Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f4281e0-7036-38e6-8914-91d34b8e53c9.roa
File:                     6f4281e0-7036-38e6-8914-91d34b8e53c9.roa (raw, json)
Hash identifier:          TGVPfRxk4aGs2J78uUi6c0TB1M4xkZGA55M1P55ieh8=
Subject key identifier:   C0:B7:23:19:7C:3B:A2:E5:D9:5C:EB:B7:C4:BC:33:9C:96:89:FF:05
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF7177221CAE1E55DE8D19680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f4281e0-7036-38e6-8914-91d34b8e53c9.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     202
IP address blocks:        130.174.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:72:21:ca:e1:e5:5d:e8:d1:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=351fa3cd-7174-4de1-af21-0992660d4a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:1c:5e:4d:f8:db:c3:39:bc:03:a1:c0:43:
                    51:b6:8f:b4:34:dd:fa:b1:3c:b0:42:04:46:5c:cb:
                    6a:84:bc:4e:cf:6d:28:91:41:b2:7f:a4:b4:1d:bf:
                    67:04:bb:e3:d1:01:e7:99:30:37:1c:04:37:08:f4:
                    82:79:11:19:f8:b2:f7:94:dc:62:c5:4f:bc:0b:23:
                    f6:ba:1b:8c:f7:9b:3e:5b:45:43:be:63:7f:cf:f6:
                    81:88:97:08:8a:aa:13:08:3d:33:59:33:17:78:35:
                    9f:cf:67:39:f8:3a:9e:ce:b4:f4:85:a3:53:d5:93:
                    03:8d:0d:f1:be:94:1b:95:4b:a6:08:a8:c8:47:e8:
                    1d:ee:54:ab:42:3b:1c:18:69:e4:7d:75:c9:ed:d0:
                    79:df:c7:f4:09:be:23:b3:dd:25:ac:d0:d4:7d:94:
                    68:6f:bd:6a:3b:41:e4:be:9b:55:4e:af:62:e0:af:
                    d5:d1:c5:fa:69:f4:56:53:92:27:f3:1f:32:a2:ce:
                    0c:dc:cc:67:48:40:b8:00:2d:1a:b6:82:66:4b:dc:
                    a2:44:09:3e:3d:41:03:67:09:22:8c:b5:2d:7d:e5:
                    1c:7c:ed:49:78:cd:c3:fc:34:93:b2:c7:2e:ef:0d:
                    1a:69:78:aa:1b:75:14:fb:e5:f1:ae:fd:4f:ec:23:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B7:23:19:7C:3B:A2:E5:D9:5C:EB:B7:C4:BC:33:9C:96:89:FF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f4281e0-7036-38e6-8914-91d34b8e53c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:23:ac:1d:b3:58:8b:6b:0e:a0:80:72:99:3f:5e:0f:5b:
         c9:f8:07:10:07:e5:ad:c8:a2:9d:53:d5:ed:b5:1c:80:ee:9c:
         95:9a:ae:60:2c:11:c2:77:ae:f6:f1:4b:95:09:32:9d:38:fa:
         b1:6f:2c:f5:dd:63:98:6d:1d:d9:60:4a:98:50:0b:cb:14:1f:
         9d:f5:f9:e4:5a:be:00:87:ba:3d:bf:45:e5:c0:ef:75:48:c5:
         67:44:e2:2f:4f:4e:38:1c:b5:99:e9:70:24:47:1a:90:55:df:
         19:ea:47:d1:19:2f:04:7c:bf:e4:cc:7d:02:51:df:bb:fc:8a:
         6c:f9:be:43:c2:f1:57:25:9f:41:cc:a8:0d:8e:a4:56:e0:1f:
         e4:2e:1a:ae:a9:be:8b:9e:91:dc:e3:f2:d2:85:5c:1d:38:1d:
         2f:4e:7f:ac:99:94:81:9c:75:69:01:82:29:33:97:59:78:36:
         5b:bb:95:5c:a0:3c:a5:ea:44:48:67:7b:e2:df:02:11:bd:a8:
         60:5f:ff:f6:1c:ce:f2:60:56:cb:b7:c4:27:08:53:b4:3e:f3:
         3f:bc:22:22:0c:c6:c6:31:30:98:c1:ff:ec:64:46:82:59:cc:
         0e:96:f4:97:ae:5e:6e:c0:0f:27:bb:29:b3:d5:5f:16:b7:7c:
         30:0f:5d:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3IhyuHlXejRloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
MzUxZmEzY2QtNzE3NC00ZGUxLWFmMjEtMDk5MjY2MGQ0YTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp8cXk3428M5vAOhwENRto+0NN36sTywQgRG
XMtqhLxOz20okUGyf6S0Hb9nBLvj0QHnmTA3HAQ3CPSCeREZ+LL3lNxixU+8CyP2
uhuM95s+W0VDvmN/z/aBiJcIiqoTCD0zWTMXeDWfz2c5+DqezrT0haNT1ZMDjQ3x
vpQblUumCKjIR+gd7lSrQjscGGnkfXXJ7dB538f0Cb4js90lrNDUfZRob71qO0Hk
vptVTq9i4K/V0cX6afRWU5In8x8yos4M3MxnSEC4AC0atoJmS9yiRAk+PUEDZwki
jLUtfeUcfO1JeM3D/DSTsscu7w0aaXiqG3UU++Xxrv1P7COKVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMC3Ixl8O6Ll2Vzrt8S8M5yWif8FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmY0MjgxZTAtNzAzNi0z
OGU2LTg5MTQtOTFkMzRiOGU1M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABn9I6wds1iLaw6ggHKZP14PW8n4BxAH5a3Iop1T1e21HIDunJWarmAs
EcJ3rvbxS5UJMp04+rFvLPXdY5htHdlgSphQC8sUH531+eRavgCHuj2/ReXA73VI
xWdE4i9PTjgctZnpcCRHGpBV3xnqR9EZLwR8v+TMfQJR37v8imz5vkPC8Vcln0HM
qA2OpFbgH+QuGq6pvouekdzj8tKFXB04HS9Of6yZlIGcdWkBgikzl1l4Nlu7lVyg
PKXqREhne+LfAhG9qGBf//YczvJgVsu3xCcIU7Q+8z+8IiIMxsYxMJjB/+xkRoJZ
zA6W9JeuXm7ADye7KbPVXxa3fDAPXTo=
-----END CERTIFICATE-----
Generated at Wed Sep 9 03:42:37 2026 by rpki-client