Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/580b3971-c3f1-37c5-a3cf-75913dd29dc4.roa
File:                     580b3971-c3f1-37c5-a3cf-75913dd29dc4.roa (raw, json)
Hash identifier:          +8ftlHimGHCo8LvWG1gjXBYOivgQfGWWX5qmHI83Irs=
Subject key identifier:   A5:3B:6A:B4:8A:83:2E:7A:AE:27:3C:A2:C3:13:BF:30:F0:DE:C1:94
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F9A686D87A8DA940CEE83E340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/580b3971-c3f1-37c5-a3cf-75913dd29dc4.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     203
IP address blocks:        130.174.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:6d:87:a8:da:94:0c:ee:83:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=7a4a3e53-199e-4552-b128-452df5033b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:fc:53:0f:0d:fb:3c:0c:73:35:aa:f4:ba:
                    6e:d0:dd:7d:24:ee:80:51:b3:61:ce:b8:a1:06:63:
                    b8:f3:be:69:a8:9c:f0:91:5b:55:9b:c8:06:b7:1c:
                    da:aa:ce:05:66:24:23:53:29:71:1b:fd:38:4b:f6:
                    2e:cf:47:99:c9:ab:f4:4a:55:d6:65:ea:af:d1:fc:
                    ee:4f:93:13:0f:77:86:0c:78:0e:e1:45:74:42:bc:
                    e8:23:27:4b:a9:07:b3:86:53:6b:28:36:9a:1e:dd:
                    7e:f4:7e:69:dc:22:14:8b:67:9d:31:ac:4c:f0:88:
                    1e:3b:05:04:b9:4f:02:b2:18:8e:84:9b:09:4c:60:
                    c2:fb:a0:7f:22:0c:de:02:c4:65:ed:4f:2e:d2:0b:
                    e8:92:d0:4f:18:6e:c5:48:22:84:79:d1:cb:be:f6:
                    c9:59:6f:e8:31:ca:ad:d2:e9:37:63:08:f3:78:55:
                    3e:91:5b:ac:9e:aa:b0:10:69:ee:8d:41:5b:00:85:
                    63:cd:26:6d:1c:ef:ac:cb:d6:aa:0a:2b:2d:27:c5:
                    96:cc:a1:0f:12:6a:6f:f3:18:4f:00:12:ec:fa:b4:
                    fe:e0:0c:ec:29:31:b8:2d:06:10:42:4f:74:e6:15:
                    15:be:38:65:9c:d1:d2:ca:b6:3f:10:b0:a7:4e:80:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:6A:B4:8A:83:2E:7A:AE:27:3C:A2:C3:13:BF:30:F0:DE:C1:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/580b3971-c3f1-37c5-a3cf-75913dd29dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:1b:a0:ad:6b:46:a1:65:4d:b8:ea:03:48:bb:e7:0d:52:
         84:0d:85:2b:5c:d3:dd:74:1f:6b:93:6d:1c:12:5b:5e:99:6a:
         c5:81:52:de:5c:a5:2f:28:3f:4f:e9:89:d1:57:f1:2a:82:1a:
         cd:5d:61:2c:ae:54:5e:f2:1b:9a:14:65:19:f8:dc:27:b5:b3:
         25:f5:a8:dd:6d:f2:b8:2f:1d:70:70:cb:0a:03:31:68:1a:99:
         df:32:4b:22:8b:1d:0e:d8:62:63:a1:be:de:0a:97:d4:fc:8c:
         70:09:9c:30:95:d0:90:2b:2c:87:2c:3b:83:88:5a:8e:2e:d1:
         52:61:4f:32:f4:e0:c0:ae:7d:0f:3c:91:16:03:74:ea:a8:b9:
         7f:43:19:d6:c5:26:3e:ab:bc:e6:3f:04:17:ba:59:68:bf:63:
         6a:e4:31:5b:88:91:ab:58:16:65:c0:0f:3b:dc:c1:be:9e:f9:
         f8:b0:58:8d:ae:7c:03:9a:53:72:37:e9:28:06:fb:8b:91:b5:
         dc:e3:c5:30:ee:a3:47:59:7c:ef:65:eb:8e:c3:1a:ac:18:b8:
         69:41:b7:1b:7c:22:bf:24:16:1e:7a:3b:21:df:f3:25:4f:f9:
         a0:75:93:4d:9f:59:bf:35:b4:b2:70:8a:db:68:79:ad:f3:1a:
         1f:02:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:08:36 2026 by rpki-client