Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa
File:                     a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa (raw, json)
Hash identifier:          Q2NnksiF51ZEiqcHnydBKEeQ98/+2cPM39Yrmh5N1go=
Subject key identifier:   5C:F2:B8:64:EB:D2:12:FD:33:46:AD:F6:80:13:FA:A0:62:2C:DC:83
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F9A686D6F4270982726860980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     203
IP address blocks:        130.174.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:6d:6f:42:70:98:27:26:86:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=b29e339d-37d3-4903-b6ce-57d01e0fda1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:68:93:f9:d1:8c:33:6e:92:dc:e0:11:e8:bd:
                    ff:52:f6:7f:a4:35:32:fe:6c:27:4c:92:fc:3f:c2:
                    e2:c1:39:1c:d3:53:df:91:0c:db:aa:cc:dd:6d:c2:
                    0c:80:8f:8b:d5:c5:7f:eb:5d:31:23:6a:9c:47:90:
                    f9:79:59:e1:c6:ac:90:58:65:a5:3f:4b:3a:cd:6a:
                    6f:91:4f:bd:a1:f2:35:4e:1e:99:8b:ae:13:d8:95:
                    18:68:8a:fb:c5:c2:7a:34:2d:47:fe:eb:4a:87:c6:
                    fa:6b:3b:84:a5:3e:5b:ac:72:8e:3f:03:39:eb:3a:
                    43:06:1d:a8:62:c0:29:0d:b0:35:ce:69:df:40:4b:
                    05:2c:3d:59:a0:6b:bf:a4:d2:37:bb:89:bd:e8:f9:
                    42:33:c2:e5:d6:38:23:19:d2:3a:11:6e:98:0f:17:
                    c0:aa:0d:33:d8:9f:82:cc:9a:9c:85:43:01:3a:c0:
                    49:ee:ab:d1:0c:9d:7f:62:82:23:13:5e:2c:48:22:
                    47:21:76:17:ad:5e:41:16:6d:dc:33:47:8b:a0:fa:
                    84:76:53:a4:d7:49:27:b1:0e:5c:f4:67:88:53:a7:
                    91:bf:fd:d8:9c:2a:8b:5c:7b:5c:9e:67:39:92:f1:
                    a3:96:89:98:fd:24:b5:38:4d:36:6e:fa:cb:02:cb:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F2:B8:64:EB:D2:12:FD:33:46:AD:F6:80:13:FA:A0:62:2C:DC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:65:d6:6a:28:4c:29:2d:33:01:78:29:4d:1f:33:7d:04:14:
         a7:98:a7:f9:5d:89:68:19:66:14:3e:51:9f:ed:c9:01:f9:cb:
         21:02:cb:8e:4a:80:80:bc:60:af:af:de:48:e0:21:6a:4e:4e:
         a2:76:09:20:c6:31:78:e4:e4:bb:6f:20:57:8e:cf:bc:08:18:
         0e:e0:e2:b5:38:4b:23:24:99:bb:a6:15:84:ef:22:39:02:9c:
         4f:7f:6a:54:22:67:7f:01:70:c1:87:d8:79:df:ec:59:78:7c:
         ec:45:3d:94:8b:64:06:34:28:cb:20:1d:f4:2f:04:bb:8f:c6:
         ef:08:1d:6d:64:f5:8c:4d:5f:91:6f:ac:ee:1b:fc:bc:05:e6:
         95:65:24:ed:06:80:2c:c0:cc:fb:c4:d3:5e:3d:aa:80:a0:06:
         3d:29:39:6c:37:48:f9:33:07:9a:fe:34:ec:cc:d9:56:68:a7:
         d8:e1:63:3d:26:f2:34:3f:85:8d:ee:be:cf:3f:e3:6e:83:25:
         7e:d7:08:9a:8b:52:f8:27:54:da:b0:2a:5f:3c:b5:a2:ac:fe:
         89:73:75:07:3d:1c:95:87:82:8c:db:bf:6e:74:75:8e:71:0e:
         72:da:8d:2b:5c:38:0f:71:bc:1f:c9:63:cc:a8:aa:3a:0c:4d:
         ba:be:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:16:13 2026 by rpki-client