Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa
File:                     33f95527-3969-306a-a2c5-4693ebe9dd54.roa (raw, json)
Hash identifier:          NEY33E+r4oQ9fnhf05Gx5VEWMRPZ66gdko4r5P5ldl0=
Subject key identifier:   17:F1:10:83:A8:A0:15:D7:CB:97:8D:24:DD:EE:1E:E8:AA:71:83:F5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B49D5FE03A743CCF4E7E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     3360
IP address blocks:        130.174.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:9d:5f:e0:3a:74:3c:cf:4e:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=659ce369-f5f9-4157-aa5b-eb63309fb246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:34:9e:7b:da:5e:f6:92:b2:8c:a4:40:51:cf:
                    79:c0:27:4f:fb:a0:7a:3a:fb:2a:4d:51:c4:08:d8:
                    29:5b:bf:53:66:0e:9e:8b:64:d3:58:4e:e4:7c:27:
                    28:51:fa:3d:70:cc:8c:98:33:7f:e0:02:ed:95:62:
                    17:85:bf:6f:03:83:85:96:dd:b7:22:2e:91:b0:e3:
                    8a:ea:7d:6d:c2:ba:8e:4d:57:31:bd:80:1a:8a:c5:
                    88:89:68:13:be:63:a5:e8:bd:2f:42:00:47:c2:43:
                    64:14:7c:83:79:8a:6f:4f:69:09:4e:bd:5e:b5:0a:
                    00:ae:6b:97:f4:3f:36:87:39:d7:72:f4:82:b8:ad:
                    3f:a7:e3:18:3a:32:61:f6:21:ae:62:10:2c:46:81:
                    e0:d2:36:ec:8a:35:b6:45:3c:1b:81:e7:c8:19:f8:
                    86:42:db:c7:02:9f:57:34:c4:f6:0d:45:bf:ea:dc:
                    8c:0e:64:f3:75:9a:71:53:ad:90:7d:aa:20:2f:ae:
                    70:32:92:58:a0:49:34:4f:d0:dd:3f:14:46:04:1d:
                    41:91:56:7c:24:e7:e2:9f:83:b5:67:24:f6:d4:18:
                    68:0b:cd:cc:27:23:40:d3:a6:64:10:e7:8f:76:52:
                    97:0f:b8:11:12:fc:5a:8d:45:22:af:f5:04:4d:c6:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:10:83:A8:A0:15:D7:CB:97:8D:24:DD:EE:1E:E8:AA:71:83:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:00:ae:23:d4:c9:63:1f:75:6c:2a:2e:4a:ed:d6:44:72:
         f0:4b:e2:5c:c1:10:dc:c2:fa:81:de:11:0c:e4:ee:26:d9:4f:
         01:d7:dd:14:5e:70:16:da:ff:fc:be:05:17:74:17:81:fa:65:
         5a:09:88:34:89:03:74:ed:52:6c:d5:08:7b:64:f1:72:32:37:
         98:87:96:d2:9c:fe:39:d3:37:5e:f3:8e:04:50:0d:ea:b9:83:
         1d:78:c4:1f:71:d7:e1:bf:9f:6a:b1:05:8e:71:c3:45:92:a9:
         36:b4:a9:c1:55:a1:81:0d:18:88:24:86:71:ca:f4:50:24:3d:
         de:5b:93:7f:f7:9b:2e:54:d2:5f:ca:ca:0f:b4:58:4b:41:ce:
         98:02:78:31:dc:cb:f1:47:65:55:77:59:35:70:46:bd:b0:40:
         52:42:23:68:2e:05:f2:c0:ba:e3:11:1e:c1:21:93:ba:a4:5c:
         8c:ef:5a:0d:2d:bd:90:6b:2f:8b:3d:d8:b4:d8:96:72:3b:9e:
         0a:ba:1a:bf:c6:6e:85:ac:39:10:96:31:71:22:40:04:d8:f4:
         7b:4d:e1:bc:a7:e3:4d:5a:0c:ec:6a:c8:e2:6f:7a:1d:3f:06:
         8c:d4:ef:e7:e9:6b:10:ef:41:74:86:76:c8:70:0e:cc:3b:64:
         e3:cd:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 07:05:46 2026 by rpki-client