Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
File:                     56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa (raw, json)
Hash identifier:          6Zi6fdyGBZxPcanlFoNIzTZ0fGaApI6MjptQDJglsaI=
Subject key identifier:   97:D2:E5:D1:FA:19:5C:97:66:4F:7B:BE:E9:1D:8C:A3:A5:79:32:03
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584A8B0B5D9B963811574FEA5780
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        130.248.129.0/24 maxlen: 24
                          130.248.140.0/24 maxlen: 24
                          130.248.152.0/24 maxlen: 24
                          130.248.153.0/24 maxlen: 24
                          130.248.154.0/24 maxlen: 24
                          130.248.155.0/24 maxlen: 24
                          130.248.165.0/24 maxlen: 24
                          130.248.176.0/24 maxlen: 24
                          130.248.179.0/24 maxlen: 24
                          130.248.180.0/24 maxlen: 24
                          130.248.181.0/24 maxlen: 24
                          130.248.183.0/24 maxlen: 24
                          130.248.189.0/24 maxlen: 24
                          130.248.190.0/24 maxlen: 24
                          130.248.192.0/24 maxlen: 24
                          130.248.193.0/24 maxlen: 24
                          130.248.194.0/24 maxlen: 24
                          130.248.195.0/24 maxlen: 24
                          130.248.196.0/24 maxlen: 24
                          130.248.197.0/24 maxlen: 24
                          130.248.198.0/24 maxlen: 24
                          130.248.204.0/24 maxlen: 24
                          130.248.205.0/24 maxlen: 24
                          130.248.206.0/24 maxlen: 24
                          130.248.207.0/24 maxlen: 24
                          130.248.208.0/24 maxlen: 24
                          130.248.210.0/24 maxlen: 24
                          130.248.220.0/24 maxlen: 24
                          130.248.221.0/24 maxlen: 24
                          130.248.222.0/24 maxlen: 24
                          130.248.226.0/24 maxlen: 24
                          130.248.229.0/24 maxlen: 24
                          130.248.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:5d:9b:96:38:11:57:4f:ea:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=ec63be95-f6e4-4476-a41d-a0796b86da61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d9:6d:bd:23:28:f8:79:10:9d:a7:ab:a4:52:
                    24:ed:f4:65:26:2d:00:f7:ef:35:aa:dd:6f:cb:00:
                    d2:2b:87:fc:66:31:9f:4f:47:bc:e0:16:48:08:9d:
                    41:3d:64:70:63:20:24:5a:02:32:0c:bd:7c:bd:e9:
                    b9:6a:34:cc:46:a0:34:12:3c:21:6d:62:3c:a7:4a:
                    5b:5b:00:54:07:86:81:d2:38:42:c8:36:96:2e:c2:
                    70:3b:3a:53:fe:57:1b:6f:2b:56:8e:66:76:af:11:
                    7f:16:6e:da:11:60:8d:86:d5:b7:de:cd:54:88:e4:
                    25:0a:6c:4a:b7:43:7e:6d:9b:43:ad:5b:3e:50:14:
                    fa:31:76:89:51:a7:94:e3:93:2c:26:e7:10:72:d4:
                    24:f8:85:c4:b1:e1:70:40:f5:35:0a:8a:89:30:9b:
                    07:40:9a:78:75:04:e7:21:63:d1:7d:d1:07:08:b9:
                    0c:9c:1b:57:7c:22:43:9d:dd:75:70:0a:73:37:ef:
                    79:b3:12:98:70:04:7b:f3:c3:24:51:20:8c:45:0e:
                    ea:1a:1b:d5:21:13:22:bf:4b:e0:86:58:ae:0e:e1:
                    69:1b:5d:f0:99:c4:94:8c:61:ca:64:97:17:5b:b0:
                    0f:78:08:12:81:22:ca:f6:8e:55:3a:cb:68:2b:b5:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D2:E5:D1:FA:19:5C:97:66:4F:7B:BE:E9:1D:8C:A3:A5:79:32:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.129.0/24
                  130.248.140.0/24
                  130.248.152.0/22
                  130.248.165.0/24
                  130.248.176.0/24
                  130.248.179.0-130.248.181.255
                  130.248.183.0/24
                  130.248.189.0-130.248.190.255
                  130.248.192.0-130.248.198.255
                  130.248.204.0-130.248.208.255
                  130.248.210.0/24
                  130.248.220.0-130.248.222.255
                  130.248.226.0/24
                  130.248.229.0-130.248.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:94:b2:62:ee:92:04:cd:6e:96:b9:0d:4c:97:75:2d:6f:dc:
         dc:76:29:bf:93:1b:61:5f:70:bd:64:37:1b:3e:26:07:e1:72:
         e7:9b:76:82:44:b0:70:60:87:d3:95:63:71:d9:b0:53:b4:b1:
         96:69:38:aa:47:75:64:0b:99:44:98:c0:ee:65:2e:6a:97:9e:
         44:6d:01:9f:69:d6:1e:0c:83:79:77:26:d6:87:c5:d6:48:10:
         18:c6:f1:04:f6:b2:37:c0:00:bb:4b:fb:88:be:c2:ce:2b:91:
         7a:1f:14:12:8e:2a:ab:a7:2f:ef:81:69:0e:b1:62:5f:ed:57:
         6a:4d:ff:6e:db:e8:39:04:97:86:45:f5:c6:f2:0b:cb:6b:8d:
         63:9c:c5:04:38:03:2b:36:da:95:5f:1e:3e:26:37:88:ee:af:
         10:d9:fb:8c:54:0f:48:a3:5a:50:6b:a3:12:7f:87:a5:5e:54:
         11:5d:b4:5f:49:1a:92:83:36:6b:8b:52:e6:d5:58:34:02:d9:
         23:2d:48:6b:87:8e:6a:c0:d7:1b:40:11:27:c0:d5:6e:36:68:
         94:59:d6:a8:38:6a:b5:82:28:63:f7:cf:b4:78:d0:df:d8:59:
         18:3d:da:8e:b4:2b:58:30:c5:c8:da:0e:d2:31:08:98:de:20:
         7b:1c:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:18 2025 by rpki-client