Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa
File:                     4a850ed4-4106-3fe5-af86-31e842945a97.roa (raw, json)
Hash identifier:          KFi8TUeDquouAYelAAndiTdhSFrIqMczzWuW9PSv8Uo=
Subject key identifier:   45:7F:68:F5:BD:C5:27:3F:E6:76:FF:26:7A:EA:FF:CC:A9:92:67:AE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F9A686DA014A587D4D8BF7780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     203
IP address blocks:        130.174.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:6d:a0:14:a5:87:d4:d8:bf:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=f0b672d6-ca52-41c8-be60-480053ba44ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:82:a8:2d:dc:51:89:a7:38:ba:cf:d4:e7:
                    b5:f1:56:b0:fe:51:fe:30:e1:e7:7e:08:cb:24:00:
                    c0:58:7c:72:f8:69:90:45:5b:47:3d:d2:54:10:3f:
                    74:cc:4f:25:d6:a0:3a:07:13:4f:0c:7e:eb:87:cb:
                    13:1e:ce:58:8a:0e:7b:5d:ec:40:e6:44:c2:57:7e:
                    7f:f3:c1:65:8a:e4:90:65:13:67:da:cd:5a:3c:33:
                    1f:0b:24:b8:69:59:10:07:43:21:0c:cb:95:d0:94:
                    9e:d6:11:52:ff:6a:74:d0:9e:3c:44:dc:94:78:99:
                    82:60:91:da:7a:a9:a7:43:22:9e:95:64:a5:48:e2:
                    15:ad:1f:cd:7c:e1:9c:7d:49:14:ff:7a:a6:32:fe:
                    c3:f8:1a:39:08:11:16:d3:0b:fa:93:8d:c0:db:52:
                    77:9d:21:3d:67:be:47:8a:46:3e:af:48:e6:70:2a:
                    a0:d1:bc:20:c4:6a:1b:3e:44:4c:26:f4:21:9d:6a:
                    81:45:e5:2f:a7:e9:9f:e6:e5:5c:17:b7:55:89:3a:
                    38:d9:ff:d5:9d:c5:17:0d:42:34:fe:76:15:38:6e:
                    e2:b8:de:30:8f:b8:2f:df:89:30:bd:22:cd:f3:87:
                    32:98:c3:cc:a8:b0:2d:42:da:f0:e6:e3:5d:5b:33:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:68:F5:BD:C5:27:3F:E6:76:FF:26:7A:EA:FF:CC:A9:92:67:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:af:23:29:e2:3e:22:90:de:d5:b6:a8:16:af:e7:fd:04:7f:
         19:53:a0:06:5a:64:e3:4b:bb:8c:9f:25:6c:71:2f:9b:35:cd:
         65:ba:b5:31:87:a0:05:72:8b:04:11:f8:98:3f:f3:f4:52:3e:
         40:1b:f4:ac:88:3a:f1:b5:b6:6b:32:b2:1c:eb:93:11:f1:44:
         c0:07:ba:72:0f:a3:19:d9:b6:b2:6c:bb:6e:a7:34:90:32:62:
         d8:50:69:0e:00:be:08:0e:1b:27:9b:ac:46:64:26:d5:1a:55:
         a4:c6:17:fa:2a:90:27:6d:2f:f9:fb:8b:8b:15:ab:ef:3e:ec:
         09:e7:da:d6:f5:d0:ac:b6:ae:47:cc:dd:78:e7:f9:d6:8d:57:
         2b:92:5d:43:40:16:fc:38:50:c7:df:2a:fc:83:16:99:80:28:
         55:76:60:31:87:0b:9c:2b:47:b7:75:79:b4:fa:98:cd:09:4b:
         96:43:00:8e:ec:6f:b6:ca:9f:ea:c3:56:3f:f7:90:67:bf:55:
         24:83:3a:49:c7:2e:ad:78:93:be:bc:32:19:9d:17:47:b6:4a:
         df:0e:ec:91:89:fd:0d:1c:b9:78:ac:65:d6:83:50:87:1f:5b:
         e5:53:ec:6b:ab:3c:4b:4e:a6:e1:d2:53:f6:29:ed:ba:46:d1:
         f7:44:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:01:21 2026 by rpki-client