Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa
File:                     2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa (raw, json)
Hash identifier:          7eaJdS2+jhzARxwhHIkBsMoBNrgEnCGNXNiq61swIvE=
Subject key identifier:   6E:72:8C:9C:B3:4C:7B:A7:34:1F:28:EA:82:CC:07:27:91:21:D9:94
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619F59BB6473EA9EB0DF540
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     3360
IP address blocks:        130.174.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f5:9b:b6:47:3e:a9:eb:0d:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=2ac1d820-f687-4bed-906e-3ac1bed0debd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:d7:35:08:c2:86:61:da:30:47:90:12:69:
                    e6:55:53:49:ec:d6:e7:21:23:3e:7f:11:64:cb:95:
                    e8:c0:75:8e:dd:7d:fa:ee:48:cd:3c:0f:11:a1:a4:
                    a3:6e:d6:04:fb:d8:19:eb:90:f9:22:d7:ed:b8:43:
                    26:91:fb:5a:a6:74:48:74:68:17:0c:24:c6:75:da:
                    18:7f:f3:db:d8:a1:d3:fa:da:2e:fc:12:bd:84:60:
                    ec:fa:41:03:71:5c:5e:be:1b:14:8b:c0:4a:98:3a:
                    32:01:6c:22:d1:ad:7c:21:21:40:58:0a:fe:07:35:
                    46:89:cf:ea:1f:38:0f:89:38:66:7a:f8:42:8d:6f:
                    68:d9:ae:42:67:9f:81:47:9e:31:0a:f4:1c:d3:36:
                    e4:fc:15:eb:f7:65:cc:9c:1b:8d:9e:e4:b8:95:f1:
                    bb:c6:5d:e4:82:cf:da:c7:94:d2:61:af:89:04:a2:
                    af:28:5e:b8:be:2a:ac:31:dd:a5:d1:1f:04:b4:e4:
                    77:4a:be:4a:73:29:0f:b5:6c:fd:01:bd:58:49:27:
                    ca:0a:f8:0c:fa:be:65:f9:5c:4c:cd:7d:cc:b4:6d:
                    85:59:27:f9:9c:29:69:72:a6:86:c4:db:12:0b:a0:
                    70:b8:b9:a4:bd:36:b6:fe:84:e9:64:97:1d:33:c2:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:72:8C:9C:B3:4C:7B:A7:34:1F:28:EA:82:CC:07:27:91:21:D9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:36:1b:e7:76:0a:41:2f:cb:34:e3:e6:f4:7d:4c:ab:b5:
         87:98:4e:a9:3e:e7:36:d6:32:e8:3e:9f:4d:de:26:d1:c6:15:
         6b:57:2f:7a:f7:a3:2c:39:f0:2b:dc:83:41:67:5c:fd:a3:fa:
         e6:83:69:c5:8d:19:55:15:52:d6:15:7a:f1:d7:51:54:d1:61:
         4d:84:19:5a:ce:88:7e:1e:14:68:72:89:25:5a:63:43:9b:c1:
         f8:c5:4c:43:32:1e:26:84:df:52:de:99:02:45:cc:6f:ec:f2:
         0b:7f:77:be:8a:d1:7b:7a:0f:58:6f:e3:cc:47:04:70:04:16:
         63:f7:b2:3c:e4:d6:39:d1:5a:8e:f3:ae:17:30:0c:0c:62:b3:
         c7:b1:62:d0:69:b0:b6:51:8c:61:39:b2:79:52:a9:d8:a4:97:
         7d:5f:9d:0c:98:4b:e9:14:05:e6:1a:a5:ae:d0:39:61:ba:88:
         a1:86:7a:a7:87:11:c3:ff:60:2c:69:69:8e:a8:cc:1d:88:c3:
         cb:cf:20:59:63:67:74:49:03:67:98:37:8b:6f:be:3c:6c:69:
         3a:b9:e3:41:35:16:f4:74:70:f6:57:ad:c9:d2:c9:54:02:3d:
         e4:63:16:96:04:98:9c:8e:6f:db:52:09:54:01:b2:fd:a5:09:
         b3:c2:59:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGfWbtkc+qesN9UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk
MmFjMWQ4MjAtZjY4Ny00YmVkLTkwNmUtM2FjMWJlZDBkZWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9bXNQjChmHaMEeQEmnmVVNJ7NbnISM+fxFk
y5XowHWO3X367kjNPA8RoaSjbtYE+9gZ65D5ItftuEMmkftapnRIdGgXDCTGddoY
f/Pb2KHT+tou/BK9hGDs+kEDcVxevhsUi8BKmDoyAWwi0a18ISFAWAr+BzVGic/q
HzgPiThmevhCjW9o2a5CZ5+BR54xCvQc0zbk/BXr92XMnBuNnuS4lfG7xl3kgs/a
x5TSYa+JBKKvKF64viqsMd2l0R8EtOR3Sr5KcykPtWz9Ab1YSSfKCvgM+r5l+VxM
zX3MtG2FWSf5nClpcqaGxNsSC6BwuLmkvTa2/oTpZJcdM8KfbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG5yjJyzTHunNB8o6oLMByeRIdmUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQ4OGM0MTAtMzRjMi0z
ODZkLWI2ZDYtMGYyZThiZjNlNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq49MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7MNhvndgpBL8s04+b0fUyrtYeYTqk+5zbWMug+n03eJtHGFWtXL3r3
oyw58Cvcg0FnXP2j+uaDacWNGVUVUtYVevHXUVTRYU2EGVrOiH4eFGhyiSVaY0Ob
wfjFTEMyHiaE31LemQJFzG/s8gt/d76K0Xt6D1hv48xHBHAEFmP3sjzk1jnRWo7z
rhcwDAxis8exYtBpsLZRjGE5snlSqdikl31fnQyYS+kUBeYapa7QOWG6iKGGeqeH
EcP/YCxpaY6ozB2Iw8vPIFljZ3RJA2eYN4tvvjxsaTq540E1FvR0cPZXrcnSyVQC
PeRjFpYEmJyOb9tSCVQBsv2lCbPCWQQ=
-----END CERTIFICATE-----
Generated at Tue Jun 30 07:02:23 2026 by rpki-client