Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa
File:                     45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa (raw, json)
Hash identifier:          R3WlzsfyJT4evD9lTDkemat9Axr59FQm0mEJl01ASYE=
Subject key identifier:   26:A9:B7:19:DD:93:F2:09:C7:1A:5C:EE:C0:5C:3A:74:CD:84:93:59
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F43285849350E8C31E73ADE244125D840
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.248.166.0/24 maxlen: 24
                          130.248.177.0/24 maxlen: 24
                          130.248.178.0/24 maxlen: 24
                          130.248.216.0/24 maxlen: 24
                          130.248.217.0/24 maxlen: 24
                          130.248.223.0/24 maxlen: 24
                          130.248.227.0/24 maxlen: 24
                          130.248.228.0/24 maxlen: 24
                          130.248.231.0/24 maxlen: 24
                          130.248.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:8c:31:e7:3a:de:24:41:25:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=5eef74e9-7169-4b56-a8f9-44a50bac9e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:bd:4c:43:74:a8:3b:78:c8:b9:0c:12:c7:
                    99:ed:8c:05:29:d3:bc:51:9d:86:84:08:c0:60:eb:
                    36:cf:30:c6:67:07:fa:b2:03:4f:fc:97:1a:54:43:
                    97:6b:dc:b5:43:58:3b:b5:ea:c0:66:8c:fa:75:8a:
                    8e:b2:96:da:9a:e2:fd:19:94:df:9b:5e:3e:e0:f6:
                    8c:ed:96:f1:6f:da:bc:68:38:01:d9:21:e7:c8:c5:
                    82:09:6b:c1:e1:5a:86:9a:52:03:6f:c0:5c:77:86:
                    f4:65:92:48:9c:62:9b:32:0e:e0:ac:04:0a:bf:56:
                    ad:a0:5d:e8:ab:42:53:42:4f:fa:17:c0:1f:f0:17:
                    35:99:62:19:00:ac:c9:05:9d:0a:10:e7:d5:3b:1b:
                    7f:cd:52:1c:98:bb:d7:eb:73:48:fa:c3:b9:86:8c:
                    be:23:a0:a0:d6:ba:ab:4e:ed:ff:1b:6b:49:a0:7c:
                    e5:68:b4:ff:6f:ae:9b:28:ae:2b:54:1f:5b:c3:92:
                    64:94:e7:3a:54:01:29:7f:c1:4c:dc:6d:e9:17:84:
                    4f:26:6a:ba:82:36:54:e2:f2:a3:d6:a4:58:24:b2:
                    db:d8:a8:ac:b7:e3:78:5d:45:72:79:07:e0:56:8b:
                    8e:8d:8b:fa:6d:98:de:b5:6f:ff:13:e5:43:0e:11:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A9:B7:19:DD:93:F2:09:C7:1A:5C:EE:C0:5C:3A:74:CD:84:93:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.166.0/24
                  130.248.177.0-130.248.178.255
                  130.248.216.0/23
                  130.248.223.0/24
                  130.248.227.0-130.248.228.255
                  130.248.231.0/24
                  130.248.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:40:e6:00:34:64:82:52:3b:bf:a6:b0:46:93:4e:40:df:b2:
         e0:6b:fe:5b:5b:f1:c9:ee:56:8c:ad:7d:62:4c:83:3d:5a:42:
         1a:75:77:aa:28:b4:ac:08:3b:40:47:d4:9c:89:6e:11:80:04:
         0e:fb:d2:e2:6a:68:5b:9e:60:61:95:2b:53:9d:da:89:19:18:
         bf:cc:9c:0d:b1:92:70:07:31:66:eb:d9:b1:74:af:0a:df:7a:
         b1:8c:cd:a3:7c:9f:82:7e:24:ca:68:13:9d:97:aa:98:32:b5:
         95:ad:24:7b:9e:e0:e6:ae:ee:20:3a:e0:94:f4:05:0a:a4:8e:
         a0:b2:b4:1e:2f:32:40:98:c3:be:06:b1:7e:ef:e1:86:cc:9a:
         ac:2a:cf:8c:39:99:30:bb:04:51:b1:eb:c9:fd:0f:6a:b7:95:
         07:20:d3:74:5a:63:05:f6:ce:4f:aa:b1:a8:ac:4f:f2:b5:f9:
         c8:dd:7a:7b:a8:1d:d3:1e:1e:a6:29:62:b9:7d:b4:2c:18:94:
         8f:1f:41:73:34:42:5f:2f:bc:a3:de:d0:4a:a2:83:7d:39:d6:
         99:37:00:8d:0a:f7:3d:d8:f8:90:36:ce:ad:6d:10:e9:08:53:
         85:f6:f5:09:c6:d9:54:54:f0:03:8d:27:a5:2a:a8:7c:4a:d4:
         ed:4a:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:06 2025 by rpki-client