Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa
File:                     45b4cca8-304a-3829-8684-121363defde7.roa (raw, json)
Hash identifier:          RcWyzXTwnxcxtqYT0gdjuAklbNJFez18G7L6GSaNwtU=
Subject key identifier:   2C:8D:DB:7A:0B:D4:12:B1:44:19:E7:B0:0D:F9:3D:4F:A4:8E:BD:C8
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584D80FFEED304690B7E3E731180
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        130.248.141.0/24 maxlen: 24
                          130.248.158.0/24 maxlen: 24
                          130.248.164.0/24 maxlen: 24
                          130.248.167.0/24 maxlen: 24
                          130.248.199.0/24 maxlen: 24
                          130.248.202.0/24 maxlen: 24
                          130.248.203.0/24 maxlen: 24
                          130.248.224.0/24 maxlen: 24
                          130.248.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:ee:d3:04:69:0b:7e:3e:73:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=703b01e1-0e8b-4375-a8e8-96f87e10de12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:7c:cf:0f:48:d6:b7:30:12:d2:b2:e8:98:
                    3c:b0:e1:57:aa:55:71:03:5b:02:95:c6:60:16:b7:
                    00:8d:19:01:05:ed:f4:3d:43:4b:f3:c9:d1:d9:f7:
                    4c:1b:66:4f:a5:24:28:fb:23:2d:92:0f:38:d8:47:
                    22:25:4a:eb:66:62:33:19:3d:e3:c4:b6:a7:b3:4e:
                    4c:a5:ab:c6:20:09:6b:2b:33:7f:09:02:93:80:38:
                    a7:79:70:dd:b7:ed:e8:f7:9b:f4:2b:cb:ee:c3:3c:
                    f6:1b:78:57:9a:a7:c3:1c:98:f6:c1:9b:40:0e:5b:
                    4b:fc:ec:3e:ac:e8:20:18:75:41:e4:d9:e1:cc:58:
                    c2:12:e1:62:53:ff:dd:01:c9:4c:4b:70:fd:b5:f5:
                    fb:75:9d:61:45:9d:63:02:50:ce:c2:8e:70:5d:fb:
                    3a:19:2b:f3:5d:9b:14:79:5b:13:31:b7:d8:fe:2c:
                    8c:93:a7:c3:99:b8:e0:45:44:c5:63:7e:87:47:b6:
                    f2:84:2a:a1:6f:06:06:70:00:95:c0:25:aa:2c:b4:
                    70:a1:11:87:e3:a8:68:0d:46:86:00:c4:32:d4:2d:
                    8c:72:60:1f:e5:37:6f:ec:a5:b5:f1:8b:59:6a:70:
                    12:ae:05:c3:5b:3c:4e:70:f3:6b:a5:29:c3:24:8e:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:DB:7A:0B:D4:12:B1:44:19:E7:B0:0D:F9:3D:4F:A4:8E:BD:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.141.0/24
                  130.248.158.0/24
                  130.248.164.0/24
                  130.248.167.0/24
                  130.248.199.0/24
                  130.248.202.0/23
                  130.248.224.0/24
                  130.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:6f:a9:0f:32:94:e9:78:b8:44:8e:bf:4d:fe:05:0b:71:
         f0:57:24:83:b8:8b:4e:43:00:44:37:3d:53:25:81:26:b8:69:
         7b:8e:06:45:01:db:8c:a7:e7:55:2e:83:3f:9b:23:09:b5:e0:
         a6:f5:ca:82:6b:3e:ca:c6:69:6f:b0:06:7c:2f:ac:b2:50:59:
         57:88:05:c6:5f:6d:69:bd:13:2a:e1:c9:68:82:89:84:1c:97:
         b6:6b:dd:89:bb:0b:17:ae:71:d7:71:1e:88:e6:59:03:0a:0a:
         97:39:de:60:e3:4e:d2:04:f2:68:f6:31:73:3c:b7:02:36:c8:
         dd:2b:41:ed:2b:76:cf:5a:88:c7:57:38:ec:2a:d0:75:6c:be:
         02:ca:77:39:4c:f2:3e:d0:63:64:8d:b3:2f:50:c1:be:7e:d9:
         51:a8:33:de:78:37:99:79:92:0c:c3:1b:b1:34:7e:bf:a7:39:
         e7:f4:4f:6f:9d:e9:55:b2:65:c6:5a:6e:c0:bd:ff:75:01:3e:
         40:52:7e:3f:d3:a2:07:d8:c3:c4:22:a3:e4:d8:79:30:4a:55:
         c5:85:e5:24:6e:86:6d:7f:31:89:95:f2:a8:98:9a:7e:fd:02:
         97:6b:44:19:f4:1f:ed:94:f7:76:66:ad:57:c5:c7:73:d8:a2:
         2c:4e:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:43:03 2026 by rpki-client