Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa
File:                     b780a0ee-0d24-319f-ad59-98019ee54e2c.roa (raw, json)
Hash identifier:          WqnZjKfjqbDlXwxgzejlA2XjgHpT35U3X6RAHQzhb4g=
Subject key identifier:   15:C7:89:82:D8:77:21:1A:45:27:EF:A4:38:3E:9A:E3:B4:95:29:6E
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584ADECBBD1413B275FE7E4EEE00
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        130.248.141.0/24 maxlen: 24
                          130.248.158.0/24 maxlen: 24
                          130.248.164.0/24 maxlen: 24
                          130.248.167.0/24 maxlen: 24
                          130.248.199.0/24 maxlen: 24
                          130.248.202.0/24 maxlen: 24
                          130.248.203.0/24 maxlen: 24
                          130.248.224.0/24 maxlen: 24
                          130.248.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:bd:14:13:b2:75:fe:7e:4e:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=61cbce83-be49-4abe-982f-cd5c1645d71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:eb:a2:67:43:3b:7c:a0:57:8a:43:4c:3e:
                    e9:fa:f7:75:fe:03:34:3b:7c:78:ab:e0:6d:73:c8:
                    90:ba:29:6c:fe:8f:63:57:69:24:18:bb:c3:e4:69:
                    ea:70:7c:58:b4:c8:1e:4b:34:fc:e0:a1:dd:e1:bc:
                    ae:5e:74:fa:78:4b:4b:64:ab:5a:45:7a:de:55:8a:
                    92:81:08:80:d0:de:53:1e:2a:3d:f3:7c:4d:75:01:
                    c2:be:f0:3c:de:9b:46:c1:7f:eb:aa:29:36:ef:a1:
                    12:d4:c3:35:47:a1:a7:49:61:75:ee:d5:86:19:93:
                    a7:ef:2e:8c:8c:c2:fe:c3:c2:1f:11:60:63:d4:b2:
                    f4:37:b5:8e:30:fc:5e:5f:65:45:3e:f6:06:49:43:
                    fe:e1:28:a7:69:e8:76:79:a9:5f:30:b8:c4:6d:fb:
                    ac:f6:21:58:f9:ad:8a:26:e5:b7:e1:6a:50:50:93:
                    bc:da:74:95:9a:05:36:15:48:f0:8b:7a:f5:3a:5a:
                    64:6b:18:35:c7:66:90:cc:bf:5c:0c:6d:3d:ff:9f:
                    cf:50:6b:48:04:d3:2f:e8:c6:ef:27:29:a0:2c:0c:
                    b3:aa:ea:cf:34:7a:ae:5c:23:fd:f9:66:cd:b9:a7:
                    8c:b9:fa:de:3b:6b:c9:55:fe:f3:19:43:84:38:b2:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C7:89:82:D8:77:21:1A:45:27:EF:A4:38:3E:9A:E3:B4:95:29:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.141.0/24
                  130.248.158.0/24
                  130.248.164.0/24
                  130.248.167.0/24
                  130.248.199.0/24
                  130.248.202.0/23
                  130.248.224.0/24
                  130.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:90:bb:ad:74:3e:8e:64:cd:63:2f:fb:cb:27:30:94:60:ba:
         af:1f:5b:b7:8e:36:ba:55:d0:2e:e1:3a:aa:71:58:47:f0:af:
         39:0d:d7:05:03:45:95:1c:db:35:43:6f:b6:ae:f2:6b:99:32:
         be:1c:98:06:28:3d:ba:2d:82:27:db:11:c7:e7:c9:92:ae:c1:
         ae:a9:ce:07:3b:1c:53:ad:cd:11:c1:1c:c0:07:93:0d:05:78:
         e7:3d:e1:71:50:34:8f:2e:a5:94:8b:91:b3:a0:6a:33:cc:31:
         4d:06:9a:3b:56:31:cd:dd:27:24:6f:f6:e0:c2:f0:18:b2:95:
         81:fb:98:a0:cf:01:4a:a5:98:42:84:90:a0:6c:5e:b9:51:0b:
         da:05:7d:df:0c:9b:c4:5a:d5:ca:53:0c:d3:5f:55:7a:58:01:
         99:3f:de:bb:49:ed:4b:35:99:03:8a:2a:23:2a:40:6e:98:c9:
         32:fd:d3:1f:7a:97:20:b9:aa:10:e9:cb:bf:fc:f2:aa:35:78:
         bb:01:61:6e:11:e5:b6:43:c5:13:65:f1:a2:09:ff:62:31:c7:
         65:0a:84:17:65:0f:36:f8:af:85:c3:14:01:47:a2:92:f7:25:
         42:7a:99:67:a1:fc:7e:7a:04:f8:c3:58:02:6c:b7:71:59:d1:
         1c:e5:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:02 2025 by rpki-client