Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
File:                     f56d3816-15da-338f-94ed-ce0338ad89a9.roa (raw, json)
Hash identifier:          nZhZPqVte2AC2PTfGZmuzh8VJDfIRHlMVbvQJC0+7z0=
Subject key identifier:   88:98:0D:3A:7A:E5:01:CE:8B:46:3D:0B:E8:65:CA:DA:23:76:C1:D9
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F4328584D80FFF8E4AD74F51196237250
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     30083
IP address blocks:        50.30.32.0/20 maxlen: 24
                          69.64.32.0/19 maxlen: 24
                          148.72.128.0/24 maxlen: 24
                          148.72.130.0/23 maxlen: 24
                          148.72.132.0/23 maxlen: 24
                          148.72.136.0/21 maxlen: 24
                          148.72.149.0/24 maxlen: 24
                          148.72.152.0/23 maxlen: 24
                          148.72.164.0/22 maxlen: 24
                          148.72.168.0/21 maxlen: 24
                          148.72.176.0/23 maxlen: 24
                          162.211.120.0/21 maxlen: 24
                          173.201.32.0/20 maxlen: 24
                          173.224.112.0/20 maxlen: 24
                          192.155.96.0/20 maxlen: 24
                          199.189.84.0/22 maxlen: 24
                          199.217.112.0/21 maxlen: 24
                          207.38.80.0/21 maxlen: 24
                          207.38.88.0/23 maxlen: 24
                          207.38.92.0/22 maxlen: 24
                          209.126.96.0/19 maxlen: 24
                          209.239.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f8:e4:ad:74:f5:11:96:23:72:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=d935df16-6a4c-4d62-b7b1-9fc37815c973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b6:a3:79:c1:40:54:5b:13:16:10:83:31:0d:
                    aa:95:ef:0d:cd:26:1e:42:f8:91:b7:e3:0d:b5:9a:
                    bd:89:7a:1b:61:c4:d6:d0:db:c7:55:66:17:3e:0e:
                    d4:c1:bc:15:c1:91:c9:2b:ca:3e:37:84:44:72:7b:
                    5e:db:90:18:f2:25:90:d6:3f:1b:3c:37:92:66:72:
                    5d:ef:8d:65:1b:1d:08:fc:ba:d2:15:fe:7b:cc:ea:
                    7c:95:6a:14:8e:c8:11:49:ae:3a:1b:5d:e9:4d:ba:
                    70:7c:72:31:11:94:36:ab:9a:9e:34:b1:ec:57:b6:
                    1a:32:82:cf:ea:89:3d:10:37:98:52:17:ab:fc:0f:
                    cb:64:4e:45:62:b6:7e:82:16:4f:ab:d0:b2:a5:57:
                    e1:7c:fb:b1:f1:09:71:43:24:d4:d2:5b:df:87:d0:
                    8a:e8:af:75:0f:5e:32:70:1d:91:6f:77:70:f4:70:
                    b0:5e:39:1f:49:2e:b9:e4:d2:9d:d1:ee:56:26:bf:
                    de:81:63:d6:40:9b:49:e5:e8:96:9f:0b:81:3c:02:
                    cd:cf:e3:81:5f:18:e2:b0:7d:88:a8:48:f6:48:08:
                    0f:bc:f3:cd:33:9c:10:2b:be:78:01:52:28:bc:62:
                    80:f3:96:ec:4f:c0:8e:b2:91:bf:20:b5:91:62:30:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:98:0D:3A:7A:E5:01:CE:8B:46:3D:0B:E8:65:CA:DA:23:76:C1:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.32.0/20
                  69.64.32.0/19
                  148.72.128.0/24
                  148.72.130.0-148.72.133.255
                  148.72.136.0/21
                  148.72.149.0/24
                  148.72.152.0/23
                  148.72.164.0-148.72.177.255
                  162.211.120.0/21
                  173.201.32.0/20
                  173.224.112.0/20
                  192.155.96.0/20
                  199.189.84.0/22
                  199.217.112.0/21
                  207.38.80.0-207.38.89.255
                  207.38.92.0/22
                  209.126.96.0/19
                  209.239.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:cf:a1:f2:11:3e:a4:6f:21:e8:d9:a5:5b:8a:8f:2a:78:
         e3:1e:27:88:69:e5:0a:db:a3:fd:25:7a:47:6f:66:8f:6b:2b:
         80:ac:71:8a:b2:36:34:1b:1b:24:dc:bd:d8:87:f7:fb:75:18:
         9c:79:10:be:c7:cb:1f:94:66:4c:62:e0:a5:61:03:40:3f:8d:
         bb:09:ad:32:3e:9f:68:bc:c3:45:8d:33:26:b0:e8:65:ec:bd:
         1f:41:d2:84:53:c2:3c:d1:53:63:7c:e5:c2:7f:0a:68:15:a7:
         6a:46:86:12:b7:46:71:41:3f:27:b6:40:9a:ae:ab:59:87:6b:
         fd:1f:25:29:28:0b:b1:29:fd:8f:65:8e:f4:6e:cc:f2:58:22:
         d0:fc:30:e0:17:46:cf:3d:09:79:6c:5e:36:44:37:f5:b8:db:
         06:55:3e:b6:7c:8d:1d:78:25:29:6e:63:bb:40:b5:fb:9e:63:
         0f:19:76:be:70:7d:1f:c2:84:89:f1:1e:08:f9:21:f1:1d:c6:
         a5:9d:8e:f6:11:bf:e2:b9:e4:67:2f:2e:37:df:13:10:c7:07:
         0b:51:ac:fc:0d:f5:9c:65:b8:1c:2b:02:fc:3e:93:0a:01:1b:
         2e:94:34:4a:28:31:10:71:89:11:ec:01:37:db:a2:16:33:c0:
         c1:08:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:20 2026 by rpki-client