Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/323fc90b-6288-332d-bda2-64cfa2241813.roa
File:                     323fc90b-6288-332d-bda2-64cfa2241813.roa (raw, json)
Hash identifier:          doqvKOLGnEh62Aad6EbVb7HsNvZMJJ15j3xE31AaBPs=
Subject key identifier:   43:DF:3E:09:9E:10:29:6C:43:47:8B:EA:B2:4D:F3:F2:93:F7:A8:32
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619FB72DCE203A903048B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/323fc90b-6288-332d-bda2-64cfa2241813.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     3360
IP address blocks:        130.174.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:fb:72:dc:e2:03:a9:03:04:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=d1aa8727-7da1-41d0-ab77-4751c3e2276b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:01:d1:ec:c4:fd:1a:ae:bd:1a:3b:f9:50:
                    48:f2:bf:1c:c6:cc:d7:bb:de:90:38:6f:6b:6c:9c:
                    b8:68:10:c6:41:a4:37:fa:23:c2:25:ce:d6:7e:dc:
                    fb:76:b4:6e:d0:8a:98:f0:50:5e:c5:2f:45:41:00:
                    c9:b0:da:00:a8:b2:26:4c:fa:ca:e6:03:fb:dc:f3:
                    a2:46:8b:74:6a:db:ce:db:2c:2b:e4:49:45:62:72:
                    0d:af:25:7e:72:59:90:3e:0d:e4:71:87:a7:33:a3:
                    f5:e0:45:74:42:35:18:ba:4a:71:56:4c:87:17:ec:
                    1a:b1:43:95:a0:73:17:a6:b0:34:9a:47:ed:3e:50:
                    03:ed:b6:b3:4f:7e:ca:0c:82:b3:44:32:8b:d9:8c:
                    5e:92:46:29:1f:77:b0:07:61:d9:9e:b2:c7:8a:87:
                    cd:6a:5a:08:f0:73:cd:66:cd:e5:27:8e:c9:41:39:
                    65:4d:f3:5e:10:5e:3b:20:aa:f8:3b:2b:b0:61:df:
                    18:c9:e5:b6:d9:f7:1f:51:0f:89:b4:38:b6:50:91:
                    36:91:80:49:dc:a9:7c:24:6c:c7:e9:1d:bc:77:1f:
                    f1:20:4d:80:44:1f:c5:f6:77:32:a3:86:fa:cd:fc:
                    08:93:95:eb:56:42:55:36:66:3a:be:3b:69:e2:8a:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DF:3E:09:9E:10:29:6C:43:47:8B:EA:B2:4D:F3:F2:93:F7:A8:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/323fc90b-6288-332d-bda2-64cfa2241813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:71:49:99:ad:34:b1:3a:0d:20:ae:cf:be:77:28:8c:74:
         0a:77:0b:62:4a:34:fe:7f:3c:8a:8a:3b:cc:0d:4b:36:43:04:
         0a:29:a0:e1:2f:fb:a4:c1:dd:52:cf:33:29:50:93:05:72:cb:
         13:47:e2:ef:6a:b4:b7:9a:24:51:3d:2e:7c:e4:a5:06:4a:cd:
         85:b3:72:16:b8:47:36:7c:fb:a9:b0:ba:68:13:5a:38:2a:0f:
         71:94:43:d1:09:cc:80:eb:ce:b9:e9:f0:43:16:7a:e1:e7:c4:
         33:c1:b1:8d:18:0e:e0:44:07:99:d1:48:cd:90:79:55:51:07:
         f4:23:ac:5a:36:f0:e5:75:ea:47:32:3f:e6:89:35:68:00:68:
         c1:92:ee:15:e2:fd:a9:2b:75:3b:03:c3:76:d9:e4:b9:94:ac:
         04:a2:69:23:b7:3d:df:25:90:8f:ef:28:e5:c5:60:5c:a2:d0:
         fd:43:72:fb:d0:7d:4b:cb:e0:83:4e:74:25:5b:02:fe:1b:8a:
         7d:da:07:ff:11:d4:9b:ed:84:b3:3e:51:ae:d2:59:98:51:3e:
         68:8e:28:53:46:6c:30:84:62:e5:9f:12:a1:e9:10:03:e3:62:
         ec:05:5e:94:8f:d5:9d:06:e8:fb:82:0b:2f:86:aa:aa:14:25:
         9e:f2:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 07:04:21 2026 by rpki-client