Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6cbb159-17f7-31c6-8ac6-69612cb05302.roa
File:                     b6cbb159-17f7-31c6-8ac6-69612cb05302.roa (raw, json)
Hash identifier:          4qvXUM9C818d0mU9euKWDmlx94rsrJ+EJ61RHWLS2Hc=
Subject key identifier:   1D:2C:EB:11:2B:63:4E:66:C1:80:F9:35:C6:31:D2:B5:28:B8:AC:FF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A90A0ABB72DBF831E7CD601C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6cbb159-17f7-31c6-8ac6-69612cb05302.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        130.174.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ab:b7:2d:bf:83:1e:7c:d6:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=18f8ddb3-91cd-44d2-93da-fdb0322b60b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:17:95:db:00:ef:94:fd:c1:f0:44:d3:42:
                    59:4b:0a:46:9a:bb:11:c9:81:4c:6a:2d:38:87:4f:
                    46:a4:0d:94:e2:8f:49:fd:35:9b:a5:17:8f:0e:ce:
                    da:5c:f7:e2:0f:83:c7:ce:b1:95:70:c0:61:30:40:
                    04:1b:e6:78:a0:b1:af:13:04:87:8c:b6:19:8f:d8:
                    09:05:54:d5:37:48:39:48:04:7c:5a:da:5d:fe:2c:
                    f7:55:7b:e9:e5:22:cf:f5:5b:2a:f6:63:c4:20:10:
                    c6:b0:a3:2d:c4:58:62:f6:e1:dc:c8:6d:61:00:75:
                    77:84:d4:31:ba:fd:89:c5:10:ff:24:44:63:90:5d:
                    0e:13:d0:b4:8e:98:cf:75:1a:0f:70:6a:30:20:c5:
                    cb:93:dc:78:42:b5:62:59:6e:c6:75:e1:a4:e1:73:
                    e6:04:81:60:bb:b3:7c:ba:7e:90:ff:d2:26:2a:a1:
                    63:0d:ff:94:a8:67:4a:dc:c1:5d:43:50:a6:68:5d:
                    e0:f6:6c:ae:6d:17:2b:bd:e5:54:20:e4:d7:4b:ef:
                    7b:9d:66:5a:92:d9:5c:a0:b3:31:a4:d6:fe:5b:17:
                    0b:a0:0c:d8:dd:e0:2b:74:ec:81:b6:eb:62:be:10:
                    2f:67:f2:e3:9e:64:8a:ef:c2:99:ee:ea:7e:fd:d3:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2C:EB:11:2B:63:4E:66:C1:80:F9:35:C6:31:D2:B5:28:B8:AC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b6cbb159-17f7-31c6-8ac6-69612cb05302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:da:f1:73:81:e0:3d:d9:2c:35:68:11:20:45:77:71:87:82:
         62:8b:d6:8e:e1:42:32:72:68:e9:20:b9:49:32:b0:e1:42:95:
         9b:23:7a:f0:da:c3:ef:78:09:43:54:10:6d:8e:aa:f7:1a:42:
         34:9e:0e:3b:09:4d:c9:52:09:93:4d:da:51:e2:d8:9e:28:14:
         5f:92:b9:1b:76:a5:df:d7:01:8b:13:68:a5:7c:e2:46:8a:48:
         d8:aa:07:ed:ce:46:d0:85:68:0a:8b:06:f0:46:33:7c:80:aa:
         f6:90:5e:36:2f:ba:8f:02:c6:2a:62:56:b7:e8:6e:c3:89:e6:
         9f:0a:53:c6:89:88:be:90:b7:83:63:b7:d8:ac:a2:ff:6f:80:
         73:8c:75:14:1f:f4:2d:9f:c5:69:dd:71:43:60:24:7e:03:5f:
         f9:1f:4b:d3:a3:46:c4:a2:00:7f:ad:1c:69:3a:3c:ac:68:25:
         8d:c7:54:e4:d1:dc:fd:29:3b:5b:55:3b:f3:af:e4:37:a7:56:
         85:1d:12:6a:e5:6b:75:ff:2d:7f:8e:7d:f4:20:92:55:0a:47:
         7a:08:f4:a0:60:77:d8:aa:8b:c2:6c:27:9a:d8:ef:76:a9:6c:
         f3:ba:f3:36:ce:53:c4:c8:96:7f:8f:33:81:e9:70:3d:10:a7:
         4c:d3:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:41:24 2025 by rpki-client