Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
File:                     f56d3816-15da-338f-94ed-ce0338ad89a9.roa (raw, json)
Hash identifier:          TQkuBi/CYA8pDeK5cat5qgoxvhQWQLR93Cs91gqXIvk=
Subject key identifier:   22:26:1C:87:A4:CD:FE:4F:D2:E3:42:48:4B:14:5C:37:30:00:9D:A0
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F43285849FF751BE8D62D073A9DC5BA00
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     30083
IP address blocks:        50.30.32.0/20 maxlen: 24
                          69.64.32.0/19 maxlen: 24
                          148.72.128.0/24 maxlen: 24
                          148.72.130.0/23 maxlen: 24
                          148.72.132.0/23 maxlen: 24
                          148.72.136.0/21 maxlen: 24
                          148.72.149.0/24 maxlen: 24
                          148.72.152.0/23 maxlen: 24
                          148.72.164.0/22 maxlen: 24
                          148.72.168.0/21 maxlen: 24
                          148.72.176.0/23 maxlen: 24
                          162.211.120.0/21 maxlen: 24
                          173.201.32.0/20 maxlen: 24
                          173.224.112.0/20 maxlen: 24
                          192.155.96.0/20 maxlen: 24
                          199.189.84.0/22 maxlen: 24
                          199.217.112.0/21 maxlen: 24
                          207.38.80.0/21 maxlen: 24
                          207.38.88.0/23 maxlen: 24
                          207.38.92.0/22 maxlen: 24
                          209.126.96.0/19 maxlen: 24
                          209.239.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:1b:e8:d6:2d:07:3a:9d:c5:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=d1c20da6-eb7b-4443-96a5-73da49ee9c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:e1:94:96:d3:ee:df:b6:66:03:e5:36:1b:
                    6c:14:af:85:d7:bc:75:e7:69:bb:cd:77:43:a2:44:
                    9d:36:e8:a5:b2:51:a6:b8:3f:5e:0d:ba:f7:2e:25:
                    1c:cc:de:9a:da:bb:d5:21:5b:21:e0:2a:00:85:86:
                    33:19:41:c2:9a:51:e4:78:13:d1:2e:d0:45:0f:db:
                    84:19:16:a3:cb:84:e8:70:41:fd:10:74:f9:0c:97:
                    9b:ab:e3:d9:e4:8b:a0:5b:83:7e:56:eb:ed:c0:07:
                    94:3e:08:91:0e:ce:f6:d4:f0:6f:00:90:c3:b4:24:
                    7a:1d:5d:af:fd:68:c6:f8:94:d6:bf:8c:b6:43:74:
                    f6:be:c7:cb:75:c3:6b:a2:b8:4c:fd:42:60:c0:22:
                    0d:55:05:af:cb:ef:46:69:ba:ab:06:71:e8:73:0b:
                    d5:b9:bf:10:b1:8d:d4:0c:e8:ec:4a:93:c3:82:13:
                    de:da:53:58:bc:d8:74:b6:d8:06:1e:b6:79:12:1c:
                    3c:68:63:67:64:57:ae:77:56:d7:3d:94:f4:66:c4:
                    50:c7:32:08:71:8a:f1:d6:79:20:78:ff:65:be:dc:
                    52:36:92:4a:cc:96:95:40:71:a5:6e:45:05:b9:5d:
                    98:4d:21:23:f9:2d:7c:72:68:ed:5f:d4:f1:3f:14:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:26:1C:87:A4:CD:FE:4F:D2:E3:42:48:4B:14:5C:37:30:00:9D:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.32.0/20
                  69.64.32.0/19
                  148.72.128.0/24
                  148.72.130.0-148.72.133.255
                  148.72.136.0/21
                  148.72.149.0/24
                  148.72.152.0/23
                  148.72.164.0-148.72.177.255
                  162.211.120.0/21
                  173.201.32.0/20
                  173.224.112.0/20
                  192.155.96.0/20
                  199.189.84.0/22
                  199.217.112.0/21
                  207.38.80.0-207.38.89.255
                  207.38.92.0/22
                  209.126.96.0/19
                  209.239.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:c8:b6:47:1c:b5:0a:eb:a4:39:92:4c:3d:12:f0:f3:69:
         9b:a6:66:3e:8d:9c:87:2d:29:c9:bc:95:e0:e3:bb:06:ae:47:
         95:1c:4a:96:4e:d3:6e:6f:4a:c4:5b:98:cb:21:d8:0f:7e:87:
         95:1e:d2:ea:43:8f:88:e3:35:76:d0:78:7e:81:ba:f5:3c:a3:
         fe:ec:41:02:9b:db:7d:0c:25:00:9f:92:3d:ed:2a:f9:87:ee:
         51:75:aa:cf:02:b6:ea:48:b2:e7:1c:c8:c3:b8:7a:22:a1:05:
         1e:54:99:71:23:d4:af:cb:05:e8:ab:9e:6d:53:19:5f:92:91:
         51:ec:68:65:e4:fc:b8:a0:8d:e0:32:9e:ad:de:a3:a1:7f:e7:
         dc:53:9e:aa:17:68:c6:b5:b9:a8:50:7b:3b:c5:68:cb:75:37:
         06:0e:ab:54:07:77:56:db:a0:ac:9c:dc:18:b8:9f:f0:24:8c:
         d0:52:83:62:5e:62:ad:de:11:56:7e:ac:c4:a8:44:32:ce:39:
         d4:7d:4b:9b:53:c4:0c:72:45:35:8d:b3:84:29:d8:91:af:f1:
         98:19:50:ad:95:2f:8c:e5:71:9f:3f:7e:d3:ba:5b:49:c4:6f:
         9f:d5:87:da:30:ed:5e:e5:78:6f:4b:89:1b:ac:60:3e:53:f4:
         1e:61:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:02:23 2025 by rpki-client