Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa
File:                     ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa (raw, json)
Hash identifier:          Bfn4649svDUTNJAnzZNG3sd7yUdivRVyIUltpSxOYlU=
Subject key identifier:   10:81:F4:39:C2:68:09:CE:A1:7D:D5:42:AB:60:2C:29:7F:DD:07:DB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CC50CF13E3F9F28B4D6A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     203
IP address blocks:        130.174.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:c5:0c:f1:3e:3f:9f:28:b4:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=b44c19dc-a720-4b2e-9dd1-dff477fd112f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:88:d6:49:c0:87:5f:2f:4b:04:37:7b:33:88:
                    78:eb:9c:9c:85:0f:00:0d:cf:ac:be:fa:de:69:da:
                    f2:00:79:2e:18:cb:29:30:f9:48:4b:32:a2:ee:29:
                    8d:79:ed:15:bf:f2:db:0b:66:0c:1f:78:fe:98:2d:
                    b8:b1:8c:6a:02:92:d0:3e:0a:d0:01:0f:dd:e2:91:
                    52:b7:39:8f:1e:74:79:f9:d3:cd:87:ae:88:80:7a:
                    73:5d:7e:7a:4b:95:d2:dc:a8:b2:e3:28:eb:c2:6b:
                    10:3f:b6:68:21:89:3c:c6:a3:7d:a6:76:45:ca:72:
                    e5:56:41:b6:3c:71:1f:55:c9:5e:87:06:ab:32:4f:
                    2a:39:2f:1c:4d:04:60:0a:fe:53:3d:5e:49:b3:39:
                    6c:16:39:91:c2:15:15:d3:e5:8b:19:06:74:db:e6:
                    c5:a9:cc:e6:3a:d7:67:f0:90:6b:e4:a7:57:3a:4d:
                    8d:43:e1:cd:e4:ed:5b:1d:75:1b:db:db:d3:94:5e:
                    a5:49:40:b9:8f:37:c0:32:70:ca:15:1f:88:89:2b:
                    95:36:d4:a4:5f:f8:d4:21:6d:5d:28:22:69:cc:f2:
                    e8:51:91:b1:3c:0a:2e:0f:65:27:51:42:5d:72:a0:
                    45:4d:02:31:93:1d:39:6f:1e:28:c8:96:1c:20:53:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:81:F4:39:C2:68:09:CE:A1:7D:D5:42:AB:60:2C:29:7F:DD:07:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:49:9e:da:86:a6:28:d8:4d:f2:c1:72:d8:4d:87:55:18:6c:
         23:4e:bd:2a:aa:57:fb:b8:9a:3f:cf:04:7d:f2:15:09:db:fd:
         06:3c:de:38:18:9d:e3:f3:75:49:15:46:6f:f9:93:9b:b5:4e:
         ec:04:28:28:26:62:cc:53:cd:b1:ca:22:fa:4b:5b:ea:f7:33:
         91:f3:c4:fa:c4:46:80:f4:8b:ce:2a:09:60:c9:72:5c:66:5f:
         db:25:c1:19:0c:73:e3:34:e9:8f:cf:a6:6c:29:3c:ff:40:a3:
         92:f7:8a:c7:38:2e:d2:5c:de:c4:68:ec:f3:61:0b:d2:ed:d3:
         41:0b:c9:c1:33:4f:79:0c:1c:9d:33:76:36:d0:de:a2:f0:4e:
         89:2c:f0:99:9d:b7:60:5e:e2:5b:b3:76:f5:c4:92:32:b3:50:
         41:75:97:59:30:21:ca:14:14:29:77:a9:52:92:87:91:f2:1b:
         d3:27:3a:11:2a:60:5b:5b:40:dd:27:7c:65:14:d0:6f:fb:4a:
         cf:23:e3:77:2f:fe:32:2d:0f:f5:bf:28:ab:2f:8f:cf:3d:69:
         ff:8a:00:83:01:5b:7e:04:99:2e:c1:80:9c:8d:56:9d:d5:a5:
         fa:5e:3c:9b:57:8e:27:03:32:26:15:78:20:03:f7:2d:ee:bf:
         33:a8:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:49:46 2026 by rpki-client