Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/722de295-886e-3bd9-9689-25f93d52f388.roa
File:                     722de295-886e-3bd9-9689-25f93d52f388.roa (raw, json)
Hash identifier:          lAqS7BwPNP31qlQla3xk/DV/KpwENOZVcVJp6VWW82A=
Subject key identifier:   E1:F7:36:86:E8:4A:5C:2F:37:74:B7:F6:F1:39:99:F2:F1:58:14:29
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584B715CB8BF9E0C4E1DBDA59480
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/722de295-886e-3bd9-9689-25f93d52f388.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        130.248.128.0/24 maxlen: 24
                          130.248.136.0/24 maxlen: 24
                          130.248.137.0/24 maxlen: 24
                          130.248.139.0/24 maxlen: 24
                          130.248.182.0/24 maxlen: 24
                          130.248.188.0/24 maxlen: 24
                          130.248.209.0/24 maxlen: 24
                          130.248.211.0/24 maxlen: 24
                          130.248.214.0/24 maxlen: 24
                          130.248.215.0/24 maxlen: 24
                          130.248.234.0/24 maxlen: 24
                          130.248.236.0/24 maxlen: 24
                          130.248.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b8:bf:9e:0c:4e:1d:bd:a5:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=6aa63a68-a811-4f12-8270-36d2201be48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:37:51:c5:f7:b3:49:ff:ec:18:f4:19:29:
                    ae:df:58:5c:02:df:00:e6:92:03:23:07:14:7e:7a:
                    d7:c2:53:e7:14:50:8e:74:29:57:eb:ce:4f:8e:e6:
                    ba:be:17:4a:e0:eb:c9:a3:f4:68:10:7a:28:ea:ce:
                    98:d3:26:9d:eb:b2:08:b4:34:fe:9b:00:1a:e3:25:
                    e4:53:0d:31:77:4f:fb:7f:84:2c:06:47:b1:02:a9:
                    00:14:fc:38:c5:6d:a2:41:c4:47:b6:93:64:47:a8:
                    d2:98:3c:4f:eb:93:a2:92:70:36:93:d2:81:25:aa:
                    cd:a7:b0:67:a7:2e:fb:9e:0d:d4:46:a6:15:df:1f:
                    82:1f:a4:ef:c5:16:3c:80:b2:99:23:79:6e:73:8f:
                    ca:16:25:c0:6b:86:31:70:c1:63:54:3b:80:77:49:
                    88:13:92:19:6b:c9:1f:57:a7:90:79:d8:4b:08:fc:
                    cd:47:db:4f:cc:40:98:f0:9f:74:5c:53:7a:2c:65:
                    86:ec:9d:7f:67:d1:04:b6:07:aa:e3:de:fd:7a:8e:
                    5a:20:8d:a0:b9:d3:44:66:e4:65:3e:46:ce:ca:80:
                    bd:07:0b:f6:f9:95:4f:bc:43:64:07:45:e3:3c:00:
                    25:ab:9a:08:88:0d:39:14:a4:41:dd:bd:5f:e8:33:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F7:36:86:E8:4A:5C:2F:37:74:B7:F6:F1:39:99:F2:F1:58:14:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/722de295-886e-3bd9-9689-25f93d52f388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.128.0/24
                  130.248.136.0/23
                  130.248.139.0/24
                  130.248.182.0/24
                  130.248.188.0/24
                  130.248.209.0/24
                  130.248.211.0/24
                  130.248.214.0/23
                  130.248.234.0/24
                  130.248.236.0/24
                  130.248.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:d0:f9:f7:13:b3:d5:f8:53:b1:8f:25:9a:05:09:d6:24:
         0a:1e:d3:68:d7:b5:ed:8c:fe:de:9b:ad:72:48:db:e2:e9:ea:
         ad:d9:a9:d0:0b:73:c6:ed:54:7c:c4:d7:a0:22:66:cf:a9:b3:
         b6:09:08:72:37:1b:44:37:82:f4:92:0a:ee:ce:36:c2:d3:d3:
         d6:ac:cf:dd:98:c0:45:51:a5:cf:7f:02:9b:84:9e:cc:31:86:
         d6:f8:37:87:92:72:2f:93:fe:6d:c8:66:3a:42:28:af:95:e9:
         6a:ef:c5:47:96:19:7b:56:37:a8:41:5d:f6:ef:95:9b:92:cc:
         20:bf:03:8f:50:c3:88:a0:a1:90:85:92:d5:65:c1:13:ca:40:
         d5:65:71:5c:e0:82:81:c3:55:db:e0:6b:0d:dd:75:3b:b5:f1:
         69:44:87:33:27:2c:ec:c7:a3:3d:0e:e4:52:51:16:31:24:94:
         09:1d:c0:a7:52:f4:d7:7b:d7:fc:50:8d:bf:5d:1a:bc:7f:1a:
         40:96:92:2d:d9:ec:a3:0b:1e:29:4d:f6:d2:9d:8e:45:66:92:
         74:c1:c3:dd:34:5c:fa:05:d7:52:7f:b5:4f:00:4f:99:67:03:
         f8:f9:94:d3:f4:64:72:8f:58:ef:8b:48:c2:50:07:9b:b2:3b:
         d6:20:93:ab
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEtxXLi/ngxOHb2llIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
NmFhNjNhNjgtYTgxMS00ZjEyLTgyNzAtMzZkMjIwMWJlNDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5I3UcX3s0n/7Bj0GSmu31hcAt8A5pIDIwcU
fnrXwlPnFFCOdClX685Pjua6vhdK4OvJo/RoEHoo6s6Y0yad67IItDT+mwAa4yXk
Uw0xd0/7f4QsBkexAqkAFPw4xW2iQcRHtpNkR6jSmDxP65OiknA2k9KBJarNp7Bn
py77ng3URqYV3x+CH6TvxRY8gLKZI3luc4/KFiXAa4YxcMFjVDuAd0mIE5IZa8kf
V6eQedhLCPzNR9tPzECY8J90XFN6LGWG7J1/Z9EEtgeq4979eo5aII2gudNEZuRl
PkbOyoC9Bwv2+ZVPvENkB0XjPAAlq5oIiA05FKRB3b1f6DOeTwIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFOH3NoboSlwvN3S39vE5mfLxWBQpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvNzIyZGUyOTUtODg2ZS0z
YmQ5LTk2ODktMjVmOTNkNTJmMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAgviAAwQB
gviIAwQAgviLAwQAgvi2AwQAgvi8AwQAgvjRAwQAgvjTAwQBgvjWAwQAgvjqAwQA
gvjsAwQAgvjuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABL20Pn3E7PV+FOxjyWaBQnWJAoe02jXte2M/t6b
rXJI2+Lp6q3ZqdALc8btVHzE16AiZs+ps7YJCHI3G0Q3gvSSCu7ONsLT09asz92Y
wEVRpc9/ApuEnswxhtb4N4eSci+T/m3IZjpCKK+V6WrvxUeWGXtWN6hBXfbvlZuS
zCC/A49Qw4igoZCFktVlwRPKQNVlcVzggoHDVdvgaw3ddTu18WlEhzMnLOzHoz0O
5FJRFjEklAkdwKdS9Nd71/xQjb9dGrx/GkCWki3Z7KMLHilN9tKdjkVmknTBw900
XPoF11J/tU8AT5lnA/j5lNP0ZHKPWO+LSMJQB5uyO9Ygk6s=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:11 2025 by rpki-client