Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa
File:                     c8028626-644a-36ff-94f2-e2b51d0032be.roa (raw, json)
Hash identifier:          70vAlOz+D8tEy3JJohsG5P86qscZqeimRQ759lbDA04=
Subject key identifier:   74:FB:26:5E:5E:3C:F7:A8:4A:E7:9E:E6:AF:A8:1A:A6:36:C9:F7:9F
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584E0C1ED9CF6F2E818542AF9BC0
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     14618
IP address blocks:        130.248.129.0/24 maxlen: 24
                          130.248.140.0/24 maxlen: 24
                          130.248.152.0/24 maxlen: 24
                          130.248.153.0/24 maxlen: 24
                          130.248.154.0/24 maxlen: 24
                          130.248.155.0/24 maxlen: 24
                          130.248.165.0/24 maxlen: 24
                          130.248.176.0/24 maxlen: 24
                          130.248.179.0/24 maxlen: 24
                          130.248.180.0/24 maxlen: 24
                          130.248.181.0/24 maxlen: 24
                          130.248.183.0/24 maxlen: 24
                          130.248.189.0/24 maxlen: 24
                          130.248.190.0/24 maxlen: 24
                          130.248.192.0/24 maxlen: 24
                          130.248.193.0/24 maxlen: 24
                          130.248.194.0/24 maxlen: 24
                          130.248.195.0/24 maxlen: 24
                          130.248.196.0/24 maxlen: 24
                          130.248.197.0/24 maxlen: 24
                          130.248.198.0/24 maxlen: 24
                          130.248.204.0/24 maxlen: 24
                          130.248.205.0/24 maxlen: 24
                          130.248.206.0/24 maxlen: 24
                          130.248.207.0/24 maxlen: 24
                          130.248.208.0/24 maxlen: 24
                          130.248.210.0/24 maxlen: 24
                          130.248.220.0/24 maxlen: 24
                          130.248.221.0/24 maxlen: 24
                          130.248.222.0/24 maxlen: 24
                          130.248.226.0/24 maxlen: 24
                          130.248.229.0/24 maxlen: 24
                          130.248.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d9:cf:6f:2e:81:85:42:af:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=b3efd3d5-d426-49c3-9d27-6f1d9d0d330c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:bd:ad:63:e0:38:c8:4e:c5:42:32:6f:55:
                    55:b4:98:93:72:f6:eb:59:bd:ee:75:04:28:d3:17:
                    e1:f3:69:b5:b2:06:d4:68:2b:67:ea:b2:50:89:9a:
                    f5:15:03:f0:91:2e:5f:06:64:95:ad:e7:1e:86:38:
                    35:c6:bc:3e:ca:b8:a7:44:86:f3:89:7e:2c:db:a7:
                    6f:d7:cd:1f:8d:d6:c0:fb:3f:81:34:6d:b0:ab:cb:
                    e5:11:83:76:7b:16:49:84:20:c1:2b:8b:c3:eb:3d:
                    ce:a4:90:ae:15:84:4f:ef:fc:f3:33:75:18:ca:2a:
                    54:76:1a:e2:a3:55:1b:44:89:30:f1:fd:16:c2:f3:
                    f8:71:3d:8f:60:cc:bc:b9:1c:7b:66:4a:94:19:a3:
                    db:16:6a:9a:7c:df:1a:5e:95:d6:dc:d9:ad:be:41:
                    15:d5:94:2e:a4:fa:85:8d:2d:f4:cc:21:1b:dd:19:
                    f0:27:01:90:0f:b8:ab:99:38:a1:41:0c:0e:48:0d:
                    84:36:42:b0:55:50:2e:8e:92:54:f0:86:b1:c5:9c:
                    94:bc:2a:a8:10:d4:59:44:f3:79:da:a0:2d:21:06:
                    74:dc:27:c7:6f:24:0d:cf:11:a7:8f:37:80:c0:50:
                    67:b9:5a:a4:dd:3c:cf:8f:c5:c3:87:73:72:f1:4f:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FB:26:5E:5E:3C:F7:A8:4A:E7:9E:E6:AF:A8:1A:A6:36:C9:F7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.129.0/24
                  130.248.140.0/24
                  130.248.152.0/22
                  130.248.165.0/24
                  130.248.176.0/24
                  130.248.179.0-130.248.181.255
                  130.248.183.0/24
                  130.248.189.0-130.248.190.255
                  130.248.192.0-130.248.198.255
                  130.248.204.0-130.248.208.255
                  130.248.210.0/24
                  130.248.220.0-130.248.222.255
                  130.248.226.0/24
                  130.248.229.0-130.248.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:71:7f:a9:e2:46:10:8b:18:74:2c:b6:44:41:f6:3a:b5:41:
         0e:58:97:b4:83:b0:f8:a0:15:d0:27:bd:96:a7:4c:13:c8:6f:
         95:7b:05:bd:99:63:6e:bb:1f:e3:7f:04:c9:83:ab:98:f7:ff:
         c5:77:b6:0f:cd:6d:90:92:49:24:ae:87:da:b3:45:e6:e4:ab:
         1a:0c:09:e2:f6:db:35:cf:05:68:21:e4:45:74:d2:74:34:46:
         8e:2f:86:d5:8f:a6:7e:36:08:1e:d3:5a:7c:6e:55:21:19:c2:
         bd:2e:36:1a:9b:c4:ed:44:90:31:e5:22:01:c2:71:83:9e:e7:
         53:9a:19:0c:8f:c8:15:23:5d:1d:d4:18:fc:f6:4c:22:b9:54:
         a2:d5:2d:a8:29:fc:68:f5:b1:65:a5:3b:6b:4f:fa:60:51:82:
         c1:52:98:23:89:df:a6:4b:92:f8:cd:2c:b8:d8:2a:91:31:22:
         14:f6:95:2c:76:5f:50:5c:20:e7:47:a3:26:01:55:12:fc:db:
         64:b8:d8:3b:43:62:78:8d:49:32:31:ce:cf:ba:41:2a:04:c2:
         83:2e:e6:5e:d4:a3:aa:1f:4c:7c:ee:a8:ff:52:51:d1:08:92:
         ae:59:0b:57:7c:00:c2:af:3e:d4:02:07:84:6c:a0:43:c6:20:
         21:a2:b3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:55:47 2026 by rpki-client