Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
File:                     56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa (raw, json)
Hash identifier:          MZWjoqSp9qJQD+OA6OLWUnK1d1m2BV3aM81u4zvw7Ys=
Subject key identifier:   AC:91:91:C0:A7:BD:7C:C0:B4:08:88:74:A6:E8:4C:0F:8D:53:FE:30
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F43285848CC7B9B153E77508FBE098C00
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        130.248.129.0/24 maxlen: 24
                          130.248.140.0/24 maxlen: 24
                          130.248.152.0/24 maxlen: 24
                          130.248.153.0/24 maxlen: 24
                          130.248.154.0/24 maxlen: 24
                          130.248.155.0/24 maxlen: 24
                          130.248.165.0/24 maxlen: 24
                          130.248.176.0/24 maxlen: 24
                          130.248.179.0/24 maxlen: 24
                          130.248.180.0/24 maxlen: 24
                          130.248.181.0/24 maxlen: 24
                          130.248.183.0/24 maxlen: 24
                          130.248.189.0/24 maxlen: 24
                          130.248.190.0/24 maxlen: 24
                          130.248.192.0/24 maxlen: 24
                          130.248.193.0/24 maxlen: 24
                          130.248.194.0/24 maxlen: 24
                          130.248.195.0/24 maxlen: 24
                          130.248.196.0/24 maxlen: 24
                          130.248.197.0/24 maxlen: 24
                          130.248.198.0/24 maxlen: 24
                          130.248.204.0/24 maxlen: 24
                          130.248.205.0/24 maxlen: 24
                          130.248.206.0/24 maxlen: 24
                          130.248.207.0/24 maxlen: 24
                          130.248.208.0/24 maxlen: 24
                          130.248.210.0/24 maxlen: 24
                          130.248.220.0/24 maxlen: 24
                          130.248.221.0/24 maxlen: 24
                          130.248.222.0/24 maxlen: 24
                          130.248.226.0/24 maxlen: 24
                          130.248.229.0/24 maxlen: 24
                          130.248.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9b:15:3e:77:50:8f:be:09:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=2e0e3f81-bd5f-4bfc-8edd-0760eac0c621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:87:29:82:10:ca:7f:f7:be:f3:ae:7f:12:
                    09:56:6d:37:fe:e3:d5:22:79:f1:92:4d:8a:dc:77:
                    49:f8:99:28:ae:d7:22:7d:34:9a:fc:79:ee:58:54:
                    9e:7c:a4:45:f1:89:a2:31:3a:81:4d:b9:1a:05:8b:
                    47:73:f1:60:2c:d5:13:f8:f2:f6:43:c6:e1:9b:88:
                    98:cf:50:97:14:88:50:53:2e:74:a2:77:63:59:fe:
                    5b:46:52:7b:65:ab:02:5b:3b:1e:92:07:2b:ae:d4:
                    68:14:6a:95:8f:01:95:15:36:9a:1b:76:aa:86:d7:
                    f4:fe:7d:8f:6d:93:1d:ce:b0:f3:3b:1b:98:41:41:
                    b3:cd:87:5f:9c:15:1e:60:8c:c8:a4:cc:06:d2:8a:
                    5c:7d:bb:1e:64:79:88:9c:5c:62:15:88:e9:2b:40:
                    41:15:dc:cc:37:dc:49:06:4c:80:74:60:3a:70:46:
                    f9:2f:08:6b:2c:a3:99:0c:f3:44:0e:91:ef:4e:46:
                    53:e8:93:e4:04:3e:27:63:51:d2:da:09:23:a4:93:
                    b4:96:4f:bc:c6:2a:a0:e0:80:dc:c8:a9:2b:51:b5:
                    89:0d:db:57:d3:46:2d:d6:11:bf:17:22:5a:42:a5:
                    a9:36:56:d7:c0:da:8a:45:ce:60:ef:38:27:09:a8:
                    fc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:91:91:C0:A7:BD:7C:C0:B4:08:88:74:A6:E8:4C:0F:8D:53:FE:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.129.0/24
                  130.248.140.0/24
                  130.248.152.0/22
                  130.248.165.0/24
                  130.248.176.0/24
                  130.248.179.0-130.248.181.255
                  130.248.183.0/24
                  130.248.189.0-130.248.190.255
                  130.248.192.0-130.248.198.255
                  130.248.204.0-130.248.208.255
                  130.248.210.0/24
                  130.248.220.0-130.248.222.255
                  130.248.226.0/24
                  130.248.229.0-130.248.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c3:9d:35:21:3d:06:67:a6:66:8f:6c:9a:51:0a:65:7a:4f:
         13:a7:4f:a2:b6:a5:fa:a5:bf:3a:48:e9:6a:30:f4:f5:19:6a:
         30:d8:14:7a:4c:13:ae:2c:3e:fa:77:3a:05:0e:93:e8:a7:66:
         19:a3:17:22:53:5e:fb:e0:e4:c2:d0:d4:28:d7:87:b3:0c:94:
         0c:83:28:1e:33:b2:2b:65:4c:99:c8:e9:27:5a:ad:92:7f:b6:
         d0:e0:fc:89:21:9b:18:d2:dc:59:99:7f:fe:8b:57:ad:79:8d:
         86:44:7f:81:df:c2:c3:ee:6f:22:73:23:f5:d0:c3:aa:ff:2f:
         f7:38:94:a8:8e:70:ef:f8:ba:70:0d:1a:53:05:a8:89:5b:2c:
         f8:7c:07:72:ce:d5:82:97:e0:b8:45:27:98:e3:b8:e9:5c:ad:
         0a:04:ea:ea:17:6a:97:d2:82:09:46:d1:49:66:82:df:82:6c:
         4f:b4:64:8a:fa:4d:15:43:50:f8:72:bb:71:06:92:eb:e9:05:
         a3:34:91:94:0f:0d:01:61:5e:cc:97:8d:d1:db:d4:26:05:ae:
         c6:06:ff:6f:c1:67:74:0f:f3:3b:df:4d:d2:94:e7:2f:59:46:
         6d:88:79:00:2d:94:11:cb:e4:f7:5d:e6:c7:0f:d2:d4:d7:a1:
         d0:20:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:03 2025 by rpki-client