.72.149.0/24
                  148.72.152.0/23
                  148.72.164.0-148.72.177.255
                  162.211.120.0/21
                  173.201.32.0/20
                  173.224.112.0/20
                  192.155.96.0/20
                  199.189.84.0/22
                  199.217.112.0/21
                  207.38.80.0-207.38.89.255
                  207.38.92.0/22
                  209.126.96.0/19
                  209.239.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:46:18:d6:94:7c:4c:4d:01:a4:8d:fb:6d:d6:05:7a:93:
         fe:64:5b:44:fe:87:c2:9d:5d:79:4d:fa:f1:d7:d2:b1:ed:19:
         9c:0c:f0:79:92:63:9f:9d:2b:6d:45:32:4d:b6:00:2a:7b:d8:
         27:76:c3:27:76:61:b3:d2:21:08:29:60:42:c5:42:c9:ad:16:
         b2:ea:12:91:70:b0:6e:eb:50:4e:45:3f:95:1a:ec:16:65:b3:
         c0:0c:c3:26:cc:13:f9:15:67:e4:ff:90:e8:06:bf:2b:e1:40:
         ee:e6:77:96:cc:d1:4f:a9:b6:7b:db:0c:a8:9f:31:92:c1:9d:
         af:18:3d:83:54:d5:6e:a1:55:34:63:f5:c4:51:52:98:94:96:
         11:5c:76:cc:59:5f:a5:a3:94:8a:61:dc:2b:e5:6b:55:93:ce:
         fd:5c:be:ca:4c:54:28:5b:48:49:85:53:c4:19:14:c0:de:55:
         b7:c1:29:7b:50:51:2a:7b:2d:e6:66:60:b3:ee:7d:0a:32:e4:
         9c:c1:d9:2d:09:69:75:8e:28:05:36:35:81:ad:de:d6:bf:86:
         5a:5f:d6:0d:e8:af:08:5f:6c:96:ee:d0:e7:c0:26:eb:7b:1a:
         9f:cc:71:39:08:56:f7:97:bc:6c:3a:af:cf:d1:6c:84:fa:09:
         ec:8f:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:03:33 2026 by rpki-client