Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af6881ae-39be-3ab5-8863-532369b6162a.roa
File:                     af6881ae-39be-3ab5-8863-532369b6162a.roa (raw, json)
Hash identifier:          5EkmtAj5dLjsm3kEZlA5xHDiN38Moc6h3thUMeGlbaM=
Subject key identifier:   8D:03:A7:D8:DA:97:22:78:11:98:19:3E:40:72:71:6C:4B:EC:E2:3E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AE4F7F4685F5D04ACBA214C80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af6881ae-39be-3ab5-8863-532369b6162a.roa
Signing time:             Mon 18 Aug 2025 06:04:40 +0000
ROA not before:           Mon 18 Aug 2025 06:04:40 +0000
ROA not after:            Sun 16 Nov 2025 07:04:40 +0000
asID:                     3356
IP address blocks:        130.174.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:f7:f4:68:5f:5d:04:ac:ba:21:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 18 06:04:40 2025 GMT
            Not After : Nov 16 07:04:40 2025 GMT
        Subject: CN=a7317b98-916e-4a4d-b103-8ac126555348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:38:00:15:cc:e8:43:10:df:c4:e8:3a:25:42:
                    9a:67:de:d4:ae:09:79:5a:81:81:00:12:11:62:2d:
                    41:89:05:e9:1f:02:b2:1a:38:58:a4:b5:a1:eb:29:
                    04:a4:06:46:c9:05:87:8e:d4:2b:90:39:e1:de:a4:
                    1e:84:5f:03:fc:c0:4d:93:fd:79:fb:68:50:92:ba:
                    98:76:71:d5:a3:c7:33:8e:cb:48:8d:0e:f3:86:fe:
                    f0:42:d3:ba:3b:11:83:4d:e2:f5:ef:42:11:2f:e6:
                    8d:89:f9:02:b6:39:23:b6:0b:31:cb:3a:bb:1a:19:
                    cc:9b:46:9a:59:60:2f:ec:ae:4d:69:af:ca:b0:97:
                    4d:5e:06:6d:0d:22:79:f6:52:b5:3a:f6:de:8c:60:
                    2e:be:05:5e:ca:81:0b:8c:5e:0f:29:75:33:fb:da:
                    ab:ee:14:c9:58:0b:d2:71:e9:7b:bf:6a:0a:47:85:
                    89:0c:a7:48:48:a1:96:ca:c5:7a:7e:22:71:43:10:
                    79:67:b2:6d:a7:db:6d:18:e9:80:3d:dc:b8:04:6f:
                    d7:13:05:6f:da:c7:ba:43:dc:68:2c:86:c9:bb:65:
                    65:38:86:e6:35:73:e4:49:e1:04:bd:7b:f8:51:09:
                    57:ef:09:5a:de:a0:20:98:be:f2:64:7e:38:7a:d3:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:A7:D8:DA:97:22:78:11:98:19:3E:40:72:71:6C:4B:EC:E2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af6881ae-39be-3ab5-8863-532369b6162a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d8:4c:34:25:89:b5:d6:0f:b2:91:fb:ea:09:6d:0f:d1:59:
         56:f0:3c:82:2c:f1:b4:26:84:af:ba:e9:48:58:ca:f3:7d:02:
         7e:17:64:44:8f:3f:0e:a3:28:07:33:f7:aa:ad:69:25:ef:08:
         33:4e:2d:e7:8b:ac:35:1f:46:a5:f4:80:27:0a:83:ae:63:f5:
         5c:7c:15:26:a0:b2:25:4b:f9:dc:90:cd:54:8f:28:34:2e:95:
         13:6f:2e:20:9a:fa:49:88:ab:a9:01:55:24:b0:73:26:2d:7b:
         10:7d:df:42:ab:b8:2d:68:5e:6b:35:44:b0:f8:ed:37:fe:e3:
         48:e4:05:e8:a7:43:de:e7:18:7e:84:eb:a2:73:c1:61:3c:9e:
         50:57:10:05:7e:2a:cc:1d:37:12:f3:b5:c8:82:56:44:7e:a7:
         1b:00:7d:25:d7:47:a4:85:1f:43:ee:5a:a3:df:4b:db:8e:d0:
         a2:f3:72:65:8a:c0:c6:7b:8a:6e:76:27:35:37:94:ea:49:66:
         93:4f:93:46:cd:11:29:28:7a:a8:5a:87:39:f9:60:e6:35:e7:
         31:df:82:f2:2b:85:8f:47:0d:06:ee:10:31:3a:18:ea:0c:c5:
         4e:1c:cc:a6:7c:b0:16:85:51:6a:99:9f:3e:8e:60:82:65:3f:
         39:e6:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 12:01:10 2025 by rpki-client