Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98309cba-d726-307a-aa36-24234d2dfdfd.roa
File:                     98309cba-d726-307a-aa36-24234d2dfdfd.roa (raw, json)
Hash identifier:          9gmOxRY7v8K2a8g8vYlrT+xsX8gN8hxdTWcLEcOwC1o=
Subject key identifier:   02:EC:87:DD:2B:6D:AE:D0:8B:2F:24:8E:21:C7:A2:EC:E0:1F:02:BD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF71771D89B3A5EC0195B0D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98309cba-d726-307a-aa36-24234d2dfdfd.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     202
IP address blocks:        130.174.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:71:d8:9b:3a:5e:c0:19:5b:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=7cf71dc1-0584-43d1-aa19-ea6e362791b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:26:62:a6:58:f5:66:44:67:37:e4:c3:10:
                    d1:11:1b:51:a0:17:99:b0:e6:06:e8:c0:52:bb:ef:
                    c8:44:32:79:e8:71:0f:d9:45:15:e4:d5:cd:1e:ff:
                    e1:5a:b6:86:1e:33:fe:a0:60:6c:41:84:4f:e6:e4:
                    9f:bc:e9:92:da:8b:19:7a:82:08:fe:54:8c:aa:38:
                    c6:ff:ed:d3:a0:5e:c2:0b:31:ca:da:d6:30:c5:99:
                    14:7f:17:62:e1:82:b8:c7:c0:bd:ca:4b:78:5e:b1:
                    fc:4e:fe:42:88:bd:d5:24:cb:87:d5:34:10:6b:40:
                    2d:06:c1:89:e9:d7:69:f7:a5:0d:b6:2a:c9:df:ec:
                    ef:e5:8a:bd:fa:bc:89:cb:0a:94:02:a1:3f:58:12:
                    5d:c6:58:b6:67:07:cf:90:c2:7e:41:3e:a4:a8:05:
                    0d:3d:de:cf:33:ea:87:cd:5f:e4:1a:fa:fc:3e:c8:
                    53:b5:22:fb:94:87:20:5d:41:1b:5d:5a:fa:1c:49:
                    c0:73:71:3b:37:74:60:ea:53:4e:70:ca:59:de:3f:
                    dc:5d:cb:84:97:92:22:d0:c1:a1:ba:97:e3:72:f7:
                    5f:64:5f:27:6b:00:c9:e2:b3:7d:66:53:ab:71:e1:
                    c1:36:5a:dd:58:53:6b:f4:1e:03:36:a4:39:5e:79:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EC:87:DD:2B:6D:AE:D0:8B:2F:24:8E:21:C7:A2:EC:E0:1F:02:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98309cba-d726-307a-aa36-24234d2dfdfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3c:68:be:1f:7a:31:96:f9:41:12:6f:d2:78:9e:aa:29:4c:
         d0:25:b0:54:4f:5e:dd:ba:e9:bf:d9:c7:fb:1e:e4:75:f1:09:
         59:9b:2a:18:6f:80:5d:36:aa:c2:95:20:ce:50:7b:f3:4f:20:
         b5:be:16:4c:84:45:c1:a7:3c:84:ce:6a:6b:73:3a:98:b1:d4:
         0f:17:32:17:0d:5e:10:a1:69:4e:53:fb:82:8d:f8:6c:4f:81:
         fc:68:f9:84:e8:7e:38:2f:b9:82:3d:b4:bf:93:d6:d5:07:db:
         46:17:20:2e:23:c0:17:b3:0c:37:2e:28:dd:85:f4:2a:83:46:
         b1:e1:e6:39:9b:cb:8f:aa:9a:af:22:1c:05:d4:a0:cd:24:cb:
         5d:01:dc:96:f2:a7:7a:dc:ae:bc:84:13:ef:28:39:3f:07:a5:
         3c:44:e9:12:4a:f6:6d:b3:4d:cf:43:a3:3f:60:bf:19:0b:83:
         ee:3b:1f:6b:d6:c7:98:a5:29:3d:02:f3:7e:fc:41:a0:d5:52:
         b5:ce:1b:ed:29:23:89:30:37:9e:e0:c1:48:b3:d6:9e:d0:44:
         a4:ca:9f:aa:b9:bf:f6:de:06:e9:b5:04:30:c1:23:33:16:cd:
         a9:ec:15:59:16:ed:d5:e3:36:7b:9e:be:8f:8c:fd:0f:f1:d0:
         24:75:e3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:41:35 2026 by rpki-client