Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9af65a08-2f98-3fb6-9620-9c412405ce58.roa
File:                     9af65a08-2f98-3fb6-9620-9c412405ce58.roa (raw, json)
Hash identifier:          54/kGGyixX6LfiL0LQ7WkxzVY/He7mE3DwvkptCIbPs=
Subject key identifier:   72:D5:9C:BC:E8:F4:19:A7:2F:60:9D:B2:C6:D2:A6:8B:4C:6A:52:0A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E4C54AE792BC2FDA5980FBB20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9af65a08-2f98-3fb6-9620-9c412405ce58.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     3360
IP address blocks:        130.174.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:ae:79:2b:c2:fd:a5:98:0f:bb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=a31f9478-e8e2-4a21-97fe-fbc72ed4a849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:89:cb:09:49:83:3a:41:79:9c:1e:c1:0c:
                    ff:4b:13:2f:e7:e4:c0:9f:41:ef:6c:76:38:20:36:
                    2c:8e:d1:96:cd:23:1c:f1:23:30:92:06:32:f0:76:
                    65:9b:9a:b8:97:d7:96:56:fe:12:04:10:cc:a6:36:
                    f7:d7:0d:26:10:1d:a1:76:5a:e7:e8:c4:8f:c7:19:
                    fe:de:8c:c0:58:05:fd:2b:2a:c9:e2:c0:51:fe:6a:
                    70:c6:84:15:44:c4:fa:d0:67:2a:0d:5c:83:8f:1a:
                    9a:79:35:03:74:9b:52:4e:e8:9d:af:ec:6d:05:1e:
                    e9:a9:62:6c:fe:47:4f:13:e7:fd:86:74:ff:a3:e1:
                    a6:8c:50:ef:7e:0c:08:03:10:ec:0a:a8:52:2a:80:
                    32:fd:58:82:ef:2b:e9:15:b0:31:b0:e4:2d:14:a8:
                    36:e8:7b:c3:e2:e1:4b:e7:79:c3:64:28:22:17:ab:
                    f4:56:8f:3a:56:98:24:e3:b4:76:1d:12:bd:bd:98:
                    f7:d8:50:ae:f2:4a:37:0c:3d:ca:a4:d8:aa:48:45:
                    0a:82:ef:4e:02:50:5a:4d:9f:58:d1:87:a5:9e:38:
                    97:d1:2e:d4:58:f5:89:52:e8:e9:8d:5d:6c:30:aa:
                    4a:b4:b5:14:df:c8:5c:6b:5b:f1:c0:b5:69:8e:4b:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D5:9C:BC:E8:F4:19:A7:2F:60:9D:B2:C6:D2:A6:8B:4C:6A:52:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9af65a08-2f98-3fb6-9620-9c412405ce58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:aa:6f:29:17:f1:ab:da:ca:d0:a8:81:12:80:43:8a:2a:
         f9:3a:65:6a:af:8e:36:df:05:e3:5a:fd:b3:af:55:5e:d9:da:
         f8:95:34:31:fb:37:78:0d:47:03:30:fd:8c:78:cf:24:85:24:
         dc:2a:ad:91:8a:0e:b6:2b:80:07:fa:b2:2e:12:ba:2e:6e:c4:
         94:d7:4e:87:a6:b2:c9:8a:a4:27:4d:3f:56:27:dc:c3:26:66:
         f5:04:43:7b:9a:ae:a2:c1:c1:b8:78:d2:8d:b9:b5:6c:26:68:
         6f:0d:26:65:13:fe:42:43:ed:4e:b9:67:d8:66:69:78:c9:98:
         1b:7d:57:e6:4a:14:87:0c:f4:24:79:75:9a:60:ac:0d:f3:39:
         34:3f:8f:5e:48:6c:3a:43:2b:91:b1:ae:ba:2b:00:12:18:a7:
         ff:00:d8:bd:ca:d3:a8:94:23:dd:43:23:92:a3:a0:f0:4e:6b:
         c8:ec:34:52:d9:e4:f3:2c:86:0c:e5:3c:17:3b:1a:cb:9a:1c:
         5d:fd:c7:80:cf:5d:d6:0b:ca:30:85:d3:9f:92:7a:b2:e0:70:
         41:a7:83:bf:1f:3a:9e:81:b9:67:51:47:ba:fa:ff:12:c9:df:
         32:58:05:ab:51:f8:47:0b:3e:a0:9f:09:c0:0f:78:cd:85:5d:
         7d:4b:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 07:05:11 2026 by rpki-client