Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa
File:                     98a28125-0165-31f7-a265-0615bd186c6e.roa (raw, json)
Hash identifier:          znGPSmZzg2Zz9fK0HXrLP/3QHDbuDX+YgJXW3Qo8bfI=
Subject key identifier:   82:26:78:31:F8:16:A3:A6:50:D1:E3:7B:DD:4B:8D:32:FB:59:9F:D4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7CB3C21C37C86CE2877C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     3356
IP address blocks:        130.174.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:cb:3c:21:c3:7c:86:ce:28:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=ea447ed3-6978-4a8f-9e8c-322fc0c193fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:70:96:6b:7d:24:c1:a2:0f:46:04:df:ee:
                    91:29:0f:7f:7c:af:7c:35:c8:04:07:67:24:d4:e5:
                    f2:9e:b4:a0:31:b9:88:63:55:3e:bf:18:c0:b7:75:
                    b8:e9:b7:19:59:08:01:c4:4c:32:35:2e:b0:61:a7:
                    ee:81:37:de:f5:29:04:83:bb:1f:f8:f3:9a:7f:c6:
                    86:e9:77:03:67:f9:10:78:37:ed:f0:66:1d:ef:b7:
                    65:20:e1:2d:37:46:03:3f:79:79:9e:ce:20:bb:1f:
                    82:8b:be:53:2d:3d:68:7c:60:cf:3d:72:1b:00:b0:
                    3e:62:cb:0e:79:e2:cc:1f:d6:72:b3:48:a8:d8:d6:
                    7b:74:91:d2:8d:aa:6d:a8:7e:06:fa:66:0b:af:73:
                    60:91:6f:c5:43:74:79:e9:5f:5c:17:85:92:66:33:
                    7e:fe:91:d1:86:ca:f0:77:9e:76:a9:40:05:83:95:
                    a8:51:2a:9e:d7:1f:07:b0:fb:2f:ee:f6:ba:b3:6c:
                    f2:21:61:5a:5c:96:e9:49:03:5a:ee:8a:d5:cf:54:
                    63:e5:de:b9:55:1f:09:7d:0b:57:67:4f:00:ac:37:
                    c7:ce:17:0f:fd:80:00:8d:67:44:b3:66:a6:96:b8:
                    cc:d6:27:3e:1a:17:a9:cd:6d:7a:11:9a:20:ff:3b:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:26:78:31:F8:16:A3:A6:50:D1:E3:7B:DD:4B:8D:32:FB:59:9F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:f0:96:cd:99:88:17:d7:46:80:3f:d1:d3:4f:99:53:ff:
         a4:f2:42:12:e1:c4:69:35:6e:24:6f:87:6f:bd:92:91:27:1e:
         7d:f1:ea:97:08:b3:54:5b:11:ee:b2:9a:78:65:8f:dc:11:f9:
         14:03:22:95:1e:00:18:96:9c:53:ff:ba:62:5f:b1:9c:85:84:
         d3:41:38:b7:9f:3a:6c:6f:59:7b:96:e5:60:15:48:d7:66:80:
         65:cb:ef:ba:8e:75:87:f4:61:84:8b:6a:ec:5e:1b:b6:ef:eb:
         9a:1d:e1:55:6c:a7:48:bb:9d:d4:44:b1:8a:b2:88:bd:85:ef:
         f1:a0:4f:68:fa:b4:ff:45:73:1f:d4:e7:fa:5c:96:32:59:37:
         9b:aa:d3:09:66:08:bf:64:13:52:61:d2:88:16:8e:1d:48:dd:
         1b:70:ac:d0:20:fa:18:40:17:15:c9:2b:87:8f:fd:85:9f:a6:
         4a:5c:86:8c:89:ec:c1:b7:f2:5c:6c:e0:bd:9f:cc:bc:4c:71:
         d5:1c:ae:5d:f0:37:e6:86:f7:fa:8f:8b:28:88:32:68:f7:a1:
         55:b5:69:74:f7:94:13:5c:81:1f:f9:dc:08:62:2d:6a:f1:68:
         c9:7c:15:d4:dc:ce:11:cd:75:8e:e1:a4:58:ea:eb:14:76:14:
         f9:d1:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:12:38 2025 by rpki-client