Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa
File:                     b780a0ee-0d24-319f-ad59-98019ee54e2c.roa (raw, json)
Hash identifier:          ctoePiUBJ6o4J34IvYMD3q+klznqGXGa35SDXKix35A=
Subject key identifier:   A3:D0:AF:DF:B3:35:9E:B2:8D:34:AC:62:6B:C9:EC:FF:5D:E7:29:11
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F43285849FE0FF8F4391996517AED3F80
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        130.248.141.0/24 maxlen: 24
                          130.248.158.0/24 maxlen: 24
                          130.248.164.0/24 maxlen: 24
                          130.248.167.0/24 maxlen: 24
                          130.248.199.0/24 maxlen: 24
                          130.248.202.0/24 maxlen: 24
                          130.248.203.0/24 maxlen: 24
                          130.248.224.0/24 maxlen: 24
                          130.248.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:f8:f4:39:19:96:51:7a:ed:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=a504f8b7-9ceb-4d9b-8c9f-21b69f495997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:b2:3a:93:55:7d:6f:bb:e0:ad:14:4b:6c:
                    ea:a8:96:b7:2d:20:53:03:39:24:3b:b1:78:11:57:
                    36:a7:0c:47:d9:f7:91:31:f5:36:2a:79:06:35:e7:
                    81:4c:7d:17:19:ac:96:f9:8f:92:e7:e9:78:9b:56:
                    d2:c8:a5:cc:1e:55:dd:89:a9:96:34:f3:52:f0:1e:
                    d4:52:72:06:26:74:ee:e1:57:a8:f6:55:da:2e:d4:
                    f7:23:88:43:a5:a2:88:df:20:8c:d4:cd:19:44:74:
                    de:52:85:98:ea:73:b5:70:d8:bd:57:9b:3d:a4:c4:
                    e1:7f:f2:17:a5:a4:21:9f:1f:9b:cd:0d:22:96:e6:
                    46:7d:5c:41:2c:72:34:ab:d7:64:08:c7:2c:bc:54:
                    f7:ae:60:62:91:ec:23:eb:78:84:01:d1:e8:7c:20:
                    03:6c:92:48:33:d5:e0:7c:da:32:8e:0f:d4:38:9b:
                    06:17:4b:f0:c2:e8:d1:09:df:10:27:4a:88:a3:53:
                    6a:ac:ca:6e:24:cc:fc:1e:52:34:57:9e:51:6b:0c:
                    cf:e0:1c:c4:8b:e5:79:8e:ae:01:d2:a1:28:7f:de:
                    0f:81:80:d0:b6:7a:70:57:32:30:83:fc:1f:c0:7e:
                    88:99:a4:1f:45:29:d6:e7:c6:b4:24:33:22:87:9a:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D0:AF:DF:B3:35:9E:B2:8D:34:AC:62:6B:C9:EC:FF:5D:E7:29:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.141.0/24
                  130.248.158.0/24
                  130.248.164.0/24
                  130.248.167.0/24
                  130.248.199.0/24
                  130.248.202.0/23
                  130.248.224.0/24
                  130.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:d2:7a:b9:ea:4e:f6:55:72:a2:6d:8c:3b:0e:79:d5:29:
         97:60:f0:58:c9:d0:f8:a9:b5:87:83:35:04:76:e3:ad:6d:db:
         75:13:51:26:4c:8c:7c:c0:9e:c1:1d:e6:1b:f4:d5:c0:0f:b0:
         07:c7:ec:65:f5:88:fc:a1:ce:58:60:ad:da:20:88:93:7b:63:
         a2:f6:15:1e:71:7a:75:db:fb:b6:ee:78:b3:bc:9f:6a:e9:da:
         72:ff:8f:c6:4d:8c:38:60:b1:fc:fe:04:78:55:5a:25:95:d9:
         7f:06:70:30:62:66:55:a0:22:13:8e:f1:8e:99:d3:4e:0c:3d:
         94:41:07:4f:de:05:9a:f5:26:8c:4b:fa:fa:89:62:17:89:0f:
         6f:04:dd:c9:f0:c9:1c:bc:85:0e:20:6b:b0:c9:29:22:7c:7c:
         66:1d:a7:cf:f7:0d:82:22:a9:63:a3:e2:88:be:66:fb:39:2d:
         0b:07:8d:e7:8c:db:e9:77:6e:5e:f9:d4:be:b0:03:66:7a:1e:
         9e:83:b0:28:b9:b2:cc:b9:27:ed:0a:c8:da:4e:05:10:14:a9:
         aa:d7:7d:09:a1:30:c8:65:0e:e4:37:35:05:c3:19:7a:19:32:
         07:3b:ed:5f:8a:c4:8d:65:73:fa:32:df:89:5c:cf:ff:6f:83:
         d2:12:44:ad
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEn+D/j0ORmWUXrtP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
YTUwNGY4YjctOWNlYi00ZDliLThjOWYtMjFiNjlmNDk1OTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnKyOpNVfW+74K0US2zqqJa3LSBTAzkkO7F4
EVc2pwxH2feRMfU2KnkGNeeBTH0XGayW+Y+S5+l4m1bSyKXMHlXdiamWNPNS8B7U
UnIGJnTu4Veo9lXaLtT3I4hDpaKI3yCM1M0ZRHTeUoWY6nO1cNi9V5s9pMThf/IX
paQhnx+bzQ0iluZGfVxBLHI0q9dkCMcsvFT3rmBikewj63iEAdHofCADbJJIM9Xg
fNoyjg/UOJsGF0vwwujRCd8QJ0qIo1NqrMpuJMz8HlI0V55RawzP4BzEi+V5jq4B
0qEof94PgYDQtnpwVzIwg/wfwH6ImaQfRSnW58a0JDMih5oEbwIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFKPQr9+zNZ6yjTSsYmvJ7P9d5ykRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvYjc4MGEwZWUtMGQyNC0z
MTlmLWFkNTktOTgwMTllZTU0ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAgviNAwQA
gvieAwQAgvikAwQAgvinAwQAgvjHAwQBgvjKAwQAgvjgAwQAgvjrMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AC1x0nq56k72VXKibYw7DnnVKZdg8FjJ0PiptYeDNQR2461t23UTUSZMjHzAnsEd
5hv01cAPsAfH7GX1iPyhzlhgrdogiJN7Y6L2FR5xenXb+7bueLO8n2rp2nL/j8ZN
jDhgsfz+BHhVWiWV2X8GcDBiZlWgIhOO8Y6Z004MPZRBB0/eBZr1JoxL+vqJYheJ
D28E3cnwyRy8hQ4ga7DJKSJ8fGYdp8/3DYIiqWOj4oi+Zvs5LQsHjeeM2+l3bl75
1L6wA2Z6Hp6DsCi5ssy5J+0KyNpOBRAUqarXfQmhMMhlDuQ3NQXDGXoZMgc77V+K
xI1lc/oy34lcz/9vg9ISRK0=
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:58 2025 by rpki-client