Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ca20a3e-ba7b-395b-b21b-413210f275e1.roa
File:                     8ca20a3e-ba7b-395b-b21b-413210f275e1.roa (raw, json)
Hash identifier:          HIoWqvw3mWrBJ8Ttj36HjwxObTxC+O0xbPqkKXQmep4=
Subject key identifier:   35:E3:22:8B:9B:94:9B:B0:7F:6B:CD:3C:46:4F:A3:38:81:6B:73:99
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CC7A9E6508AD86592E740
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ca20a3e-ba7b-395b-b21b-413210f275e1.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     202
IP address blocks:        130.174.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:c7:a9:e6:50:8a:d8:65:92:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=6f6c8822-33fa-4b9a-8cf1-81de077b21cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:17:b1:23:7b:cb:f8:62:2b:14:7f:5f:be:
                    e6:9d:52:7d:5f:30:45:7e:e6:0a:57:34:1d:b7:95:
                    b8:58:96:85:c2:7f:21:4d:c1:c5:aa:c2:06:4f:25:
                    69:e6:46:e4:24:f8:22:5e:3d:87:f4:f2:57:ab:bf:
                    b9:a4:1b:c8:33:cd:b7:7c:af:2b:1c:c6:e6:9a:51:
                    d5:ab:a0:76:10:df:59:f0:2a:69:87:c2:95:40:8e:
                    06:73:e7:c7:0e:ea:44:47:dd:c3:24:c6:54:65:40:
                    83:df:ab:7e:38:0f:99:bd:ee:bf:be:a2:0b:c2:c5:
                    7a:33:7d:0a:f9:67:d2:ad:3e:3f:97:3f:ba:9d:3c:
                    d0:33:37:ab:b9:52:fb:97:ec:c5:88:2d:4b:5b:29:
                    bd:2d:1d:9b:a5:ad:cb:89:37:46:09:d7:70:36:cf:
                    68:29:44:68:25:0b:ab:17:bd:0a:8a:f6:1c:02:1d:
                    cc:d3:cf:f7:2f:0e:12:b6:7c:62:e7:40:b5:b1:01:
                    03:86:7f:0b:0e:c2:b8:0f:d0:fc:e5:06:d7:05:86:
                    98:af:7c:4c:38:a0:b5:b7:e8:36:fc:99:4c:eb:e4:
                    c6:0d:39:7a:bd:21:e0:bc:e1:8d:d6:73:78:6c:37:
                    c8:49:fb:7d:57:aa:44:b7:ae:9e:23:04:e9:fe:4b:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E3:22:8B:9B:94:9B:B0:7F:6B:CD:3C:46:4F:A3:38:81:6B:73:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ca20a3e-ba7b-395b-b21b-413210f275e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:81:5d:4b:46:f9:8a:a0:1c:04:8a:80:7a:35:15:1e:a3:
         8b:e3:69:d0:8c:d8:5d:fc:2f:f5:9f:de:67:80:9a:d1:67:32:
         48:dd:0a:f9:6e:ac:d7:d7:1b:ff:64:0f:cd:ba:ac:c0:89:a7:
         76:70:ef:01:95:09:9b:77:78:45:1c:a4:2f:bf:e9:b7:4f:40:
         69:10:d3:90:67:c1:99:c8:c5:67:ba:a4:c0:a7:9e:88:02:85:
         0f:fb:7b:51:11:09:62:8b:59:d7:37:13:4e:b5:d5:46:eb:c4:
         87:7e:4c:93:37:b6:8a:c7:12:26:4f:bc:b0:81:05:96:f4:c3:
         7e:2b:b4:ff:ce:1c:60:e2:3a:5f:46:95:eb:33:2a:c1:64:04:
         2f:bd:38:b2:e2:a6:1c:a5:bc:4a:71:82:10:6b:87:9e:1b:89:
         9c:72:01:03:6e:f7:b8:b4:1d:1e:e7:48:45:24:ce:3c:bb:a8:
         ba:eb:b8:6e:f3:5e:85:27:63:8a:cb:9a:76:19:f8:78:57:ca:
         d5:85:58:0c:d8:81:ce:6e:c7:3a:03:ba:92:3c:10:8a:cf:a9:
         d8:33:91:79:10:c2:db:cf:a7:78:7d:31:ba:ad:21:40:5e:ad:
         9a:90:4d:ab:fb:cc:0e:c7:02:10:3a:46:44:73:a6:de:b7:42:
         cf:08:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:42:22 2026 by rpki-client