Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72b767a5-4ee8-3e26-8a15-ea29d51def70.roa
File:                     72b767a5-4ee8-3e26-8a15-ea29d51def70.roa (raw, json)
Hash identifier:          TS5qjisguhcruIZp1NsF4UKU3xHY109pgC333CQP+PM=
Subject key identifier:   3C:C7:4E:2A:54:9D:4A:77:BF:F3:8A:33:95:AB:38:32:3E:C3:C5:3A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F9A686BCDD60BE886790B5300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72b767a5-4ee8-3e26-8a15-ea29d51def70.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     202
IP address blocks:        130.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:6b:cd:d6:0b:e8:86:79:0b:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=fc71117b-4ac8-4ef3-a45b-49a334d07c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:a5:19:d6:16:9b:8b:d1:08:c1:a0:e3:a6:
                    56:e7:a7:d9:e6:6a:ea:1c:88:da:75:0b:8f:1f:1b:
                    e9:07:be:06:75:3c:e2:25:26:3f:2b:e1:62:fc:99:
                    a4:5e:a8:54:64:fe:2a:00:c7:0b:26:3c:71:e9:c1:
                    68:bd:5f:66:78:35:6c:76:62:21:64:ca:6e:d4:a0:
                    73:94:71:f0:2e:c9:57:23:40:74:43:86:cc:87:53:
                    1d:d3:cc:54:02:c8:57:b1:f4:21:38:f3:46:65:71:
                    06:a3:13:f4:4f:79:40:5f:a6:a2:86:ba:b7:50:54:
                    44:f2:ab:7f:f5:ab:e3:b4:ac:d1:86:83:0b:26:dd:
                    a8:d7:d4:46:74:5c:8d:6d:a8:5b:b6:e8:b6:c4:72:
                    7c:d2:dd:65:22:d3:8b:b9:9a:71:9a:28:56:a7:aa:
                    16:05:62:16:8a:b5:93:a6:31:48:ae:f5:d7:8d:b8:
                    73:73:cd:a5:e4:c2:30:ae:e6:06:df:5c:72:35:35:
                    eb:24:6d:d3:27:40:bc:e6:a4:b5:3c:3e:c2:28:91:
                    f7:96:e7:fa:6e:32:ae:df:48:bf:7b:2a:92:39:17:
                    55:98:c2:70:0e:32:cd:4e:31:71:1d:a0:48:36:68:
                    ae:23:e0:02:ae:a0:d7:74:11:21:83:8a:ec:26:f4:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C7:4E:2A:54:9D:4A:77:BF:F3:8A:33:95:AB:38:32:3E:C3:C5:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72b767a5-4ee8-3e26-8a15-ea29d51def70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:89:02:05:8e:f4:cb:90:8d:02:bf:d8:64:5c:17:a1:9f:
         ba:3a:36:fe:f8:c3:dc:e6:c7:3a:2c:22:99:c9:d7:05:54:82:
         b0:66:48:3a:cb:17:7b:a3:db:0c:b9:1c:6c:ef:5a:52:fb:9b:
         76:fa:98:79:bf:b9:53:d7:04:9d:b0:f7:8d:57:95:d6:d1:8c:
         1b:c1:49:36:67:8d:d6:66:9a:aa:bd:50:42:ce:5b:cb:6c:b5:
         a3:04:ea:ad:00:e7:08:7b:e1:5c:7f:ac:b8:9d:fa:84:98:54:
         b4:44:9e:23:8a:ec:8e:66:b4:fc:6d:18:c4:eb:30:0e:41:f0:
         8c:41:ed:00:a2:8b:6e:04:1c:72:76:03:21:f2:98:5b:a1:ba:
         d4:98:d6:9d:37:c7:47:f4:61:12:af:56:49:6e:56:35:b9:d0:
         a6:4d:73:d7:bf:9a:66:00:19:65:d3:06:34:3d:d2:b5:f0:e7:
         f4:fa:35:38:6f:5a:7e:51:18:73:ed:51:0e:74:5b:24:71:1b:
         d8:19:fa:f7:0c:8f:72:72:d0:1e:f8:52:ea:dd:70:5f:6c:20:
         eb:f8:f3:19:3a:07:1b:d4:64:ee:b1:6c:39:8d:5a:2d:e2:84:
         26:99:a5:89:5f:72:54:fa:dc:59:98:06:4a:e8:33:4b:c8:b0:
         ac:1a:c6:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGvN1gvohnkLUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZmM3MTExN2ItNGFjOC00ZWYzLWE0NWItNDlhMzM0ZDA3Yzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHOlGdYWm4vRCMGg46ZW56fZ5mrqHIjadQuP
HxvpB74GdTziJSY/K+Fi/JmkXqhUZP4qAMcLJjxx6cFovV9meDVsdmIhZMpu1KBz
lHHwLslXI0B0Q4bMh1Md08xUAshXsfQhOPNGZXEGoxP0T3lAX6aihrq3UFRE8qt/
9avjtKzRhoMLJt2o19RGdFyNbahbtui2xHJ80t1lItOLuZpxmihWp6oWBWIWirWT
pjFIrvXXjbhzc82l5MIwruYG31xyNTXrJG3TJ0C85qS1PD7CKJH3luf6bjKu30i/
eyqSORdVmMJwDjLNTjFxHaBINmiuI+ACrqDXdBEhg4rsJvS3pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzHTipUnUp3v/OKM5WrODI+w8U6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzJiNzY3YTUtNGVlOC0z
ZTI2LThhMTUtZWEyOWQ1MWRlZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExviQIFjvTLkI0Cv9hkXBehn7o6Nv74w9zmxzosIpnJ1wVUgrBmSDrL
F3uj2wy5HGzvWlL7m3b6mHm/uVPXBJ2w941XldbRjBvBSTZnjdZmmqq9UELOW8ts
taME6q0A5wh74Vx/rLid+oSYVLREniOK7I5mtPxtGMTrMA5B8IxB7QCii24EHHJ2
AyHymFuhutSY1p03x0f0YRKvVkluVjW50KZNc9e/mmYAGWXTBjQ90rXw5/T6NThv
Wn5RGHPtUQ50WyRxG9gZ+vcMj3Jy0B74UurdcF9sIOv48xk6BxvUZO6xbDmNWi3i
hCaZpYlfclT63FmYBkroM0vIsKwaxns=
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:41:46 2026 by rpki-client