Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa
File:                     7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa (raw, json)
Hash identifier:          m71xsk4mZJIaNgvNRW7yyhT5ZNFOJsye+qK+BUh6VQI=
Subject key identifier:   AD:D1:BF:C5:DE:AC:47:18:60:0F:C1:80:E1:51:0D:27:30:AA:61:8D
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584EB2B1C07C1C677A52EF969FA0
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     16509
IP address blocks:        130.248.128.0/24 maxlen: 24
                          130.248.136.0/24 maxlen: 24
                          130.248.137.0/24 maxlen: 24
                          130.248.139.0/24 maxlen: 24
                          130.248.182.0/24 maxlen: 24
                          130.248.188.0/24 maxlen: 24
                          130.248.209.0/24 maxlen: 24
                          130.248.211.0/24 maxlen: 24
                          130.248.214.0/24 maxlen: 24
                          130.248.215.0/24 maxlen: 24
                          130.248.234.0/24 maxlen: 24
                          130.248.236.0/24 maxlen: 24
                          130.248.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c0:7c:1c:67:7a:52:ef:96:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=e9d353e1-c5df-46ac-9c3b-5ddb8758d7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:e5:99:4a:2a:43:51:5c:eb:41:18:58:20:
                    b0:d5:12:fb:a4:7d:76:7b:0a:c3:06:ad:3a:01:94:
                    a3:05:d1:6d:6e:bc:aa:95:6b:dc:cb:29:08:f3:ad:
                    be:40:fe:77:b4:c8:d7:a2:82:15:8a:58:8c:39:c9:
                    de:9c:de:89:ab:3c:c2:2e:78:95:7c:0c:39:dd:d5:
                    89:05:1d:7c:57:46:9b:dd:c3:72:8d:d5:96:c9:50:
                    f3:8e:62:49:7e:0b:37:ea:0e:31:59:6d:ca:46:cb:
                    6b:64:28:90:3b:7e:0a:c7:c7:eb:14:de:4d:1b:7b:
                    6f:9c:90:8b:03:07:d9:74:f9:00:19:97:99:0a:8c:
                    62:0c:2e:3e:ee:9a:96:7a:97:0e:e2:75:24:70:02:
                    52:bf:3d:25:08:da:f1:d9:1c:27:b4:f2:a8:fd:dd:
                    be:7b:67:f8:c6:24:46:07:c0:9f:b9:39:65:c1:98:
                    e6:5e:de:18:1a:53:6c:50:db:68:ce:6f:10:86:41:
                    f9:98:ba:fc:90:78:25:85:9f:24:3e:80:77:3f:2f:
                    43:f2:e3:e2:1f:78:89:03:18:cb:87:b0:8f:ee:3c:
                    e9:77:22:34:18:11:49:9c:09:5c:22:2b:06:31:07:
                    72:c2:71:b5:b4:46:35:be:e3:3c:94:56:d7:60:04:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D1:BF:C5:DE:AC:47:18:60:0F:C1:80:E1:51:0D:27:30:AA:61:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.128.0/24
                  130.248.136.0/23
                  130.248.139.0/24
                  130.248.182.0/24
                  130.248.188.0/24
                  130.248.209.0/24
                  130.248.211.0/24
                  130.248.214.0/23
                  130.248.234.0/24
                  130.248.236.0/24
                  130.248.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ba:f5:05:7a:6f:1f:a6:11:e0:e7:25:1b:5b:9b:60:96:fd:
         51:c0:fd:95:81:54:91:76:b5:c2:4c:47:8b:32:f0:a0:c2:2e:
         12:4e:0c:52:e9:3f:fe:36:51:65:21:e3:69:fa:e8:38:c3:aa:
         fe:d9:cc:3d:bf:ce:06:59:56:80:71:2a:e6:ce:6c:bf:14:44:
         63:c5:ab:73:57:69:3a:3e:98:f2:22:cd:a0:6e:b8:8e:87:68:
         6a:22:75:87:00:c4:e8:f8:78:5b:74:4d:b6:37:a0:9a:6a:6d:
         5f:52:47:70:48:6f:dd:9c:73:ad:e5:95:44:32:e6:f3:3d:95:
         16:dd:a6:bf:ce:82:b4:8e:88:10:6b:83:5c:32:9b:f5:e4:31:
         6f:e7:fc:6c:a9:4a:8d:17:55:6d:bc:7e:43:a6:07:16:69:5e:
         e0:b3:87:ba:f3:06:54:53:fc:6a:90:e8:5d:cc:90:c4:f4:65:
         7f:94:0b:f6:9f:63:33:d5:81:48:ed:6d:00:d6:df:4a:a2:a2:
         07:49:43:23:06:8b:c2:41:18:6d:c5:f2:72:c3:38:c7:98:2a:
         4d:74:3f:95:67:6f:3b:43:97:8a:17:fc:d1:0e:97:2d:2d:10:
         00:3b:25:65:89:cf:b7:30:37:49:8a:8a:1c:f7:21:1d:43:30:
         c8:d0:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:10:57 2026 by rpki-client