Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/71417cb6-5ecd-3486-b0b3-745b449b4b02.roa
File:                     71417cb6-5ecd-3486-b0b3-745b449b4b02.roa (raw, json)
Hash identifier:          YrvRtzQgmtvT2GGJhA4sfV0Cox6vcPVu/ylrV5w27lk=
Subject key identifier:   CD:0F:0B:33:D6:E4:D1:C8:D6:2E:F7:18:4A:9A:C0:AD:CF:58:B3:58
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF717673ECE309C4E2FECAB60
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/71417cb6-5ecd-3486-b0b3-745b449b4b02.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        130.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:67:3e:ce:30:9c:4e:2f:ec:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e0fc5ccb-225c-4873-8a67-9d91a4d626fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:4b:41:81:a4:a7:d0:5d:53:88:af:0b:43:
                    90:ba:9e:14:66:b1:23:a1:ef:ba:c7:ad:af:50:63:
                    d0:c3:aa:92:73:15:bf:b4:89:bc:8c:a8:ec:45:d5:
                    9c:03:01:9c:2e:1a:1c:86:9d:d7:ab:48:5c:af:53:
                    24:97:ea:c2:19:4c:78:21:b0:ce:36:dd:a1:fb:6f:
                    9e:d4:dc:da:d1:cc:44:a5:e1:62:7c:54:ec:39:b0:
                    5d:3e:82:5e:10:a9:11:bf:3a:b2:5c:c1:75:7a:0c:
                    58:a6:84:3e:7a:1c:4a:66:6d:94:67:23:d7:7e:05:
                    72:a1:73:a7:ce:82:45:a3:86:db:0e:55:97:e6:a0:
                    84:2f:2b:99:c2:f1:c4:b5:2f:14:ce:2b:90:35:ac:
                    c7:53:c5:32:eb:3c:a4:c3:bc:91:e3:35:31:c7:f2:
                    3f:b5:0a:63:89:97:db:52:78:9c:ed:ef:a0:47:bc:
                    df:29:ca:f0:35:b2:4f:b5:af:99:83:3f:ac:76:b4:
                    ca:c7:75:77:bc:a1:91:50:05:0a:97:e9:8a:2a:0e:
                    65:d2:01:ca:47:d7:59:a6:c6:de:f4:f3:72:42:30:
                    bf:5b:7a:26:06:ef:80:3f:d8:9b:04:9e:43:2d:a6:
                    83:eb:38:26:2e:68:7e:1b:66:30:22:c5:40:ba:24:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0F:0B:33:D6:E4:D1:C8:D6:2E:F7:18:4A:9A:C0:AD:CF:58:B3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/71417cb6-5ecd-3486-b0b3-745b449b4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:f2:1b:cd:f9:91:df:1b:3e:5b:89:e7:2a:65:3d:8c:63:
         de:13:f1:76:1a:11:61:8c:28:4a:ab:6f:72:2e:6e:7d:83:17:
         b7:19:f7:66:a8:f7:d4:cc:28:b4:1b:53:44:3e:f5:ce:1b:84:
         27:05:eb:e7:cf:c9:57:29:07:c2:26:e4:5c:4b:72:ba:4f:c3:
         58:56:33:e3:bd:dc:bd:27:91:e5:4c:39:4a:49:28:2c:2d:64:
         7e:8d:13:ec:94:f2:15:94:ad:3b:2b:3a:cc:d7:fd:4f:94:9e:
         c1:18:08:32:27:f5:e1:22:ca:db:57:a1:f4:2d:28:9e:08:1b:
         72:61:8d:e5:8d:90:0a:7f:03:88:29:5f:7e:5f:57:ca:b9:fd:
         b2:e9:6d:e0:36:24:0f:bd:d2:16:b9:56:ee:e7:f4:bf:3e:a6:
         a4:00:d8:73:81:72:bd:82:68:be:25:cf:39:77:bf:0e:e3:40:
         e1:95:dc:d9:38:e5:c9:c0:79:9b:57:ec:e6:53:a3:2a:e9:d3:
         4d:90:a2:4b:91:35:cf:0a:b2:44:da:5c:42:9f:c0:5d:09:b7:
         2d:42:17:51:ad:c6:d6:cb:1c:59:50:d0:79:30:08:ff:9c:51:
         0f:f5:c7:8f:53:69:51:c1:67:0b:98:04:0e:79:4c:71:c3:96:
         9e:8e:9b:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2c+zjCcTi/sq2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
ZTBmYzVjY2ItMjI1Yy00ODczLThhNjctOWQ5MWE0ZDYyNmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tpLQYGkp9BdU4ivC0OQup4UZrEjoe+6x62v
UGPQw6qScxW/tIm8jKjsRdWcAwGcLhochp3Xq0hcr1Mkl+rCGUx4IbDONt2h+2+e
1Nza0cxEpeFifFTsObBdPoJeEKkRvzqyXMF1egxYpoQ+ehxKZm2UZyPXfgVyoXOn
zoJFo4bbDlWX5qCELyuZwvHEtS8UziuQNazHU8Uy6zykw7yR4zUxx/I/tQpjiZfb
Unic7e+gR7zfKcrwNbJPta+Zgz+sdrTKx3V3vKGRUAUKl+mKKg5l0gHKR9dZpsbe
9PNyQjC/W3omBu+AP9ibBJ5DLaaD6zgmLmh+G2YwIsVAuiTaKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0PCzPW5NHI1i73GEqawK3PWLNYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzE0MTdjYjYtNWVjZC0z
NDg2LWIwYjMtNzQ1YjQ0OWI0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWd8hvN+ZHfGz5biecqZT2MY94T8XYaEWGMKEqrb3Iubn2DF7cZ92ao
99TMKLQbU0Q+9c4bhCcF6+fPyVcpB8Im5FxLcrpPw1hWM+O93L0nkeVMOUpJKCwt
ZH6NE+yU8hWUrTsrOszX/U+UnsEYCDIn9eEiyttXofQtKJ4IG3JhjeWNkAp/A4gp
X35fV8q5/bLpbeA2JA+90ha5Vu7n9L8+pqQA2HOBcr2CaL4lzzl3vw7jQOGV3Nk4
5cnAeZtX7OZToyrp002QokuRNc8KskTaXEKfwF0Jty1CF1GtxtbLHFlQ0HkwCP+c
UQ/1x49TaVHBZwuYBA55THHDlp6Om8w=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:33:05 2026 by rpki-client