Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/945495de-e862-3374-a52a-696db252a3fd.roa
File:                     945495de-e862-3374-a52a-696db252a3fd.roa (raw, json)
Hash identifier:          a5goq+pMEFaWIqnCjRznbp7sOx4KtMpkfAg9ppOzmqI=
Subject key identifier:   9D:35:93:63:37:51:0F:FE:8B:39:21:44:25:84:26:D7:0D:AC:4A:BC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CC81421D4C07BC52A0000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/945495de-e862-3374-a52a-696db252a3fd.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     202
IP address blocks:        130.174.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:c8:14:21:d4:c0:7b:c5:2a:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=84134f07-d80d-4bf9-b025-54c8e25cbe54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:22:8d:41:95:af:33:07:a8:ae:af:12:aa:
                    b4:bd:bb:45:5e:a8:b6:88:e9:0d:9d:b1:04:b9:11:
                    97:f9:d2:87:ff:d0:2d:f0:58:d7:5e:3a:2d:8f:43:
                    80:26:88:1a:cd:c8:0f:2c:12:19:29:60:4a:7b:b5:
                    f8:0c:8e:6e:ae:a8:2e:b9:98:40:71:5a:b2:33:09:
                    90:53:40:d4:de:3e:c8:b1:4d:b4:8a:2f:76:19:e8:
                    5a:42:4e:fd:b0:19:cb:63:cf:db:65:13:ec:ab:bb:
                    4a:5c:a5:af:a8:16:66:c7:92:04:5d:c8:d8:92:03:
                    3a:5d:42:6c:3e:d7:ca:aa:75:e5:08:31:05:bb:da:
                    ff:71:2a:71:c8:27:f1:7b:05:99:95:3e:76:21:f8:
                    16:c0:bd:44:4e:6d:d1:4b:d0:3f:f0:54:00:65:5d:
                    9a:8b:cd:21:34:76:fe:36:93:e7:da:a5:b0:2a:27:
                    77:9c:87:de:4f:ad:91:87:98:ea:94:b3:ec:fe:44:
                    06:8a:23:52:94:eb:d1:ab:b4:16:0e:5c:5f:b2:ce:
                    63:56:15:13:22:f8:41:41:be:7b:53:0c:62:40:5a:
                    03:04:13:83:61:f7:77:82:07:6b:05:b1:42:e4:87:
                    68:d1:13:9e:69:2e:df:6f:fc:42:23:7c:a4:22:82:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:93:63:37:51:0F:FE:8B:39:21:44:25:84:26:D7:0D:AC:4A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/945495de-e862-3374-a52a-696db252a3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:03:75:6d:85:46:6f:c6:c3:69:4e:41:de:30:6f:98:c8:
         92:c7:61:2a:00:ed:1d:4a:61:ff:c8:b7:43:63:8a:2c:b8:e6:
         32:57:37:c8:28:e0:cb:fa:61:62:15:d3:57:a4:2f:79:b1:ab:
         dc:27:a8:5c:1a:66:35:da:96:1f:aa:65:21:03:a1:b3:55:24:
         d3:b0:bb:32:ad:3d:84:65:51:68:c0:91:7d:52:32:52:8d:4d:
         f9:b2:02:a5:c4:fa:63:03:3c:c7:9c:f5:19:f7:cd:e7:55:48:
         f1:3b:31:64:6a:83:1f:85:0f:c0:dc:b1:c1:39:01:de:66:d6:
         83:8a:8d:a2:18:32:20:7f:da:b6:80:03:af:84:df:e2:b2:c6:
         3d:75:78:31:1d:2f:54:2a:d0:48:9c:aa:ac:10:85:eb:a2:33:
         45:4b:2c:79:7a:8b:07:da:0a:45:72:f2:76:34:f6:8e:68:df:
         38:88:09:0a:48:f9:c9:c9:d9:4a:b6:62:a9:46:8a:b7:63:00:
         fa:f1:c8:ff:af:d1:15:aa:54:d7:20:a4:1d:5c:8b:5d:b3:7d:
         fa:a8:6d:84:25:97:b3:5a:37:1a:07:b2:96:66:f4:ba:f8:bf:
         99:0f:e1:2a:61:7f:c4:2e:f5:a9:33:23:d7:49:70:7d:4d:b6:
         31:53:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:41:52 2026 by rpki-client