Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa
File:                     9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa (raw, json)
Hash identifier:          JTre5RD3zLC/zENxWo3UhjTKLIjnlW3YFdR8BIybdYo=
Subject key identifier:   DE:A3:2B:75:D5:D7:08:41:C4:12:1A:6E:DA:99:0C:8C:A6:39:0E:DE
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584A14656535FCA729CA83FB4C68
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        130.248.166.0/24 maxlen: 24
                          130.248.177.0/24 maxlen: 24
                          130.248.178.0/24 maxlen: 24
                          130.248.216.0/24 maxlen: 24
                          130.248.217.0/24 maxlen: 24
                          130.248.223.0/24 maxlen: 24
                          130.248.227.0/24 maxlen: 24
                          130.248.228.0/24 maxlen: 24
                          130.248.231.0/24 maxlen: 24
                          130.248.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:65:35:fc:a7:29:ca:83:fb:4c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=7ad96154-a1d2-422a-87d1-4fd61b8a70d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:0e:66:b4:af:29:8d:e5:2c:df:e6:bd:eb:
                    30:95:89:90:e4:91:3a:55:e3:cf:cd:38:b0:1b:7f:
                    d0:d4:d7:d1:36:1f:bd:9c:4c:5d:0e:39:4d:14:7e:
                    c1:30:fd:24:c5:bb:d6:85:06:8a:f5:d6:4c:94:76:
                    6d:75:2a:fb:e2:07:0a:a4:45:b2:8a:68:a6:6f:dc:
                    41:15:01:40:ea:f9:e6:84:df:d9:c8:89:ec:55:8d:
                    0c:8f:e2:98:95:a7:d0:6d:2d:f1:23:da:70:d1:d6:
                    23:9a:e8:d9:3d:f3:be:5c:8d:d7:28:e7:e7:4e:c0:
                    a6:dd:e3:86:83:13:0b:66:05:52:88:17:68:6b:ca:
                    f1:57:36:60:52:a1:b7:23:82:65:83:41:65:02:e5:
                    19:fe:52:f0:c0:d1:a3:93:66:72:98:00:10:02:ec:
                    62:d2:b7:60:73:7e:9e:3b:8f:90:38:cc:c7:55:7b:
                    51:ad:21:02:ec:f9:0d:1d:d1:16:ec:4a:7d:25:a9:
                    91:a4:48:e1:57:72:be:b1:39:15:2e:69:64:58:da:
                    2d:a8:2e:95:43:44:99:b7:fb:ba:13:04:fe:8d:22:
                    f1:dd:f8:30:2d:e3:c3:39:3d:85:69:3b:c9:65:5f:
                    1f:52:49:aa:1a:ad:56:87:0c:b8:cb:9c:ab:58:75:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:2B:75:D5:D7:08:41:C4:12:1A:6E:DA:99:0C:8C:A6:39:0E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.166.0/24
                  130.248.177.0-130.248.178.255
                  130.248.216.0/23
                  130.248.223.0/24
                  130.248.227.0-130.248.228.255
                  130.248.231.0/24
                  130.248.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:25:ad:e7:40:1a:7a:c4:30:b2:17:62:c1:89:22:f5:e7:b2:
         2d:c2:3b:cf:a9:72:e4:5d:b1:c4:b3:8a:2b:3a:e8:cb:c2:cf:
         69:b4:9d:f6:fb:d9:01:fc:d7:a4:d3:68:62:ae:fa:a1:d0:21:
         1f:7a:80:e2:75:bb:30:14:c7:8d:2d:f6:00:23:06:4f:99:05:
         ae:cc:16:f1:74:4f:e7:b1:25:a6:dd:83:73:69:7f:77:2f:cd:
         35:fb:92:aa:43:ec:23:22:21:af:ec:52:e4:3c:02:17:cf:5a:
         33:57:35:31:f4:01:b7:32:31:5d:45:df:47:cf:13:c0:d0:68:
         1a:73:2b:69:b0:d0:ce:c4:8c:89:2c:fa:60:b0:95:d3:32:17:
         58:96:de:97:85:e6:41:6f:be:d7:78:08:74:63:78:c9:18:54:
         86:90:83:5c:f1:09:74:e4:56:97:e4:0c:6d:af:ed:f8:54:6c:
         cd:04:76:4f:24:77:f8:9a:51:c7:b6:a0:50:cc:fa:78:be:5f:
         61:58:81:b4:ab:15:b5:16:22:6c:2a:94:0f:13:35:00:b5:23:
         2d:5f:29:3c:27:99:98:9a:40:a9:d9:c2:e0:0f:7c:3d:8c:02:
         f5:bf:df:74:77:a5:e9:0d:50:fc:cb:cf:76:f9:ff:95:90:df:
         aa:a4:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:25:15 2025 by rpki-client