Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa
File:                     45b4cca8-304a-3829-8684-121363defde7.roa (raw, json)
Hash identifier:          BTuxaGV+as4Q0iUJH8MIZW1EcvechuGKuIPhsnqWEX4=
Subject key identifier:   79:AB:6F:64:16:6D:F3:1B:A9:8B:FB:7B:7F:8F:01:C9:A0:E2:C2:DF
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584BBFA5A395C8DD23C4F5361FD0
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        130.248.141.0/24 maxlen: 24
                          130.248.158.0/24 maxlen: 24
                          130.248.164.0/24 maxlen: 24
                          130.248.167.0/24 maxlen: 24
                          130.248.199.0/24 maxlen: 24
                          130.248.202.0/24 maxlen: 24
                          130.248.203.0/24 maxlen: 24
                          130.248.224.0/24 maxlen: 24
                          130.248.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a3:95:c8:dd:23:c4:f5:36:1f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=1bc787b0-2006-4816-93b4-27c3657cbf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:d9:74:df:8b:92:1d:88:5e:90:7d:14:0d:
                    16:3e:04:c9:18:06:61:19:8a:c1:5a:9f:22:e7:92:
                    db:3a:b2:35:76:3c:28:a3:11:0f:a8:15:95:2d:9a:
                    5e:a6:d1:fd:e3:ad:98:b8:a8:7c:5e:7b:cc:d7:ac:
                    68:d3:f4:d0:29:03:8f:3b:14:19:6d:90:fc:3d:07:
                    ed:0b:c4:5b:15:13:a4:e1:e8:23:8d:19:1b:de:3a:
                    bf:08:cb:4c:c6:6f:48:f2:88:e6:c1:aa:0e:4c:c4:
                    64:9d:27:73:5a:fc:ab:7b:7c:15:44:54:62:a0:84:
                    6d:43:a0:0d:1b:61:15:50:76:60:04:91:0a:79:47:
                    d7:c2:d7:03:0c:a1:6c:52:2b:06:94:d2:af:7d:43:
                    56:d9:82:c6:59:1d:f1:d1:dd:94:a2:b5:01:e3:bc:
                    60:d5:fc:15:48:9a:38:2b:46:9b:ab:f8:81:16:b1:
                    3c:52:2a:5b:06:8a:16:e3:65:a8:4a:c0:5c:24:f7:
                    fd:06:c2:b1:2e:0c:55:79:d7:77:bc:ce:58:99:da:
                    23:d2:f1:96:12:de:b6:1c:b9:43:8c:ff:9a:a7:ed:
                    8d:9d:ff:3d:e5:b6:3b:10:cf:df:fb:14:0c:6e:38:
                    54:27:84:dd:13:dd:c8:79:86:16:e8:b7:7c:cd:68:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:6F:64:16:6D:F3:1B:A9:8B:FB:7B:7F:8F:01:C9:A0:E2:C2:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.141.0/24
                  130.248.158.0/24
                  130.248.164.0/24
                  130.248.167.0/24
                  130.248.199.0/24
                  130.248.202.0/23
                  130.248.224.0/24
                  130.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:89:8d:2b:06:e2:8b:53:58:b8:09:fc:b2:fe:f9:50:7f:f4:
         85:08:f3:3c:2f:52:ca:3b:88:1e:20:39:b5:cb:f3:a1:e1:87:
         7f:cf:fe:b8:84:a0:7a:67:3c:1b:c7:a3:f8:f9:1d:4b:33:26:
         4b:b1:96:7d:cb:e0:4c:7a:d5:af:09:39:28:be:23:27:77:dc:
         39:7c:96:be:93:64:93:b7:4b:dd:a3:cc:0d:56:93:cb:80:5e:
         6a:25:eb:0c:5a:56:8b:b4:b5:35:05:a8:b9:78:b6:a6:36:89:
         e4:27:df:ff:9f:3f:4d:44:d6:e0:10:f1:54:69:82:d8:1a:5d:
         93:04:61:fa:0c:c9:7d:8d:69:b2:63:55:b9:b2:64:0f:24:64:
         4f:ac:50:87:d0:c0:4b:cb:b5:73:a7:e9:02:66:70:23:5f:52:
         2d:d5:7a:57:fc:53:d7:8d:72:00:ce:ff:a8:c7:27:62:19:2b:
         0a:4a:b0:c9:54:5b:19:de:19:13:25:03:bc:bd:aa:a2:01:d2:
         e5:d6:67:59:7d:f9:39:be:44:83:70:22:43:9a:18:0e:cc:08:
         97:6d:39:b2:21:42:7f:fb:f7:25:d0:22:09:43:ab:e1:bd:38:
         59:1c:59:b9:ae:ed:31:8b:4b:44:de:87:97:2e:31:7f:72:0b:
         fb:e2:ff:71
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEu/paOVyN0jxPU2H9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
MWJjNzg3YjAtMjAwNi00ODE2LTkzYjQtMjdjMzY1N2NiZjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/XZdN+Lkh2IXpB9FA0WPgTJGAZhGYrBWp8i
55LbOrI1djwooxEPqBWVLZpeptH9462YuKh8XnvM16xo0/TQKQOPOxQZbZD8PQft
C8RbFROk4egjjRkb3jq/CMtMxm9I8ojmwaoOTMRknSdzWvyre3wVRFRioIRtQ6AN
G2EVUHZgBJEKeUfXwtcDDKFsUisGlNKvfUNW2YLGWR3x0d2UorUB47xg1fwVSJo4
K0abq/iBFrE8UipbBooW42WoSsBcJPf9BsKxLgxVedd3vM5Ymdoj0vGWEt62HLlD
jP+ap+2Nnf895bY7EM/f+xQMbjhUJ4TdE93IeYYW6Ld8zWhHzQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFHmrb2QWbfMbqYv7e3+PAcmg4sLfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvNDViNGNjYTgtMzA0YS0z
ODI5LTg2ODQtMTIxMzYzZGVmZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAgviNAwQA
gvieAwQAgvikAwQAgvinAwQAgvjHAwQBgvjKAwQAgvjgAwQAgvjrMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AEeJjSsG4otTWLgJ/LL++VB/9IUI8zwvUso7iB4gObXL86Hhh3/P/riEoHpnPBvH
o/j5HUszJkuxln3L4Ex61a8JOSi+Iyd33Dl8lr6TZJO3S92jzA1Wk8uAXmol6wxa
Vou0tTUFqLl4tqY2ieQn3/+fP01E1uAQ8VRpgtgaXZMEYfoMyX2NabJjVbmyZA8k
ZE+sUIfQwEvLtXOn6QJmcCNfUi3Velf8U9eNcgDO/6jHJ2IZKwpKsMlUWxneGRMl
A7y9qqIB0uXWZ1l9+Tm+RINwIkOaGA7MCJdtObIhQn/79yXQIglDq+G9OFkcWbmu
7TGLS0Teh5cuMX9yC/vi/3E=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:30 2025 by rpki-client