Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
File:                     30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa (raw, json)
Hash identifier:          liyz7x0G1YV+RjS+mqU7JtoX52XdbBQj+PSP/FWoCy0=
Subject key identifier:   D2:2E:6B:9F:43:3C:B3:7A:46:13:25:ED:14:52:F3:AD:BC:6B:82:10
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D571FA063EBCB3D7ACFAFEB80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     135377
IP address blocks:        23.91.96.0/22 maxlen: 24
                          23.91.100.0/23 maxlen: 24
                          23.236.126.0/24 maxlen: 24
                          23.248.162.0/23 maxlen: 24
                          23.248.174.0/23 maxlen: 24
                          23.248.184.0/23 maxlen: 24
                          45.40.56.0/23 maxlen: 24
                          45.43.36.0/23 maxlen: 24
                          45.43.52.0/22 maxlen: 24
                          45.43.56.0/21 maxlen: 24
                          104.218.162.0/23 maxlen: 24
                          104.218.164.0/22 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.126.0/23 maxlen: 24
                          107.155.15.0/24 maxlen: 24
                          107.155.43.0/24 maxlen: 24
                          107.155.45.0/24 maxlen: 24
                          107.155.48.0/24 maxlen: 24
                          107.155.50.0/24 maxlen: 24
                          107.155.55.0/24 maxlen: 24
                          107.155.56.0/24 maxlen: 24
                          107.155.60.0/24 maxlen: 24
                          128.1.38.0/23 maxlen: 24
                          128.1.40.0/21 maxlen: 24
                          128.1.48.0/23 maxlen: 24
                          128.1.79.0/24 maxlen: 24
                          128.1.131.0/24 maxlen: 24
                          128.1.132.0/22 maxlen: 24
                          128.1.136.0/23 maxlen: 24
                          128.1.138.0/24 maxlen: 24
                          128.14.224.0/20 maxlen: 24
                          169.197.113.0/24 maxlen: 24
                          172.96.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a0:63:eb:cb:3d:7a:cf:af:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=f6f42ad0-1083-489c-8195-34229fc079d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:55:97:92:dc:39:40:53:ce:66:32:fa:1b:c9:
                    11:ce:53:57:c6:49:aa:17:a3:ce:94:2d:30:44:66:
                    fa:08:e0:86:fd:ac:74:d1:6b:36:eb:2c:2e:4e:f2:
                    a6:99:10:a6:dd:64:96:a0:e4:72:1a:76:8f:26:a8:
                    89:12:bb:28:bf:63:e3:34:c2:c5:1f:42:e1:9a:1a:
                    6e:77:f9:22:d0:2f:76:12:84:ba:63:4e:8a:f6:d3:
                    01:f5:29:1a:41:c4:f2:8a:80:db:40:d0:68:6a:aa:
                    0b:ac:61:d5:43:02:c0:6d:03:5f:fa:67:91:d6:36:
                    c1:67:e0:eb:ca:c0:fe:06:89:e6:4e:01:23:1c:9a:
                    46:4a:0e:e7:8a:54:f8:89:e1:06:f9:c8:58:c0:75:
                    b1:11:30:e4:95:40:28:55:d9:b0:1f:93:5b:3b:d6:
                    3e:2d:39:f4:f9:1a:fe:30:c2:5c:0f:75:5b:6b:93:
                    5d:8e:70:66:34:d8:91:dd:bd:88:bc:a3:5b:02:2f:
                    5e:03:6f:b1:a2:71:9e:f4:2a:d2:bf:d9:c0:32:6e:
                    df:cc:2c:6a:a4:82:7e:94:fe:57:ab:e6:f5:65:f3:
                    80:8b:48:67:71:8f:13:97:55:c7:14:56:10:96:d9:
                    ad:df:03:35:b1:6e:a3:b5:e4:27:11:7f:3c:a0:b7:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2E:6B:9F:43:3C:B3:7A:46:13:25:ED:14:52:F3:AD:BC:6B:82:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0-23.91.101.255
                  23.236.126.0/24
                  23.248.162.0/23
                  23.248.174.0/23
                  23.248.184.0/23
                  45.40.56.0/23
                  45.43.36.0/23
                  45.43.52.0-45.43.63.255
                  104.218.162.0-104.218.167.255
                  107.150.96.0/19
                  107.155.15.0/24
                  107.155.43.0/24
                  107.155.45.0/24
                  107.155.48.0/24
                  107.155.50.0/24
                  107.155.55.0-107.155.56.255
                  107.155.60.0/24
                  128.1.38.0-128.1.49.255
                  128.1.79.0/24
                  128.1.131.0-128.1.138.255
                  128.14.224.0/20
                  169.197.113.0/24
                  172.96.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:97:3e:31:7d:c3:e3:6f:1b:2f:2f:02:66:51:17:21:d5:e9:
         37:a2:5a:52:5f:44:be:07:7f:a3:da:a4:68:a3:bc:eb:5e:1e:
         05:0a:dc:00:7a:e3:17:65:58:49:27:6c:98:38:ba:63:c2:f2:
         bf:64:98:a3:20:ac:54:34:37:4f:fd:c4:ab:b7:fd:a3:68:9b:
         b9:f8:64:63:58:a0:26:56:5b:7e:f0:51:9e:ef:d7:fa:5d:20:
         54:8f:95:c7:02:fa:9f:fe:33:8a:9a:c3:94:76:83:66:fc:93:
         ed:6e:0c:24:21:59:d5:ae:e3:f3:b3:d0:3a:19:d0:6a:3b:f0:
         ac:ae:e1:4d:e2:ef:05:e9:71:72:53:cc:d7:fb:0b:ad:30:30:
         ea:b9:c5:33:98:c6:77:32:8a:82:0b:1d:6f:aa:09:32:27:13:
         91:d4:67:48:f4:e1:b0:00:4e:17:ef:5c:9e:ec:18:15:d0:bb:
         96:88:af:58:97:f7:b3:9b:7a:22:e0:79:67:bd:7c:e4:97:fa:
         7f:00:d8:ca:b0:2d:a4:0b:e4:23:b7:6c:f4:25:d8:8b:c0:c3:
         3f:fe:d5:0a:82:fb:43:30:32:36:fa:0f:97:2d:44:00:77:6b:
         18:c3:18:98:71:66:dd:59:e4:f1:5e:72:9e:41:ea:29:a1:36:
         b2:cc:06:4e
-----BEGIN CERTIFICATE-----
MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE1XH6Bj68s9es+v64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
ZjZmNDJhZDAtMTA4My00ODljLTgxOTUtMzQyMjlmYzA3OWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1WXktw5QFPOZjL6G8kRzlNXxkmqF6POlC0w
RGb6COCG/ax00Ws26ywuTvKmmRCm3WSWoORyGnaPJqiJErsov2PjNMLFH0Lhmhpu
d/ki0C92EoS6Y06K9tMB9SkaQcTyioDbQNBoaqoLrGHVQwLAbQNf+meR1jbBZ+Dr
ysD+BonmTgEjHJpGSg7nilT4ieEG+chYwHWxETDklUAoVdmwH5NbO9Y+LTn0+Rr+
MMJcD3Vba5NdjnBmNNiR3b2IvKNbAi9eA2+xonGe9CrSv9nAMm7fzCxqpIJ+lP5X
q+b1ZfOAi0hncY8Tl1XHFFYQltmt3wM1sW6jteQnEX88oLeUZQIDAQABo4IEDjCC
BAowHQYDVR0OBBYEFNIua59DPLN6RhMl7RRS8628a4IQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzA0NTBhN2YtZGE4ZS0z
Yzc2LWJmYjYtMDhmMzVkN2RhZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMIHXBggrBgEFBQcBBwEB/wSBxzCBxDCBwQQCAAEwgbowDAME
BRdbYAMEARdbZAMEABfsfgMEARf4ogMEARf4rgMEARf4uAMEAS0oOAMEAS0rJDAM
AwQCLSs0AwQGLSsAMAwDBAFo2qIDBANo2qADBAVrlmADBABrmw8DBABrmysDBABr
my0DBABrmzADBABrmzIwDAMEAGubNwMEAGubOAMEAGubPDAMAwQBgAEmAwQBgAEw
AwQAgAFPMAwDBACAAYMDBACAAYoDBASADuADBACpxXEDBACsYHwwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
gpc+MX3D428bLy8CZlEXIdXpN6JaUl9Evgd/o9qkaKO8614eBQrcAHrjF2VYSSds
mDi6Y8Lyv2SYoyCsVDQ3T/3Eq7f9o2ibufhkY1igJlZbfvBRnu/X+l0gVI+VxwL6
n/4ziprDlHaDZvyT7W4MJCFZ1a7j87PQOhnQajvwrK7hTeLvBelxclPM1/sLrTAw
6rnFM5jGdzKKggsdb6oJMicTkdRnSPThsABOF+9cnuwYFdC7loivWJf3s5t6IuB5
Z7185Jf6fwDYyrAtpAvkI7ds9CXYi8DDP/7VCoL7QzAyNvoPly1EAHdrGMMYmHFm
3Vnk8V5ynkHqKaE2sswGTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:51 2026 by rpki-client