Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2801e688-4d9d-3c40-acd7-497ab7904fd5.roa
File:                     2801e688-4d9d-3c40-acd7-497ab7904fd5.roa (raw, json)
Hash identifier:          EdjmdKF+Oh41U8A6TJiDPJRxlQECiA3xw3QNOFU3vGE=
Subject key identifier:   7D:FF:9B:74:2C:E9:1D:D8:3D:BE:2C:FC:2C:BD:90:06:3B:B9:04:1D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B4A8036091A2F730C97A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2801e688-4d9d-3c40-acd7-497ab7904fd5.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     202
IP address blocks:        130.174.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a8:03:60:91:a2:f7:30:c9:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=478ad902-35b0-4bba-8d76-0c9c113defb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:23:94:c9:fa:f4:10:6a:ba:39:66:02:c3:
                    8a:f7:29:c9:54:00:77:14:df:5e:c3:57:c5:b7:8f:
                    1c:62:10:56:79:c0:ab:1f:3e:ec:cf:16:a1:9b:93:
                    17:ae:06:f8:e3:b3:ed:f7:29:04:a9:e8:21:7b:39:
                    da:fa:f7:f0:80:74:29:fb:d4:36:a4:26:4b:9b:f3:
                    8f:56:31:1a:e4:60:a1:8c:66:55:33:9c:be:9e:a4:
                    51:5a:d3:f1:ab:75:6e:c3:37:47:f8:05:5e:c3:e9:
                    c9:0a:ac:56:20:cf:d9:ca:b7:bf:3c:e1:90:2d:ea:
                    36:4d:87:79:d6:18:4b:47:00:79:0a:49:3b:70:35:
                    6b:06:af:b4:e8:2c:64:82:0d:3b:55:20:b5:53:c5:
                    d2:22:ba:25:c8:1b:36:e3:32:b0:c7:cf:4a:23:cc:
                    e0:a4:85:91:81:20:57:e3:5b:b1:eb:f4:d7:e1:b4:
                    03:21:5a:ef:f8:4e:33:e4:f9:96:ab:3e:f6:ec:a5:
                    b4:49:2c:33:d1:ef:c0:24:30:0d:01:6d:1c:c4:c4:
                    56:4d:da:ef:a9:f6:5b:2a:38:82:cd:a6:63:43:a0:
                    de:00:e6:99:78:b5:e0:96:0c:3e:a4:cb:c9:22:54:
                    cf:ea:91:e1:ed:6a:a1:5d:a3:ad:d9:f3:02:18:20:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FF:9B:74:2C:E9:1D:D8:3D:BE:2C:FC:2C:BD:90:06:3B:B9:04:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2801e688-4d9d-3c40-acd7-497ab7904fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:82:27:2f:9c:23:f5:82:70:98:1b:a2:b2:01:78:80:55:8c:
         d4:cf:6a:0e:d3:0d:c0:c6:94:01:29:52:f0:c2:0a:52:91:90:
         fc:22:cc:c7:0d:b3:a5:9c:50:40:9c:63:d2:9e:f6:ab:5d:af:
         ce:cf:9e:17:99:ae:94:d7:e8:1a:82:9c:59:bc:eb:16:0c:f3:
         b1:8d:30:87:0d:98:98:42:b3:ce:6a:06:f8:1b:59:f7:8b:2b:
         96:df:02:d2:18:45:ff:9f:9e:1a:fe:14:20:8b:42:48:0b:38:
         06:71:9a:c7:64:cb:1c:a6:f7:cf:14:14:0b:e7:a5:f8:07:ec:
         49:5e:d0:27:66:4b:25:87:a7:44:6f:5c:02:f0:9b:a2:99:58:
         a6:23:17:4a:92:3f:81:f4:9c:71:50:29:2c:d9:17:d3:74:9e:
         26:e9:df:cc:85:d3:a0:9d:c6:b4:c8:94:50:cb:5d:6a:58:f9:
         44:75:9f:b6:f5:bb:ad:88:13:6d:e8:78:eb:a3:1b:86:dc:6f:
         cc:5e:38:bd:cf:e9:e9:b3:b7:ef:3f:66:8b:c6:f7:75:55:0e:
         60:2c:90:43:ad:d9:71:0c:d7:fa:95:4f:fc:2d:de:b8:9a:8d:
         c6:9a:0e:20:05:38:e6:fc:46:76:b1:7a:d2:a3:59:1c:2d:7d:
         f9:df:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:48:12 2026 by rpki-client