Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          koHWVdeqWpkVY8klDXSGz6fJ5xmqyAGnfncpc48O2sU=
Subject key identifier:   9E:A0:03:9A:8A:7D:D0:1D:5C:F8:36:C6:71:63:33:C1:B0:C3:93:6B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       36D39E0BAD5DEDBE2ACC7C4FA77FA75815280A82
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30058.roa
Signing time:             Fri 17 Apr 2026 00:03:13 +0000
ROA not before:           Thu 16 Apr 2026 23:58:13 +0000
ROA not after:            Fri 16 Apr 2027 00:03:13 +0000
asID:                     30058
IP address blocks:        104.234.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d3:9e:0b:ad:5d:ed:be:2a:cc:7c:4f:a7:7f:a7:58:15:28:0a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 16 23:58:13 2026 GMT
            Not After : Apr 16 00:03:13 2027 GMT
        Subject: CN=9EA0039A8A7DD01D5CF836C6716333C1B0C3936B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:7f:f1:10:8a:27:4a:ed:ba:1b:0e:99:b2:
                    25:a5:7a:f6:3e:9d:12:9e:12:f8:c0:43:9d:94:fe:
                    50:29:2e:36:6b:d3:b3:27:11:fa:c1:84:9b:17:f2:
                    41:69:73:c7:aa:6d:c7:e8:5b:d4:28:d3:18:24:62:
                    8b:1c:39:8e:53:33:9b:c1:cf:ee:dc:56:39:6b:f7:
                    13:5c:82:e3:f1:04:54:1a:20:01:32:c0:ce:af:43:
                    ba:fb:38:71:7e:f2:88:c2:b1:f1:5a:37:af:94:06:
                    ba:70:ce:56:f4:4d:ee:77:f3:ce:7b:4e:95:af:7a:
                    98:03:95:de:87:98:0c:ba:99:13:31:67:22:ca:e0:
                    56:09:bb:07:b9:96:33:66:9e:45:6b:94:92:80:77:
                    66:0b:4e:81:c0:c7:27:34:5a:a7:6b:87:1b:c2:34:
                    7b:e4:d2:e4:58:08:39:d9:e7:62:60:b7:d4:3d:41:
                    53:f0:f5:8f:88:54:ae:cb:59:e1:8e:4f:87:f1:54:
                    4b:40:0e:a8:b4:dd:1a:ab:c8:d5:a0:a7:c9:a1:fc:
                    a5:f0:86:d7:cd:0d:2e:db:0d:0d:59:6b:09:f5:d3:
                    cc:df:46:82:be:f9:36:47:6d:dc:91:9a:f1:9b:87:
                    f7:6b:de:ce:d5:d6:e5:aa:3c:62:82:1d:d7:ff:d7:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A0:03:9A:8A:7D:D0:1D:5C:F8:36:C6:71:63:33:C1:B0:C3:93:6B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:38:b1:bd:91:13:82:98:b6:b0:c5:33:fe:72:4f:63:b4:0e:
         ad:60:47:53:94:dd:44:f9:38:21:41:76:f4:1c:c4:aa:f8:8e:
         b5:bc:b3:41:26:d8:9b:d8:3d:3f:d3:e3:ec:9a:4f:00:93:51:
         29:12:74:da:73:59:40:46:2d:50:b9:90:e1:06:5e:45:67:1b:
         fc:d4:29:69:ca:8f:88:57:70:ed:44:eb:bd:8b:e2:27:23:00:
         66:59:57:c5:7d:60:75:68:fc:31:47:28:b4:a9:e6:e7:7a:9d:
         de:56:11:23:42:97:53:a2:09:61:4a:26:1d:61:52:8b:33:e5:
         2d:2a:07:d2:d6:7b:12:29:5d:7e:43:95:9e:27:3e:f8:8e:ea:
         94:c9:30:91:c5:76:9a:fe:c1:63:5e:b6:e2:45:ff:1c:ff:c4:
         5f:b3:32:ab:31:68:f8:1b:f8:86:fd:ae:07:4f:84:63:57:b1:
         a2:bf:63:da:40:ec:33:26:63:1e:d0:d2:93:d1:22:24:30:f8:
         0a:88:86:98:84:42:c2:28:1d:05:b7:fa:b5:db:ea:c1:0c:18:
         04:2f:26:59:53:c8:2b:7e:b2:44:4f:cb:dc:95:36:4d:f2:3f:
         b6:aa:91:f9:1b:e2:33:db:e5:66:41:37:02:8e:7d:34:ba:ca:
         63:14:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:03:34 2026 by rpki-client