Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa
File:                     45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa (raw, json)
Hash identifier:          aZ0w6zEkWomOlTFye6xmn3d3pISXzItCI78j01Fb3Ds=
Subject key identifier:   71:16:28:40:BB:F7:FB:4D:7C:13:AA:05:27:29:37:9B:23:1F:6C:A2
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584E7634D2214CB5D0DFE8C28580
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.248.166.0/24 maxlen: 24
                          130.248.177.0/24 maxlen: 24
                          130.248.178.0/24 maxlen: 24
                          130.248.216.0/24 maxlen: 24
                          130.248.217.0/24 maxlen: 24
                          130.248.223.0/24 maxlen: 24
                          130.248.227.0/24 maxlen: 24
                          130.248.228.0/24 maxlen: 24
                          130.248.231.0/24 maxlen: 24
                          130.248.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d2:21:4c:b5:d0:df:e8:c2:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=c6b86923-4c85-4057-9a0c-50168e878313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:a1:a1:f4:88:2f:e6:f2:de:9d:d8:cd:0f:
                    45:f3:59:9f:ea:2e:42:8d:d8:67:9d:df:f3:5b:a9:
                    0a:b7:c3:e7:38:40:0e:db:57:4c:a3:86:28:82:82:
                    5d:17:3c:95:06:8b:d4:c0:68:95:c0:07:b1:93:39:
                    01:8b:36:b0:e3:3d:95:91:2b:4f:85:39:09:7e:39:
                    e4:71:81:9d:60:cf:0b:17:05:3d:00:be:83:4b:ce:
                    ae:22:98:73:21:83:b3:80:cd:fb:11:a6:06:aa:6a:
                    26:08:7e:82:9a:ca:83:fb:04:10:24:10:af:82:cf:
                    f5:b6:21:a3:a0:ea:30:20:93:01:ac:67:a9:44:53:
                    ad:07:22:85:3a:74:b8:24:58:fc:2f:b3:1a:c9:d7:
                    c0:59:3c:3b:5d:02:fb:9d:b5:1e:dd:17:59:8f:8b:
                    a2:3e:46:cb:0f:f9:62:9a:37:c7:f4:c1:f7:aa:a5:
                    2e:e3:4e:b0:db:33:6d:f2:8e:f2:6e:ca:b8:49:f2:
                    56:cb:3c:4c:44:cb:79:c2:2c:7b:1b:b7:fc:a4:f8:
                    b6:d8:c0:19:bc:fe:41:59:73:db:1e:7b:a7:40:c1:
                    98:b4:b6:c8:cd:1b:ec:27:2b:b6:af:1d:48:9a:8e:
                    0d:e0:3a:e2:3e:db:a8:ba:ec:60:09:15:5f:29:cb:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:28:40:BB:F7:FB:4D:7C:13:AA:05:27:29:37:9B:23:1F:6C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.166.0/24
                  130.248.177.0-130.248.178.255
                  130.248.216.0/23
                  130.248.223.0/24
                  130.248.227.0-130.248.228.255
                  130.248.231.0/24
                  130.248.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:bd:7f:68:35:42:c5:30:30:22:1a:c6:e4:6f:d8:53:2c:
         51:60:2b:d9:33:14:b0:32:bc:72:65:40:84:61:72:e4:85:09:
         89:5a:4b:21:45:a2:e3:8c:7b:2c:d9:44:23:38:3c:bc:10:74:
         c7:78:eb:be:3f:2c:53:90:f5:71:59:54:b3:51:a6:d3:97:e1:
         a8:68:1a:42:b0:9a:9e:7a:bb:26:e7:94:71:ce:30:b6:aa:5f:
         a6:50:f3:03:f1:43:3b:97:b2:2c:26:14:c7:49:73:23:ac:1f:
         ce:cc:a4:87:42:8b:cc:a2:7b:1a:fd:58:5f:44:89:d9:ff:33:
         cd:81:53:ea:ec:83:ee:a1:fb:61:e9:eb:79:c9:1c:41:42:d8:
         4d:d2:31:df:65:f0:7f:2f:27:6c:fe:ed:51:cb:bf:6e:18:b5:
         fe:7a:43:67:a4:bf:a3:66:94:6d:2d:22:8f:f2:ef:a2:f4:32:
         49:27:fb:44:3a:2e:eb:d9:18:ae:58:29:e6:c7:11:15:b9:84:
         da:14:10:32:cd:75:24:a9:c9:a4:cb:15:d7:08:df:66:12:ce:
         4d:82:57:c2:ff:92:89:2f:4c:2b:b7:51:f1:23:fa:86:5d:b9:
         f8:f8:97:99:bf:68:39:2c:2e:4a:77:a3:65:07:55:c2:c0:ac:
         e8:f4:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:35 2026 by rpki-client