Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5782f257-baab-3d56-9344-fee735d00833.roa
File:                     5782f257-baab-3d56-9344-fee735d00833.roa (raw, json)
Hash identifier:          zUMTaBS+GtfCQlybXIujey0zQaTwSC+9RHF9YNYtxBw=
Subject key identifier:   5E:26:2A:0A:A9:5F:66:A2:EC:41:C4:D7:4E:3C:82:A0:83:E7:38:8C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF717738BE4788BB5D0B60740
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5782f257-baab-3d56-9344-fee735d00833.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        130.174.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:73:8b:e4:78:8b:b5:d0:b6:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=cac13a61-8a13-4c42-bb40-a74c472db85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:ee:1e:9f:b2:07:bf:72:c6:72:93:a9:7c:
                    0b:0e:dd:c3:89:a0:b4:b3:55:cf:d7:4a:6b:99:4f:
                    e0:3e:c7:93:49:b0:ec:f6:4a:ad:3c:42:72:45:68:
                    46:3c:46:53:2d:fd:d5:0f:74:43:05:91:2a:df:ca:
                    cb:55:e7:1d:a6:1f:a4:88:d2:46:32:87:35:01:24:
                    e0:ce:c7:9b:1d:e2:84:60:bd:1e:02:d0:65:72:29:
                    1a:a1:93:79:6a:0f:f4:5c:75:c2:4a:ef:51:20:dd:
                    71:05:39:5b:da:d6:de:56:bb:11:70:c9:4e:df:8b:
                    cb:29:52:d7:77:d4:bd:b0:2f:19:12:dc:ef:b1:6d:
                    86:27:43:42:fb:f4:9c:e1:65:f7:5e:31:d4:24:3a:
                    60:8a:44:bb:d6:2f:16:d1:81:7f:ff:94:8e:07:90:
                    ab:55:50:8b:ad:46:95:0d:6b:14:af:64:cd:98:92:
                    86:cf:53:66:24:26:cb:a0:9a:02:f8:55:21:52:02:
                    81:0a:41:c3:fc:06:d3:a1:73:c3:da:e0:a8:14:1f:
                    96:0a:c0:af:a7:1e:90:52:60:d4:87:3a:53:ca:52:
                    55:2c:97:e8:da:73:b5:65:1a:d9:3d:41:6f:17:e7:
                    bf:01:63:fa:4e:8e:24:74:03:be:f9:ed:32:fa:06:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:2A:0A:A9:5F:66:A2:EC:41:C4:D7:4E:3C:82:A0:83:E7:38:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5782f257-baab-3d56-9344-fee735d00833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:23:b9:7a:3c:b6:92:04:c8:c3:b9:a4:3b:d9:25:26:5d:57:
         b7:77:b4:0c:fa:48:a5:52:e4:fd:18:21:f1:d7:80:fc:07:37:
         82:10:bb:2a:63:33:4f:cb:1e:d3:db:15:d6:11:28:4b:3a:89:
         dc:31:7f:61:f9:16:2d:89:6a:4a:93:e4:72:d8:ba:82:89:a7:
         2a:e7:40:00:ca:3a:a0:0e:95:76:d7:31:7d:ad:69:d6:6c:4b:
         87:e0:f2:71:05:9f:33:22:8f:e4:b0:47:dc:5e:df:7c:ef:93:
         45:74:37:bb:0e:54:ec:01:3d:a7:da:d7:03:45:bd:f5:97:c6:
         0e:3c:f4:aa:8c:08:86:85:f3:5e:61:af:15:87:a1:f2:22:8e:
         27:8e:02:a1:05:41:d1:ce:b8:f8:ae:d7:ab:94:12:4e:a5:1c:
         39:fb:85:8a:45:55:d7:a1:77:d7:de:c0:56:44:15:bc:13:71:
         7f:f2:67:65:22:f9:a9:dc:60:8a:10:d9:2a:34:1b:c6:36:1f:
         80:03:79:54:50:9d:d2:3d:7e:74:42:23:da:15:34:7d:72:51:
         9d:4a:c5:38:e2:b4:c0:a8:ed:50:42:d0:6b:fe:c5:bf:fb:a0:
         60:e7:70:8a:50:49:4f:5b:4a:37:7a:f3:9e:21:b2:45:f3:ee:
         57:0b:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:17:42 2026 by rpki-client