Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84fec42c-45d4-3f01-8c3c-f842ddad1b14.roa
File:                     84fec42c-45d4-3f01-8c3c-f842ddad1b14.roa (raw, json)
Hash identifier:          DcwXfr+oqbeyVI8Dt0QISDMtUgVjZix7wWH5iFhhT1Y=
Subject key identifier:   44:D3:5C:6B:23:95:A6:33:3B:F4:FC:04:38:7D:41:D9:2D:A3:92:79
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CC85304841FEC99D40FC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84fec42c-45d4-3f01-8c3c-f842ddad1b14.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     203
IP address blocks:        130.174.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:c8:53:04:84:1f:ec:99:d4:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=a4b77596-4aa4-4626-b963-3c3f39a3f00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:2f:5f:17:7f:56:06:12:b5:60:35:34:90:
                    b8:4f:51:b8:a6:f9:58:b4:e0:6d:00:ea:62:dc:36:
                    16:f0:9b:4b:68:54:c7:d3:07:ad:8d:4b:23:ef:ad:
                    b5:e1:8e:b5:5e:79:94:f0:42:b6:73:0f:8d:fd:e8:
                    77:9b:ab:65:2a:3d:e6:d8:27:26:d5:23:f7:ad:54:
                    e6:ec:c4:9e:ad:6c:c8:4e:36:66:ee:bd:d7:d7:72:
                    9a:ce:d3:82:40:09:d4:0a:d3:3c:fd:94:76:6a:9a:
                    2c:6f:76:ca:b2:bc:a8:0c:d5:5c:19:b9:34:28:f9:
                    36:72:ed:6f:fa:17:b9:77:26:f7:66:9a:ef:c7:a0:
                    87:6c:1f:49:31:c7:be:29:ae:35:03:03:87:51:85:
                    72:88:6f:eb:86:d4:da:68:c4:25:c7:f1:22:65:60:
                    9f:03:9b:6b:85:28:34:93:bc:8e:eb:fa:91:41:4a:
                    3f:95:4c:ef:20:e5:72:5e:39:19:3c:9b:c0:1d:c0:
                    c1:1b:d9:16:8c:86:e8:e0:76:cb:bf:a5:f1:d3:42:
                    6f:29:60:ce:64:6f:58:0e:c9:6b:f7:de:bd:00:16:
                    33:2f:cf:5a:5b:7d:1d:98:06:9f:06:6b:f5:9f:d4:
                    07:0a:b0:2c:17:b9:43:18:e8:5c:c8:ae:51:80:15:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:5C:6B:23:95:A6:33:3B:F4:FC:04:38:7D:41:D9:2D:A3:92:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84fec42c-45d4-3f01-8c3c-f842ddad1b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:03:29:49:6c:2e:10:84:d2:50:c7:d0:d3:a6:02:5c:28:ae:
         2a:31:16:26:bb:83:1a:5b:81:82:75:09:71:e7:dc:43:2c:56:
         da:d8:32:3d:c3:f5:45:75:eb:31:94:7b:81:cc:b8:04:75:8e:
         0a:6b:a9:26:9c:b7:45:34:ff:5b:3b:48:6e:67:5f:74:9a:e3:
         c5:06:49:72:6f:dc:17:9f:93:53:f5:03:d9:39:c8:88:83:2f:
         64:f0:01:0d:1f:c6:68:3e:0a:4f:fd:26:d8:73:22:ee:e9:2c:
         5e:90:da:70:5d:bc:f9:9f:50:61:24:90:9b:04:0f:4f:85:43:
         fe:e9:5e:6d:9e:40:e7:af:fe:11:dd:f3:fd:49:d4:30:17:ee:
         c9:5e:f4:8f:3c:29:7e:77:67:6e:9d:80:73:03:24:af:1d:08:
         df:56:ea:c8:32:a4:e0:24:68:3d:e7:80:4f:99:25:5d:f8:58:
         8a:69:7a:1c:ed:55:d9:e5:a8:17:76:74:b1:9e:9c:8f:e3:5b:
         fa:c2:a4:0c:ba:07:74:b6:ae:ef:f1:ec:48:59:a0:59:bf:54:
         d8:66:d4:0c:2e:f9:6e:9b:53:d2:b1:bd:05:6e:ac:a4:2b:eb:
         88:21:1f:ff:6b:9d:93:71:57:93:03:95:00:02:ff:df:57:db:
         42:92:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:52:22 2026 by rpki-client