Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72f5f6b6-8335-3498-aebe-880e875fb42c.roa
File:                     72f5f6b6-8335-3498-aebe-880e875fb42c.roa (raw, json)
Hash identifier:          nUdSm3aSvuNAeG1yMI7wSsAF8li8rpSOV+Ay+YZQzDA=
Subject key identifier:   96:B7:79:94:B2:5A:F7:BB:01:3F:4A:1B:F4:5C:0B:DB:AE:0B:44:A5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A0FFEEAEA4C332F52F6E80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72f5f6b6-8335-3498-aebe-880e875fb42c.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3356
IP address blocks:        130.174.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:ff:ee:ae:a4:c3:32:f5:2f:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=dd8689d3-c12f-4ce9-8356-876aef668bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:a6:7f:ed:40:24:de:91:b5:41:02:fc:8b:
                    b3:39:98:20:83:3f:92:7e:db:be:dc:df:50:31:89:
                    cb:eb:4c:36:3e:ad:0e:3c:3f:3e:d8:00:5e:08:00:
                    78:06:a0:71:dc:3d:e9:0d:94:dd:8b:11:34:65:4d:
                    bc:8b:b3:e3:24:1d:34:e4:02:46:e6:4f:16:49:b1:
                    6d:17:f0:27:f0:fb:d3:bf:f0:cf:cd:3c:c4:3a:66:
                    ef:98:5a:3e:d9:9d:e9:f3:aa:d5:59:96:74:26:f6:
                    03:5b:76:0e:c5:36:89:89:66:2c:31:b8:cb:2e:ba:
                    3d:07:c9:09:20:75:93:c6:2f:23:2b:16:0c:ea:10:
                    3c:94:4f:32:37:4d:7c:04:1c:1a:20:99:fd:f8:72:
                    78:11:92:4b:cd:e8:5d:bb:e9:68:4e:cb:6b:ea:78:
                    a5:8f:f3:24:91:40:f0:4a:c0:6d:57:a9:d8:0f:12:
                    27:5b:70:f1:e3:d3:94:2f:58:51:20:f5:75:39:3a:
                    a2:35:06:0f:12:24:a5:9d:01:d1:43:79:83:84:eb:
                    5d:c1:ea:a0:b6:98:7d:c6:19:a3:49:fa:79:d4:b7:
                    d5:22:13:50:67:67:ad:1f:15:f3:b6:19:17:ef:0c:
                    a5:d3:9d:7c:20:37:49:2e:60:41:74:6f:79:6a:60:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:79:94:B2:5A:F7:BB:01:3F:4A:1B:F4:5C:0B:DB:AE:0B:44:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72f5f6b6-8335-3498-aebe-880e875fb42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:06:a1:c9:28:33:db:4c:a7:ad:a3:c2:c4:c7:d0:89:44:
         12:0d:28:ed:46:06:f9:9d:73:02:b4:92:c6:9d:ed:91:2d:f5:
         97:7f:ed:36:1c:a5:04:85:8f:55:50:f6:b8:43:62:02:46:95:
         b1:c8:1d:3a:9d:2f:d7:de:b5:3f:16:38:f3:76:09:21:68:6f:
         c2:7a:cb:0e:c8:02:36:5f:c5:b2:26:96:03:ef:06:d3:7d:e7:
         d5:bb:42:77:f6:d5:fd:d0:97:23:34:ff:39:15:25:52:9e:bb:
         51:c0:40:8f:11:fc:2e:e5:f3:2e:02:98:6f:f6:0b:48:92:c4:
         5d:0a:32:a7:06:a7:f1:2c:5f:b8:43:41:41:e9:25:17:62:7d:
         c4:73:5d:57:2e:10:99:da:0b:23:31:45:17:4f:58:d3:a8:2f:
         ec:64:68:9d:60:2e:e6:39:3d:0a:3a:4c:fe:c2:94:d4:1f:c1:
         27:a5:86:d1:1b:ce:7e:1f:ca:aa:4a:01:66:9a:2e:2e:f7:e6:
         be:ef:77:a4:55:76:4e:31:ad:da:d4:d0:1d:60:65:af:3a:7c:
         7f:d3:6a:1e:78:18:1f:5a:06:c4:19:ab:cb:02:ba:92:cb:54:
         ee:45:38:19:29:a7:31:4a:9e:7c:86:98:e8:2a:8c:d5:bb:ac:
         93:6f:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 12:00:19 2025 by rpki-client