Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c11bc0ca-f7a7-353f-abd1-afeb9c54314f.roa
File:                     c11bc0ca-f7a7-353f-abd1-afeb9c54314f.roa (raw, json)
Hash identifier:          atSYsFkSSfPB7m5Mxwu/hwdIyyoQaht7yz0uy+fwBxw=
Subject key identifier:   CF:7F:0A:60:56:73:C4:4E:0E:56:2B:95:40:1D:72:1D:87:FA:1A:E3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF71772528AA4E2F12D4BE760
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c11bc0ca-f7a7-353f-abd1-afeb9c54314f.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3360
IP address blocks:        130.174.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:72:52:8a:a4:e2:f1:2d:4b:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=61477379-a8f9-4d92-9dd4-596e6ebbda8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:8c:19:6c:17:6b:04:a5:6d:0d:8a:88:08:
                    cc:23:52:2c:39:e3:5b:f9:cd:3c:c0:c8:dc:b3:86:
                    5f:2d:f3:8e:b2:d4:ea:c2:ac:93:8a:11:57:86:57:
                    2d:f4:57:60:af:ec:cd:79:45:91:3c:b7:ae:f6:35:
                    a3:03:02:70:72:e9:5a:0c:2c:11:c9:c4:a6:c0:a9:
                    9c:48:cf:41:36:c3:aa:6e:40:ec:97:43:1b:c1:69:
                    44:9a:6c:9b:26:b4:9a:31:24:d0:99:fe:0e:e2:44:
                    e9:e0:e3:e8:e3:04:45:c1:e4:16:18:91:e7:48:ec:
                    cc:c7:b1:e8:10:e6:90:30:25:b4:69:bc:8e:e2:06:
                    35:1c:ae:e4:25:69:7b:2f:6b:4b:7d:e2:e5:af:33:
                    a0:cf:52:72:bd:a9:2f:97:b8:4f:03:cc:c5:65:0a:
                    7c:8e:9f:e4:79:f0:d3:2a:2f:2f:69:c9:4a:21:32:
                    71:ec:e7:48:43:6c:72:d1:0b:16:2f:d3:48:48:7b:
                    b8:cb:b3:d0:27:2b:e1:fc:3f:e9:7e:89:30:e1:d4:
                    cd:12:f3:be:79:e2:36:a1:de:26:50:d0:0d:a2:91:
                    e5:f2:c8:41:3f:b0:86:29:c1:ee:b9:be:be:0a:56:
                    3a:40:a3:2c:72:77:62:8f:02:21:53:42:04:6e:60:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7F:0A:60:56:73:C4:4E:0E:56:2B:95:40:1D:72:1D:87:FA:1A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c11bc0ca-f7a7-353f-abd1-afeb9c54314f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e3:f6:8b:f1:2a:1b:98:06:51:bf:db:92:2a:f0:d2:79:32:
         e3:48:03:8d:da:c1:a0:56:2a:a0:13:f1:88:99:62:03:d4:86:
         e7:43:46:50:a1:5c:45:d1:42:a1:b4:35:0a:d7:93:8a:f2:e7:
         aa:70:a4:bd:7f:41:cb:54:25:f4:6b:d7:69:2a:80:33:e3:ac:
         15:a6:4c:71:46:9f:72:af:20:7a:b4:31:a3:d0:40:82:26:3d:
         60:80:90:02:81:cb:0e:b9:e6:99:e1:6f:b5:fc:58:37:e5:21:
         a2:34:ad:f8:42:0c:56:7b:f2:3a:bc:dd:45:7e:c9:f2:f1:36:
         35:fb:9b:98:23:7b:3d:4b:53:bf:52:db:05:45:54:1f:13:75:
         3c:da:23:e0:8a:17:ac:f0:6f:77:ea:b7:d4:a2:4f:31:6d:2e:
         0a:2a:89:41:b8:92:7c:99:78:d4:be:af:39:ab:2e:52:68:27:
         e5:18:2c:36:58:28:cf:d7:3d:7a:da:36:da:82:c5:a8:b4:00:
         21:d1:68:bc:70:72:1a:38:ed:e3:09:af:56:67:0e:15:23:21:
         9b:ee:55:c6:f6:90:03:57:56:bb:13:2c:41:e1:75:a2:7f:32:
         cd:0a:a9:a9:d4:eb:7e:2e:36:29:eb:5c:30:d7:d2:0a:b4:0c:
         c3:47:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:14:56 2026 by rpki-client