Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/842b841d-c7e5-3b97-8fe0-4d72174a998d.roa
File:                     842b841d-c7e5-3b97-8fe0-4d72174a998d.roa (raw, json)
Hash identifier:          CqPWx06TfIxtziwnWZf25n8B3ml16pNFUI07fcN2CU0=
Subject key identifier:   F8:41:AB:BD:F1:4E:82:08:76:42:FC:D0:2E:D8:EE:E2:27:0C:C8:2E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B4A6309E4E76BF6B9381C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/842b841d-c7e5-3b97-8fe0-4d72174a998d.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     3360
IP address blocks:        130.174.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a6:30:9e:4e:76:bf:6b:93:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=9e2966b6-ef77-496e-996d-f09972d8520e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:5f:19:dd:14:a0:87:e3:82:2c:7f:95:03:
                    f8:f3:21:80:f5:49:fc:c8:f8:85:07:fe:b2:63:62:
                    fa:95:e9:78:00:3c:fe:e4:b9:87:95:6f:ef:11:ea:
                    b5:85:08:72:cd:86:bf:3a:a9:cf:c8:b9:ec:eb:75:
                    28:84:8c:41:62:dd:61:1f:fa:2b:d5:e0:1f:99:04:
                    4a:b1:55:df:d2:cd:cb:09:40:9b:15:04:57:98:e7:
                    be:55:80:6e:a5:71:00:8b:b9:9c:e4:f4:0a:4c:30:
                    71:c9:23:37:1c:06:9c:95:c6:03:14:93:35:a2:12:
                    c9:b6:0c:f2:4a:39:e9:d7:52:94:47:67:4a:00:cc:
                    ea:51:46:f3:b3:b5:69:23:4e:86:45:f2:c2:98:8b:
                    87:85:3d:2f:fb:bd:a7:5c:64:9f:af:d8:f3:94:79:
                    d1:db:98:10:02:d5:60:2b:2a:d6:fa:1f:e8:34:c7:
                    2a:66:bc:03:f5:b7:82:38:b6:a7:8f:65:d2:1f:f9:
                    60:ee:19:84:e2:1b:8f:8a:1b:2e:6e:a4:e9:f7:74:
                    6a:44:97:8d:0d:a4:29:b3:8c:27:cd:29:a2:c4:69:
                    6c:e8:60:b6:38:de:7a:d9:5c:2f:44:b8:bf:89:e4:
                    aa:66:a5:df:bd:e8:19:9f:46:18:11:f8:08:29:60:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:41:AB:BD:F1:4E:82:08:76:42:FC:D0:2E:D8:EE:E2:27:0C:C8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/842b841d-c7e5-3b97-8fe0-4d72174a998d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:77:e7:d2:61:11:f5:b9:69:1e:ad:f5:38:cd:d9:e1:39:b6:
         d3:c6:5f:32:b3:51:67:ae:b9:d1:6e:d8:58:70:2b:ca:ab:82:
         c4:a9:48:bb:29:c7:90:32:e6:1e:79:50:16:b9:6b:c0:d6:08:
         94:33:34:ae:66:c3:6f:25:a7:8e:37:69:4f:70:a8:ae:59:2a:
         9f:ae:ce:3a:93:50:ee:b5:37:f7:f8:14:7c:e4:b0:07:6a:f3:
         68:98:d5:9b:a8:78:fd:96:c0:62:88:0f:3e:b7:35:cf:6e:d6:
         a8:9e:d0:4e:3c:05:6f:99:93:bd:48:4c:83:da:73:da:52:56:
         b2:6d:22:cd:d9:9f:77:b2:c3:1a:60:df:cc:75:95:3e:7d:26:
         2a:d5:d2:69:2e:bf:96:40:8e:15:bc:4c:df:bb:1a:e6:df:47:
         d5:71:3d:8f:56:a7:0e:dd:3d:3c:6e:8b:b2:36:82:45:6f:c2:
         bf:52:08:41:67:cb:c1:b6:cc:01:d4:67:c2:56:50:92:ef:44:
         3a:29:58:58:27:3a:61:11:a9:65:84:04:71:35:89:9f:55:0c:
         cd:18:64:d9:11:46:1b:ad:89:38:63:9f:46:71:a9:ba:bb:88:
         88:d9:58:c5:66:3e:fa:67:2e:ac:29:71:fb:1f:cb:a2:5e:b2:
         73:b0:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 07:02:43 2026 by rpki-client