Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bd4a944-fe21-38ab-b13b-36fbcd8939d1.roa
File:                     2bd4a944-fe21-38ab-b13b-36fbcd8939d1.roa (raw, json)
Hash identifier:          XMdvSvSTOu3vDQJkbdEipjj7MOVteGPG7VUKSfme+ow=
Subject key identifier:   1B:88:62:15:CD:35:31:FC:AC:63:D0:BC:33:0B:3B:B6:A9:72:E9:D1
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584AF25698E9CAD0049A95ACEA00
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bd4a944-fe21-38ab-b13b-36fbcd8939d1.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     6079
IP address blocks:        130.44.64.0/18 maxlen: 24
                          130.44.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:98:e9:ca:d0:04:9a:95:ac:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=1e09c4bc-f60c-4654-baa3-ec5e2cd94b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:9f:3b:6d:ae:1c:46:7a:7e:26:79:80:4d:
                    ab:eb:4e:55:56:67:89:3b:13:e6:65:ae:05:96:6d:
                    86:ef:d3:6b:c3:05:e2:12:63:c5:6b:58:87:76:e2:
                    27:07:e0:35:36:ff:1f:28:04:48:d8:d2:f5:3a:c9:
                    74:f1:f9:5a:84:41:5f:af:43:59:ec:dd:1c:52:62:
                    1a:84:bc:18:db:f2:d3:9c:32:ad:c4:f0:3a:f2:17:
                    e2:e1:47:f9:f5:91:87:b1:43:14:d9:7a:96:f7:dc:
                    27:e4:02:32:2a:a4:94:45:18:3b:26:14:26:4d:e1:
                    dd:ee:97:98:8c:d0:2b:e2:64:bb:39:85:b8:c2:d9:
                    55:2b:c9:a1:4c:0e:09:c1:24:ed:e5:1b:90:5f:c0:
                    d6:54:e8:ce:47:1f:1f:b8:2d:5c:4c:2b:1a:cd:ce:
                    96:d5:a8:b0:1f:d2:6a:6d:94:30:14:13:30:a9:3d:
                    97:39:17:61:d5:47:cb:47:78:8c:51:78:f5:d0:a7:
                    a5:5d:bd:6c:9e:d5:34:e3:01:fa:68:22:01:7c:29:
                    3d:6d:df:8c:a4:d1:84:62:1e:bd:71:61:02:65:54:
                    27:6f:b7:58:0d:77:3e:2a:db:ef:0a:63:fd:cb:bc:
                    fa:63:92:21:b3:de:44:2c:db:a8:5a:fd:96:42:4d:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:62:15:CD:35:31:FC:AC:63:D0:BC:33:0B:3B:B6:A9:72:E9:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bd4a944-fe21-38ab-b13b-36fbcd8939d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.44.64.0-130.44.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:d2:e0:1f:86:bd:c6:4c:31:d4:e6:44:ab:74:e9:f6:09:
         dd:4d:e9:05:15:28:3a:7c:a2:cb:47:30:36:05:8f:bf:ab:57:
         c3:ee:37:36:84:ea:f0:5f:62:bf:08:0f:0b:ee:4e:3c:b9:89:
         6b:95:65:b6:04:2c:1e:6a:66:48:c5:a5:42:9d:0f:8d:b1:ab:
         6c:26:2f:1d:ef:a4:4d:90:8a:78:60:f2:21:77:c5:f8:78:25:
         dd:f8:8e:34:2b:ab:ea:90:12:5d:b5:79:a9:65:35:36:89:e1:
         1e:22:58:cc:fd:95:15:27:e4:c2:e6:74:cb:9e:c8:b6:61:40:
         a9:d3:51:46:ee:78:52:16:e1:59:72:9d:a6:97:5d:23:c8:b4:
         16:90:c4:8c:12:7c:10:a2:f7:e8:9b:3f:f6:c1:7c:67:a2:67:
         21:8d:a4:63:7d:50:6c:df:5c:f9:ae:f2:e5:4d:e1:38:d2:15:
         ad:b6:17:66:89:de:ab:0f:dd:4b:88:80:74:9d:75:48:b8:9e:
         b6:98:4b:0f:a7:f7:1a:7f:bd:e7:3f:a8:d8:de:1a:fb:0b:7b:
         31:22:45:ee:a8:9e:ac:b1:4a:b4:d6:8c:37:37:79:08:da:1c:
         90:f1:ab:e5:27:24:6c:c3:c6:6a:c0:5a:37:48:93:da:c1:dd:
         21:86:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:00 2025 by rpki-client