Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/722de295-886e-3bd9-9689-25f93d52f388.roa
File:                     722de295-886e-3bd9-9689-25f93d52f388.roa (raw, json)
Hash identifier:          zqJqyWSlJ2LldYOEXCefg49BXABUMEtCsKxqYokozGE=
Subject key identifier:   59:EB:C0:EF:00:28:D7:6A:BE:60:A5:29:CE:4E:A2:23:8E:F6:27:B6
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584EB2B1C06E9B0AC18993187580
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/722de295-886e-3bd9-9689-25f93d52f388.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     14618
IP address blocks:        130.248.128.0/24 maxlen: 24
                          130.248.136.0/24 maxlen: 24
                          130.248.137.0/24 maxlen: 24
                          130.248.139.0/24 maxlen: 24
                          130.248.182.0/24 maxlen: 24
                          130.248.188.0/24 maxlen: 24
                          130.248.209.0/24 maxlen: 24
                          130.248.211.0/24 maxlen: 24
                          130.248.214.0/24 maxlen: 24
                          130.248.215.0/24 maxlen: 24
                          130.248.234.0/24 maxlen: 24
                          130.248.236.0/24 maxlen: 24
                          130.248.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c0:6e:9b:0a:c1:89:93:18:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=84452c30-f262-4649-945d-a227390b82e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:db:9e:86:2c:bc:bd:be:c0:da:eb:c0:1a:
                    92:33:90:66:59:8c:3b:9b:91:9f:03:77:42:86:53:
                    07:9f:ee:fc:98:5a:6b:bf:1d:ea:50:4a:bf:ff:a9:
                    57:e6:a1:7a:48:8b:db:64:82:87:19:31:d7:10:fe:
                    bb:ee:31:7c:cb:23:1c:7a:1d:3e:1f:b5:d1:e4:8c:
                    e2:3e:3a:9c:f7:29:05:0e:26:a3:ad:ca:cc:5b:08:
                    d6:ad:c1:86:8a:a7:1f:5c:0c:48:f4:f4:10:e0:7f:
                    4d:c6:83:df:09:b0:b4:40:67:22:68:f8:71:f6:6c:
                    f0:7d:92:78:a3:54:6a:a5:38:99:e4:33:a5:59:a4:
                    8b:55:0f:1e:de:37:e9:0b:1c:60:3f:66:06:56:a2:
                    e0:ff:2f:d4:e3:68:50:f2:fb:78:1d:84:20:6f:70:
                    37:aa:3b:be:c9:75:27:c2:ae:3d:fe:b0:68:93:af:
                    02:2d:8c:02:f5:60:53:d0:d0:14:c5:87:8b:e2:5c:
                    68:13:af:58:1b:ed:e9:f4:28:0e:07:da:4f:1d:f5:
                    7f:6d:03:22:54:3f:55:73:6a:de:3c:76:b4:f4:ff:
                    87:5b:17:a4:ac:13:4f:75:2e:18:5e:57:4f:d0:c4:
                    6b:ac:4e:f9:41:60:e1:08:ff:23:79:a5:a8:24:56:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EB:C0:EF:00:28:D7:6A:BE:60:A5:29:CE:4E:A2:23:8E:F6:27:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/722de295-886e-3bd9-9689-25f93d52f388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.128.0/24
                  130.248.136.0/23
                  130.248.139.0/24
                  130.248.182.0/24
                  130.248.188.0/24
                  130.248.209.0/24
                  130.248.211.0/24
                  130.248.214.0/23
                  130.248.234.0/24
                  130.248.236.0/24
                  130.248.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:03:64:f8:99:a7:cc:ca:0e:d7:a4:5d:89:32:77:82:3f:a5:
         01:0a:b9:c4:85:72:e4:64:e3:9d:ea:05:d5:68:97:c0:fa:c7:
         9d:65:90:27:5f:d8:09:f5:2a:b0:5a:70:57:3a:e2:a6:07:b1:
         2f:25:4c:60:2e:fb:6e:79:64:4d:43:fd:6c:5a:e6:a9:72:41:
         6a:56:1e:a1:c1:9d:1c:26:a9:fe:de:22:f5:b2:a4:de:7f:50:
         06:1a:8e:80:b9:0e:c4:1d:27:cd:cd:b5:0c:09:1f:4c:c0:87:
         3b:d3:ab:63:35:f5:99:50:5d:7a:89:d7:3b:0d:47:cb:ea:c1:
         96:d7:06:4c:d6:da:62:c8:59:65:7b:e1:93:d1:11:a3:13:0c:
         16:40:68:1d:c9:5f:27:1d:88:33:53:18:c4:7c:00:9a:85:dc:
         62:f9:00:b8:b4:bb:22:33:85:f9:ad:58:bc:66:21:75:f2:57:
         96:cf:81:9c:e6:67:84:c6:f6:09:1b:06:e9:ad:38:77:7f:d5:
         9c:5b:78:ef:14:4d:77:fc:7e:8a:b5:4d:43:7a:c3:ff:9e:e2:
         74:b0:a7:71:4c:21:69:aa:e4:36:85:de:ad:18:1c:d8:c3:5c:
         2f:cc:10:4f:67:06:2f:fc:01:33:b8:f5:8b:c8:a3:e7:4f:35:
         83:a4:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:18 2026 by rpki-client