Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa
File:                     c8028626-644a-36ff-94f2-e2b51d0032be.roa (raw, json)
Hash identifier:          Vp0YaNc7fSrfQ0FXBR6EksvsaxnJT4w+K+CDg+wX1GQ=
Subject key identifier:   5E:AA:7F:DA:2D:A0:AE:14:87:70:44:8A:C3:1D:ED:F0:1A:2A:5F:E1
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F43285849ABB4A5AE5CB621ACC616CAC0
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        130.248.129.0/24 maxlen: 24
                          130.248.140.0/24 maxlen: 24
                          130.248.152.0/24 maxlen: 24
                          130.248.153.0/24 maxlen: 24
                          130.248.154.0/24 maxlen: 24
                          130.248.155.0/24 maxlen: 24
                          130.248.165.0/24 maxlen: 24
                          130.248.176.0/24 maxlen: 24
                          130.248.179.0/24 maxlen: 24
                          130.248.180.0/24 maxlen: 24
                          130.248.181.0/24 maxlen: 24
                          130.248.183.0/24 maxlen: 24
                          130.248.189.0/24 maxlen: 24
                          130.248.190.0/24 maxlen: 24
                          130.248.192.0/24 maxlen: 24
                          130.248.193.0/24 maxlen: 24
                          130.248.194.0/24 maxlen: 24
                          130.248.195.0/24 maxlen: 24
                          130.248.196.0/24 maxlen: 24
                          130.248.197.0/24 maxlen: 24
                          130.248.198.0/24 maxlen: 24
                          130.248.204.0/24 maxlen: 24
                          130.248.205.0/24 maxlen: 24
                          130.248.206.0/24 maxlen: 24
                          130.248.207.0/24 maxlen: 24
                          130.248.208.0/24 maxlen: 24
                          130.248.210.0/24 maxlen: 24
                          130.248.220.0/24 maxlen: 24
                          130.248.221.0/24 maxlen: 24
                          130.248.222.0/24 maxlen: 24
                          130.248.226.0/24 maxlen: 24
                          130.248.229.0/24 maxlen: 24
                          130.248.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a5:ae:5c:b6:21:ac:c6:16:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=5b735ef1-a297-438b-a205-a075d007298e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:31:71:fb:22:9a:89:bc:7e:5d:11:3e:55:
                    ed:27:da:e4:1b:2e:e1:3d:c0:e1:ab:73:b1:5f:c6:
                    8b:82:6a:f0:3f:f3:cd:3d:eb:17:59:88:fa:0a:45:
                    bd:f9:06:f7:fc:c7:cc:26:21:4e:01:3c:c2:7c:66:
                    41:69:25:76:cf:ef:25:65:64:bc:62:0c:0d:42:75:
                    bb:c2:79:0b:83:03:33:06:8b:03:8f:8f:05:c3:cd:
                    6c:a1:1c:34:c1:69:0a:14:04:0c:55:6c:f0:ed:0e:
                    19:9a:93:c5:ff:75:5e:03:11:a1:bd:de:39:74:88:
                    ef:fc:a2:59:18:3b:a2:0a:b4:8d:92:21:d5:4c:e2:
                    11:e3:9c:52:f9:c5:5b:19:15:d8:73:3b:9e:6e:86:
                    b8:64:82:e9:53:f6:9b:75:a7:f5:f7:55:1a:5b:fb:
                    66:7f:9f:99:52:38:b3:b6:a6:be:48:49:37:4b:00:
                    61:c4:41:67:ba:86:60:de:17:87:d8:9f:8a:aa:2a:
                    f3:ab:50:5d:04:b5:78:c5:0b:60:82:05:8f:aa:5d:
                    de:20:3e:7d:f4:6e:d4:99:76:76:e4:40:dc:0d:76:
                    ce:f3:08:b7:31:59:46:c6:9a:ff:89:6f:c4:e7:70:
                    2b:43:6d:df:cb:4b:0d:23:c8:68:95:6e:04:53:14:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:7F:DA:2D:A0:AE:14:87:70:44:8A:C3:1D:ED:F0:1A:2A:5F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.129.0/24
                  130.248.140.0/24
                  130.248.152.0/22
                  130.248.165.0/24
                  130.248.176.0/24
                  130.248.179.0-130.248.181.255
                  130.248.183.0/24
                  130.248.189.0-130.248.190.255
                  130.248.192.0-130.248.198.255
                  130.248.204.0-130.248.208.255
                  130.248.210.0/24
                  130.248.220.0-130.248.222.255
                  130.248.226.0/24
                  130.248.229.0-130.248.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2c:cc:56:42:f1:db:71:e7:41:0e:f2:cb:cc:c5:15:17:bb:
         ff:a9:af:dc:a5:08:da:2e:58:0b:2c:e9:e2:42:a3:85:8f:9a:
         dc:ef:c7:fe:7c:08:e5:2c:c5:4d:1d:62:45:0a:6d:bf:4d:cf:
         9e:06:5f:9e:10:9f:2e:ef:83:b8:da:83:d6:46:1c:d4:57:77:
         e7:cc:a0:c1:0e:69:9c:5c:eb:4e:ba:37:84:a8:fb:8a:34:ed:
         c8:27:32:1e:80:50:be:9d:4c:12:c4:97:26:ed:82:87:4d:ca:
         43:b5:06:4e:df:c0:ce:8a:65:e1:ad:b3:63:16:56:04:92:9c:
         8d:e1:48:bc:10:88:69:02:5f:bb:79:d9:33:43:25:d9:ec:26:
         7e:71:15:59:37:16:47:7c:30:6d:85:41:9c:4a:0d:29:9e:8a:
         94:46:bb:c7:4c:24:7f:a7:69:8c:e1:d2:0b:17:a1:5d:a5:6c:
         da:4c:b0:f0:3c:b8:a1:48:e5:9d:33:06:6f:a2:45:18:d5:c0:
         79:0e:46:d3:73:78:81:cf:10:b7:d8:8a:2c:90:54:b8:87:f4:
         83:d3:da:8b:79:ac:4f:36:ec:07:b4:72:02:57:df:e2:ca:3f:
         ff:ba:8d:78:a6:30:20:1f:61:2f:38:61:a1:f8:34:14:0b:09:
         a6:4e:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:35 2025 by rpki-client