Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
File:                     30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa (raw, json)
Hash identifier:          r5PmrP8vsM2vGg7Ex8EFHXZiftobuM5G4O8zxMAOizA=
Subject key identifier:   33:67:D7:83:AB:72:24:5F:78:46:70:0F:4F:F6:A1:A6:46:82:2B:FB
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849D594D6B65F99B6BA4D1606C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     135377
IP address blocks:        23.91.96.0/22 maxlen: 24
                          23.91.100.0/23 maxlen: 24
                          23.236.126.0/24 maxlen: 24
                          23.248.162.0/23 maxlen: 24
                          23.248.174.0/23 maxlen: 24
                          23.248.184.0/23 maxlen: 24
                          45.40.56.0/23 maxlen: 24
                          45.43.36.0/23 maxlen: 24
                          45.43.52.0/22 maxlen: 24
                          45.43.56.0/21 maxlen: 24
                          104.218.162.0/23 maxlen: 24
                          104.218.164.0/22 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.126.0/23 maxlen: 24
                          107.155.15.0/24 maxlen: 24
                          107.155.43.0/24 maxlen: 24
                          107.155.45.0/24 maxlen: 24
                          107.155.48.0/24 maxlen: 24
                          107.155.50.0/24 maxlen: 24
                          107.155.55.0/24 maxlen: 24
                          107.155.56.0/24 maxlen: 24
                          107.155.60.0/24 maxlen: 24
                          128.1.38.0/23 maxlen: 24
                          128.1.40.0/21 maxlen: 24
                          128.1.48.0/23 maxlen: 24
                          128.1.79.0/24 maxlen: 24
                          128.1.131.0/24 maxlen: 24
                          128.1.132.0/22 maxlen: 24
                          128.1.136.0/23 maxlen: 24
                          128.1.138.0/24 maxlen: 24
                          128.14.224.0/20 maxlen: 24
                          169.197.113.0/24 maxlen: 24
                          172.96.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d6:b6:5f:99:b6:ba:4d:16:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=92c85c30-af3f-4217-9390-aff6b64adb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:74:0e:08:6f:99:6f:3e:1c:3f:d3:e2:c6:10:
                    e8:2a:ee:be:b7:da:44:bd:ab:a8:1e:91:47:40:09:
                    c9:ea:4c:ca:e3:ad:cb:9f:56:9d:35:0a:df:6f:a0:
                    b7:38:1a:19:ec:08:e0:ed:cf:35:b1:63:25:c4:69:
                    6b:59:50:21:88:c3:4a:56:4b:bf:9a:0d:38:16:38:
                    de:10:db:1a:55:16:cb:52:06:e0:15:df:10:c6:f7:
                    74:9d:72:15:bc:ac:b6:3a:68:04:56:ff:e6:74:f9:
                    93:ae:c4:03:a2:3c:9d:1e:42:44:45:6c:df:95:29:
                    51:e1:0d:bf:6c:08:3c:7c:11:2f:b6:bb:f6:35:e7:
                    d0:40:2a:f3:e8:06:92:0b:35:53:8a:5c:43:d8:3f:
                    e3:df:5a:36:42:86:fb:91:0a:04:85:8c:75:59:d7:
                    0f:76:e0:10:9e:32:d0:c6:53:7b:3c:b6:59:8f:21:
                    89:18:21:04:af:0c:54:2d:0f:cf:ec:fb:2c:1f:4e:
                    ce:e7:e8:fc:5a:33:a2:a0:94:47:65:fe:0e:06:6b:
                    db:76:ea:d8:c6:de:3a:5d:dc:61:55:ce:3e:07:02:
                    61:ee:ad:53:91:17:40:54:d6:49:0d:44:ab:48:07:
                    36:13:d2:a4:10:50:fc:16:ef:30:b6:9f:28:39:83:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:67:D7:83:AB:72:24:5F:78:46:70:0F:4F:F6:A1:A6:46:82:2B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0-23.91.101.255
                  23.236.126.0/24
                  23.248.162.0/23
                  23.248.174.0/23
                  23.248.184.0/23
                  45.40.56.0/23
                  45.43.36.0/23
                  45.43.52.0-45.43.63.255
                  104.218.162.0-104.218.167.255
                  107.150.96.0/19
                  107.155.15.0/24
                  107.155.43.0/24
                  107.155.45.0/24
                  107.155.48.0/24
                  107.155.50.0/24
                  107.155.55.0-107.155.56.255
                  107.155.60.0/24
                  128.1.38.0-128.1.49.255
                  128.1.79.0/24
                  128.1.131.0-128.1.138.255
                  128.14.224.0/20
                  169.197.113.0/24
                  172.96.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:42:22:06:bf:5c:09:5b:2c:ba:da:2e:92:a8:71:78:11:
         2c:e3:64:1b:0c:04:7f:7d:9c:09:23:b4:4f:5d:c6:34:c8:70:
         a8:bc:0b:ef:4a:98:a6:a9:96:71:e8:4d:34:b7:eb:e5:22:36:
         0e:19:64:54:e5:42:a7:e0:c9:9b:4e:33:95:70:be:60:b2:ff:
         4e:41:95:4c:fc:c1:4f:d9:46:8d:41:2f:69:55:78:e9:cf:4e:
         18:0e:82:eb:5f:8a:56:dc:ec:c2:bf:ff:db:39:74:d4:ce:3f:
         d4:58:6e:4b:41:d1:27:99:65:ad:83:12:b7:fe:40:72:23:dd:
         d6:c7:9b:0f:c4:8c:10:ee:e5:3c:29:53:e0:b7:20:bc:08:8d:
         3c:a6:a7:18:c0:72:92:ac:3d:c6:31:2f:bc:e5:e1:c0:17:d9:
         ef:d7:3a:9a:98:e7:cc:a7:fb:b5:20:6d:5b:e7:10:b9:b3:6c:
         94:15:45:ea:8a:43:b7:93:b2:25:8c:7a:a0:7d:85:42:a3:9d:
         a5:3d:0b:4d:29:8f:28:9e:cd:22:17:6b:0d:9b:5e:c2:a7:fc:
         78:8d:9b:f5:f9:ca:db:3a:5b:11:22:68:a5:d1:d6:16:84:e6:
         a7:d3:8a:d7:7c:f6:16:a4:02:cc:6c:79:22:38:12:6c:b5:d8:
         96:51:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:44 2025 by rpki-client