Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
File:                     56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa (raw, json)
Hash identifier:          gk5iLIscUzw5KOljueEKHiH0O/7D4E5UFbKKDkbT8DY=
Subject key identifier:   E0:8A:C3:A9:7E:9E:61:3B:8B:D1:62:D4:CD:B1:3B:8A:76:03:0F:BD
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584B6BC7592EF43F2D553E095380
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     16509
IP address blocks:        130.248.129.0/24 maxlen: 24
                          130.248.140.0/24 maxlen: 24
                          130.248.152.0/24 maxlen: 24
                          130.248.153.0/24 maxlen: 24
                          130.248.154.0/24 maxlen: 24
                          130.248.155.0/24 maxlen: 24
                          130.248.165.0/24 maxlen: 24
                          130.248.176.0/24 maxlen: 24
                          130.248.179.0/24 maxlen: 24
                          130.248.180.0/24 maxlen: 24
                          130.248.181.0/24 maxlen: 24
                          130.248.183.0/24 maxlen: 24
                          130.248.189.0/24 maxlen: 24
                          130.248.190.0/24 maxlen: 24
                          130.248.192.0/24 maxlen: 24
                          130.248.193.0/24 maxlen: 24
                          130.248.194.0/24 maxlen: 24
                          130.248.195.0/24 maxlen: 24
                          130.248.196.0/24 maxlen: 24
                          130.248.197.0/24 maxlen: 24
                          130.248.198.0/24 maxlen: 24
                          130.248.204.0/24 maxlen: 24
                          130.248.205.0/24 maxlen: 24
                          130.248.206.0/24 maxlen: 24
                          130.248.207.0/24 maxlen: 24
                          130.248.208.0/24 maxlen: 24
                          130.248.210.0/24 maxlen: 24
                          130.248.220.0/24 maxlen: 24
                          130.248.221.0/24 maxlen: 24
                          130.248.222.0/24 maxlen: 24
                          130.248.226.0/24 maxlen: 24
                          130.248.229.0/24 maxlen: 24
                          130.248.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:59:2e:f4:3f:2d:55:3e:09:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=e6285f29-1aa8-400f-b76e-74ad48d6e38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:36:25:ca:92:45:8f:9c:95:e3:43:ca:6b:
                    6e:75:dc:60:57:e3:39:e9:1c:8d:17:34:06:66:e2:
                    30:c9:b2:f6:82:59:33:b6:22:bb:89:af:d7:28:06:
                    30:73:17:18:b9:f7:4c:e2:19:f1:7b:74:f7:99:e0:
                    c2:22:32:a6:1f:fd:85:b4:1a:cf:62:d5:b4:ab:ef:
                    b3:0e:3f:42:41:60:58:66:c4:f7:34:46:87:01:f9:
                    ce:eb:85:9b:f7:47:28:15:e7:de:ef:8f:96:0c:31:
                    70:62:f9:34:fd:c4:d2:6c:70:54:74:95:67:a0:cf:
                    6a:37:d2:6d:d4:82:4f:8a:b1:00:7c:17:79:4f:35:
                    85:36:2c:0f:cf:59:3c:7a:44:d5:25:27:52:39:4a:
                    f7:25:64:d9:12:79:e4:f0:a0:f1:86:ec:87:40:f7:
                    65:83:ef:80:6a:fc:d5:7c:72:6d:f5:52:15:6c:df:
                    30:39:8e:f6:8d:67:f7:b8:3c:f1:93:65:f8:c0:ad:
                    0b:a9:ac:17:01:a7:d2:d9:d9:04:d2:71:ae:90:b9:
                    61:97:8b:08:b6:ba:4f:27:72:74:dc:2c:a2:1f:3c:
                    31:8a:4e:1a:ac:4c:ac:74:40:b0:72:2c:e6:84:29:
                    59:de:dc:2e:ae:5c:e9:9e:24:0f:b2:83:83:42:f7:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8A:C3:A9:7E:9E:61:3B:8B:D1:62:D4:CD:B1:3B:8A:76:03:0F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.129.0/24
                  130.248.140.0/24
                  130.248.152.0/22
                  130.248.165.0/24
                  130.248.176.0/24
                  130.248.179.0-130.248.181.255
                  130.248.183.0/24
                  130.248.189.0-130.248.190.255
                  130.248.192.0-130.248.198.255
                  130.248.204.0-130.248.208.255
                  130.248.210.0/24
                  130.248.220.0-130.248.222.255
                  130.248.226.0/24
                  130.248.229.0-130.248.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a8:d3:4e:a3:35:a8:31:79:fd:bb:c7:47:e3:2f:39:90:e1:
         12:28:6a:ba:f2:b5:52:81:f4:b7:39:be:fa:1b:e7:7e:f2:59:
         85:4c:f4:c6:f5:72:47:3e:05:15:ec:f6:2b:ae:ca:f5:1b:9b:
         d0:da:b9:bf:95:56:ba:be:a4:e2:06:61:c7:90:aa:b4:a2:ff:
         00:41:b0:3a:dc:83:b7:28:80:58:bc:78:eb:10:65:28:03:bb:
         5b:45:38:bd:54:81:1d:5b:f6:7b:be:a7:a4:a6:0b:51:b1:2e:
         7b:17:78:1b:85:2a:cf:0f:8c:11:45:6b:a5:a4:03:57:8a:e3:
         3a:3e:1b:c4:bf:54:03:9c:8c:1e:5f:ad:98:1f:ae:db:4c:f3:
         de:28:df:d6:52:d7:3c:5b:2c:cd:3f:9a:d4:6b:f3:10:88:b5:
         7f:09:ae:30:62:9e:ae:f7:27:52:2f:41:45:9a:72:cd:ca:d5:
         bd:f2:95:d0:00:b5:c7:b1:3a:a8:55:f1:3a:24:b9:34:2f:46:
         34:24:09:48:86:90:54:c2:2f:1a:09:8a:00:37:5e:79:fc:3c:
         54:f7:d7:ad:24:5f:9d:f1:a2:25:c8:a0:1d:8c:30:87:47:79:
         d5:7a:53:37:2a:b5:fc:a4:81:7d:82:ec:6b:00:cd:9e:dc:03:
         a4:69:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:43:29 2025 by rpki-client