Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa
File:                     9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa (raw, json)
Hash identifier:          U45vK+SFhhhP5tJpBAWWpcVKsqYgy8EU1V78NdxTq7s=
Subject key identifier:   32:1E:2E:B5:A2:80:05:DD:30:B5:19:C7:C0:75:8F:C1:E6:42:81:52
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584E7634D214464BCE931DF4AF40
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        130.248.166.0/24 maxlen: 24
                          130.248.177.0/24 maxlen: 24
                          130.248.178.0/24 maxlen: 24
                          130.248.216.0/24 maxlen: 24
                          130.248.217.0/24 maxlen: 24
                          130.248.223.0/24 maxlen: 24
                          130.248.227.0/24 maxlen: 24
                          130.248.228.0/24 maxlen: 24
                          130.248.231.0/24 maxlen: 24
                          130.248.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d2:14:46:4b:ce:93:1d:f4:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=9d4c58f3-a098-4336-9e79-589e39f1f3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:e8:82:27:88:bb:1e:95:16:82:c2:70:f0:
                    f9:84:57:f3:3c:21:b8:6a:99:f2:df:b0:09:8e:bd:
                    ae:7a:c3:1a:1e:28:6f:bb:53:77:b0:76:43:94:28:
                    82:af:e4:f1:a2:2c:96:b7:15:71:0d:11:78:e4:20:
                    a1:dc:02:b4:81:51:fe:24:31:5c:75:8c:5b:4c:c9:
                    0c:4f:27:a7:e9:5b:24:24:c3:7b:0c:df:94:af:7c:
                    d8:08:07:ae:e4:9a:15:a2:3b:64:20:ef:78:57:5e:
                    1e:70:4c:07:6a:b5:15:5b:ea:d3:11:cc:36:2b:62:
                    66:fd:39:e3:fc:40:76:8b:f6:85:d2:df:2e:c5:92:
                    28:ba:e0:59:6e:76:41:54:cd:3e:cc:b1:55:52:97:
                    a1:07:a6:5e:eb:b6:67:65:2c:20:43:5c:c1:8c:e4:
                    db:b2:01:46:b0:02:94:ee:0c:26:15:ea:fb:d8:d0:
                    e5:66:e7:6d:e9:8b:c9:98:af:07:2d:ae:6c:69:82:
                    d9:a7:b0:e3:48:5c:cc:c0:bf:8e:b5:92:14:66:b4:
                    4f:9e:e3:d0:8e:9e:2a:ec:19:a9:c1:6e:2e:d8:33:
                    e5:07:4c:09:29:de:b3:43:2d:ce:29:2a:f1:90:f3:
                    db:16:54:67:65:f3:3b:bb:c3:fe:7d:e8:76:94:f9:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1E:2E:B5:A2:80:05:DD:30:B5:19:C7:C0:75:8F:C1:E6:42:81:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.166.0/24
                  130.248.177.0-130.248.178.255
                  130.248.216.0/23
                  130.248.223.0/24
                  130.248.227.0-130.248.228.255
                  130.248.231.0/24
                  130.248.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ec:fa:51:89:49:9d:0d:82:da:02:24:76:2a:02:fd:4b:3c:
         ff:87:36:11:be:cd:c1:59:6c:01:62:c5:21:18:94:d2:2a:43:
         67:a1:4d:45:f2:db:19:b9:76:4f:6a:b6:f9:ac:16:7d:07:c8:
         6a:81:ec:c3:7f:63:2f:96:cd:d4:a3:6b:36:bd:d9:bf:05:41:
         ed:23:24:c9:4e:c0:1c:eb:fd:72:3e:e4:50:cc:4f:03:b5:5e:
         c1:80:8c:99:19:79:76:9e:79:6d:82:8a:f9:19:35:aa:b7:03:
         3d:ff:74:dc:da:a8:bf:0c:be:d7:72:cc:fb:fa:9d:af:4c:32:
         16:e6:06:7c:2d:8b:73:eb:6e:73:1c:5a:77:75:6c:81:a0:76:
         87:b0:6f:07:cd:62:2b:e2:a3:90:84:da:d3:3e:f2:ce:a0:9e:
         93:08:4a:00:25:f7:4f:98:4e:69:76:ab:fa:29:dd:ba:28:ec:
         90:0c:e0:fe:54:0b:a1:84:a1:d4:a2:3d:bf:69:f5:31:f8:82:
         c5:14:c7:1a:cd:0d:53:04:a8:51:a7:90:34:bb:1b:9a:fd:cf:
         aa:bd:be:3a:90:32:d4:f1:03:9f:96:f2:6a:c3:e1:f1:dc:ca:
         34:50:02:56:50:db:62:fc:03:56:3c:2c:46:ea:0a:a6:79:b6:
         64:e3:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:38 2026 by rpki-client