Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa
File:                     45b4cca8-304a-3829-8684-121363defde7.roa (raw, json)
Hash identifier:          IlTJ/RFBl1oFzh9ngJEuLJLYImh0RSaxOwbvt9gm8KM=
Subject key identifier:   39:AD:F1:04:CD:AE:CF:EC:F3:5F:CE:16:2E:75:CB:4A:38:E0:5D:A4
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584F03A78BBB758214B3467FFA40
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        130.248.141.0/24 maxlen: 24
                          130.248.158.0/24 maxlen: 24
                          130.248.164.0/24 maxlen: 24
                          130.248.167.0/24 maxlen: 24
                          130.248.199.0/24 maxlen: 24
                          130.248.202.0/24 maxlen: 24
                          130.248.203.0/24 maxlen: 24
                          130.248.224.0/24 maxlen: 24
                          130.248.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8b:bb:75:82:14:b3:46:7f:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=404c05a7-ce58-420a-8f57-90a0e550d652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:fa:5c:d5:c5:71:8b:fb:ff:5f:d2:d4:d9:
                    17:0d:c9:37:33:69:12:f4:36:ae:b4:52:4e:44:61:
                    03:37:16:70:23:81:af:ce:57:81:e7:92:9e:23:64:
                    1a:a0:10:0f:05:f3:e7:de:68:a0:43:19:5c:f5:1a:
                    ce:f4:77:bc:ca:b4:9f:ce:60:b7:7f:30:76:b2:6a:
                    fd:fd:e4:65:8d:28:5c:69:1d:56:03:f8:33:43:bc:
                    e1:c0:15:68:9f:a1:57:da:af:a2:bd:e0:04:33:13:
                    d5:d6:cc:a8:6d:68:8b:c7:65:31:57:18:99:9d:43:
                    50:e1:0d:86:13:11:b1:57:ad:84:a9:ab:d0:85:6d:
                    e5:ba:0b:26:ca:b7:82:b5:58:49:dd:43:42:9e:5a:
                    2e:5e:ba:4f:81:39:52:8b:47:7e:de:ce:ac:9d:cd:
                    b1:39:90:07:93:3c:30:73:e7:37:da:59:fc:a3:bb:
                    f5:71:26:d9:5e:a7:66:53:51:59:d5:d2:15:a0:6a:
                    45:37:01:a0:65:64:e3:fd:cf:bd:34:23:66:d3:92:
                    92:cd:6f:e3:47:64:16:a3:db:29:10:34:55:ba:c5:
                    ce:a6:d2:e9:24:89:1e:08:0b:0c:e7:c0:46:3b:d4:
                    6f:60:75:9f:47:f8:54:b9:86:ee:9d:4f:6e:ee:0b:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:F1:04:CD:AE:CF:EC:F3:5F:CE:16:2E:75:CB:4A:38:E0:5D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.141.0/24
                  130.248.158.0/24
                  130.248.164.0/24
                  130.248.167.0/24
                  130.248.199.0/24
                  130.248.202.0/23
                  130.248.224.0/24
                  130.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:cc:d3:ae:54:b8:86:82:f5:fb:ff:08:f6:ed:33:ec:06:
         f7:ff:57:77:df:f3:6f:89:8f:6d:8c:52:c8:0b:0d:34:4f:d6:
         18:b8:74:29:be:db:4b:33:c7:01:95:05:f1:9a:d2:e9:5e:8d:
         08:fa:28:bc:f3:34:b2:27:44:08:82:87:88:17:66:ea:e3:d8:
         7c:8f:fb:bb:2d:19:7b:9f:06:82:86:b3:cf:9d:6d:f4:ea:c8:
         17:14:ff:37:a6:6d:ac:62:23:95:21:f9:fe:6f:77:be:bf:08:
         ae:25:21:17:3b:1b:63:57:e8:f2:20:01:f1:d5:f6:20:a9:e0:
         f2:60:76:c7:6e:51:31:f7:c5:80:77:e5:b1:47:59:72:3f:b0:
         91:8c:e5:c6:e9:d9:31:4b:47:f2:93:20:e3:16:64:e2:b1:75:
         cd:a8:be:f3:e8:dc:79:d6:7b:f5:c8:cf:01:60:98:0b:b1:34:
         33:ac:40:82:4b:a8:85:65:99:25:84:ae:b5:29:2e:94:9b:dd:
         6e:20:fa:67:9f:d7:5b:b1:ce:12:ef:67:b6:02:dd:b9:56:ba:
         f6:b4:68:37:c4:6a:10:18:c7:b3:c9:78:6b:16:5b:c9:7b:d4:
         84:bf:58:34:23:7d:3a:e1:a3:6a:92:fe:aa:2f:8a:88:e8:91:
         59:e4:09:64
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE8Dp4u7dYIUs0Z/+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NDA0YzA1YTctY2U1OC00MjBhLThmNTctOTBhMGU1NTBkNjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp/6XNXFcYv7/1/S1NkXDck3M2kS9DautFJO
RGEDNxZwI4GvzleB55KeI2QaoBAPBfPn3migQxlc9RrO9He8yrSfzmC3fzB2smr9
/eRljShcaR1WA/gzQ7zhwBVon6FX2q+iveAEMxPV1syobWiLx2UxVxiZnUNQ4Q2G
ExGxV62EqavQhW3lugsmyreCtVhJ3UNCnlouXrpPgTlSi0d+3s6snc2xOZAHkzww
c+c32ln8o7v1cSbZXqdmU1FZ1dIVoGpFNwGgZWTj/c+9NCNm05KSzW/jR2QWo9sp
EDRVusXOptLpJIkeCAsM58BGO9RvYHWfR/hUuYbunU9u7guNIQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFDmt8QTNrs/s81/OFi51y0o44F2kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvNDViNGNjYTgtMzA0YS0z
ODI5LTg2ODQtMTIxMzYzZGVmZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAgviNAwQA
gvieAwQAgvikAwQAgvinAwQAgvjHAwQBgvjKAwQAgvjgAwQAgvjrMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AD6qzNOuVLiGgvX7/wj27TPsBvf/V3ff82+Jj22MUsgLDTRP1hi4dCm+20szxwGV
BfGa0ulejQj6KLzzNLInRAiCh4gXZurj2HyP+7stGXufBoKGs8+dbfTqyBcU/zem
baxiI5Uh+f5vd76/CK4lIRc7G2NX6PIgAfHV9iCp4PJgdsduUTH3xYB35bFHWXI/
sJGM5cbp2TFLR/KTIOMWZOKxdc2ovvPo3HnWe/XIzwFgmAuxNDOsQIJLqIVlmSWE
rrUpLpSb3W4g+mef11uxzhLvZ7YC3blWuva0aDfEahAYx7PJeGsWW8l71IS/WDQj
fTrho2qS/qoviojokVnkCWQ=
-----END CERTIFICATE-----
Generated at Thu Oct 8 02:13:53 2026 by rpki-client