Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94a5ce68-bf77-3496-a0ec-ba8510d392d1.roa
File:                     94a5ce68-bf77-3496-a0ec-ba8510d392d1.roa (raw, json)
Hash identifier:          Wv3lkztvbI/mrXaJbgdEgFTJG2ZhvYgtBq0Qebkl7vo=
Subject key identifier:   50:90:CD:FC:2B:A0:13:48:6C:85:2F:7E:B8:A5:E2:3B:9F:C9:38:7D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF717716A034F888203694200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94a5ce68-bf77-3496-a0ec-ba8510d392d1.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        130.174.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:71:6a:03:4f:88:82:03:69:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=b871ae2d-2d59-4e5e-af06-2219429f06db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:46:ab:d7:4b:85:02:4e:f8:8e:b5:34:d9:
                    ec:bf:7b:f2:56:7c:54:3f:94:b9:95:cd:a2:b0:77:
                    71:4a:fd:52:ab:e9:1a:3b:2c:a7:ce:f5:44:9a:13:
                    05:0c:43:8c:a2:fb:c0:ea:cf:ee:d3:c4:88:03:7a:
                    ab:76:97:8c:0d:1b:23:19:3a:95:e4:81:e8:9d:ab:
                    10:36:92:88:a7:3e:45:17:0f:6d:09:16:f6:78:88:
                    87:b3:62:e5:01:26:34:ce:df:c2:62:5d:97:68:aa:
                    28:a7:00:4c:1d:21:4a:c9:93:29:6f:77:0b:22:72:
                    ff:3f:d5:5e:54:6b:bf:a8:6d:c7:76:36:1e:49:27:
                    ba:f9:ce:43:03:f4:4e:8f:bc:30:5b:79:b3:71:1f:
                    8e:2b:55:50:ce:74:8c:71:3d:a0:1f:fa:b0:b9:cd:
                    5f:70:07:37:0b:b4:d6:df:5c:b3:d2:70:34:05:fa:
                    d6:28:bf:3a:58:92:84:bf:6f:ae:5a:ee:e3:19:92:
                    54:b7:bd:d7:1d:c4:27:72:83:89:9f:75:87:a0:01:
                    e3:9c:d5:ab:1c:4b:47:72:db:b0:10:38:21:06:0e:
                    f6:8b:bb:32:b3:77:01:24:a4:2c:33:04:d6:b5:a8:
                    7c:05:bd:45:bd:3b:f6:59:a1:e2:ed:47:80:a6:61:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:CD:FC:2B:A0:13:48:6C:85:2F:7E:B8:A5:E2:3B:9F:C9:38:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94a5ce68-bf77-3496-a0ec-ba8510d392d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:63:0c:1c:89:3b:ab:30:39:84:ef:d5:50:d7:b2:52:31:
         66:63:08:b7:bb:c7:7a:96:67:73:23:b0:4c:22:03:15:27:39:
         66:0b:0b:88:8a:b1:d4:c3:50:6f:d5:3e:a1:ab:60:fb:a7:55:
         0d:08:e9:49:24:93:b6:6b:bf:30:3d:e0:04:70:1e:07:d9:39:
         56:5b:55:22:88:8c:07:5a:d7:e7:f3:2e:c2:74:6e:d4:3a:ee:
         18:27:72:d3:f1:e5:6b:7c:54:8d:3d:df:a9:d6:fe:5a:91:d7:
         23:00:5b:88:47:05:8c:57:3f:fb:37:a1:a2:bb:b1:7e:db:76:
         21:17:b7:5a:f2:88:3a:b3:10:23:63:bb:1b:55:eb:2c:2d:dd:
         6a:3e:99:a3:fa:eb:43:51:4d:c5:e5:ba:c8:fa:9c:11:5a:50:
         d2:16:70:d7:e1:0f:54:fa:57:5a:08:14:b9:af:92:70:e3:3e:
         f3:df:6c:c5:28:b3:ab:cf:44:f7:0f:bc:5f:90:32:10:16:9c:
         f8:b7:6d:fb:d7:56:da:18:6c:24:f9:59:e6:90:e9:65:06:37:
         15:40:11:80:f2:be:1b:d4:8c:9a:b1:ac:55:84:26:3e:32:d4:
         8f:9e:ea:57:e3:39:17:23:53:03:ec:b9:40:1a:bc:b2:6f:43:
         69:42:91:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3FqA0+IggNpQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
Yjg3MWFlMmQtMmQ1OS00ZTVlLWFmMDYtMjIxOTQyOWYwNmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2xGq9dLhQJO+I61NNnsv3vyVnxUP5S5lc2i
sHdxSv1Sq+kaOyynzvVEmhMFDEOMovvA6s/u08SIA3qrdpeMDRsjGTqV5IHonasQ
NpKIpz5FFw9tCRb2eIiHs2LlASY0zt/CYl2XaKoopwBMHSFKyZMpb3cLInL/P9Ve
VGu/qG3HdjYeSSe6+c5DA/ROj7wwW3mzcR+OK1VQznSMcT2gH/qwuc1fcAc3C7TW
31yz0nA0BfrWKL86WJKEv2+uWu7jGZJUt73XHcQncoOJn3WHoAHjnNWrHEtHctuw
EDghBg72i7sys3cBJKQsMwTWtah8Bb1FvTv2WaHi7UeApmHBfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCQzfwroBNIbIUvfril4jufyTh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTRhNWNlNjgtYmY3Ny0z
NDk2LWEwZWMtYmE4NTEwZDM5MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVOYwwciTurMDmE79VQ17JSMWZjCLe7x3qWZ3MjsEwiAxUnOWYLC4iK
sdTDUG/VPqGrYPunVQ0I6Ukkk7ZrvzA94ARwHgfZOVZbVSKIjAda1+fzLsJ0btQ6
7hgnctPx5Wt8VI0936nW/lqR1yMAW4hHBYxXP/s3oaK7sX7bdiEXt1ryiDqzECNj
uxtV6ywt3Wo+maP660NRTcXlusj6nBFaUNIWcNfhD1T6V1oIFLmvknDjPvPfbMUo
s6vPRPcPvF+QMhAWnPi3bfvXVtoYbCT5WeaQ6WUGNxVAEYDyvhvUjJqxrFWEJj4y
1I+e6lfjORcjUwPsuUAavLJvQ2lCkVA=
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:03:25 2026 by rpki-client