Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa
File:                     d6456c5f-35f6-34a3-88e6-09296cb70725.roa (raw, json)
Hash identifier:          slOC2ncvj4cpJAJlacxYqulanw1oTrWHU2aFEUWiUqA=
Subject key identifier:   BE:CD:C3:CE:5B:9D:2B:F1:79:32:B9:51:7E:5F:29:5D:0B:59:E9:09
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F9A686BF2B50987995A6E30C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     203
IP address blocks:        130.174.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:6b:f2:b5:09:87:99:5a:6e:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=4f61fb4c-a739-4679-9c1d-a1c4e6e65ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:31:bd:a0:03:ce:89:73:b0:34:7c:ef:60:
                    7d:49:59:ac:22:b6:2a:37:89:06:8d:46:cf:cc:7f:
                    61:8c:4e:9c:cf:fa:94:c2:87:d0:9b:ac:2d:6c:23:
                    da:12:d2:93:cd:d7:dc:c8:06:b0:83:02:3a:3e:17:
                    8b:e2:aa:15:e1:58:77:78:28:f0:5a:3f:e1:42:22:
                    65:ba:36:9c:25:a7:39:71:7e:a3:cf:3b:e1:eb:bf:
                    4f:df:bd:3b:4b:35:18:2e:f0:5f:93:7a:f0:a4:77:
                    a6:89:f1:c7:4e:f3:5e:25:c4:28:19:38:a9:c5:d2:
                    8f:d5:19:83:dc:40:14:ef:9f:bf:73:bc:f4:53:c2:
                    7c:65:0c:40:f1:83:81:b6:d8:88:b1:f2:21:f3:90:
                    12:6b:59:51:88:aa:41:67:83:f0:c5:45:fe:cb:20:
                    7f:3e:df:53:ff:a8:c7:62:ea:0b:18:04:cb:90:90:
                    de:59:b1:4b:49:7b:24:97:fa:62:5f:ef:41:40:d3:
                    2c:df:42:21:4d:89:f5:ae:34:59:7a:00:46:c2:3b:
                    b2:fd:27:cb:f4:ea:ba:b7:21:c3:f4:5b:b9:f6:25:
                    bb:38:cb:f2:64:ed:31:b4:0e:da:a9:15:65:49:17:
                    e6:dd:dd:63:af:15:53:5f:51:0a:e7:55:0e:bd:44:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CD:C3:CE:5B:9D:2B:F1:79:32:B9:51:7E:5F:29:5D:0B:59:E9:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:3e:80:00:c7:7a:73:a9:b7:32:2c:22:7f:ad:be:8b:f9:8d:
         cc:37:4a:ef:60:46:e2:aa:f6:a9:97:e1:b5:e4:72:ec:e8:85:
         e7:48:93:49:f9:a0:3c:39:7f:22:de:9c:cb:02:cd:ad:7c:5c:
         14:d6:a7:c3:55:b7:15:c2:30:1b:c3:5d:2b:9a:6d:80:81:a7:
         2c:44:6f:f7:8a:a7:e8:0a:aa:20:6e:09:be:46:e7:2b:fc:49:
         1c:8c:c9:41:4e:c4:79:d7:ce:9e:30:77:8a:f7:1b:a3:40:6f:
         8b:f5:9d:22:09:82:16:37:62:bd:ae:76:cb:bc:e0:84:a2:aa:
         e8:d2:be:2f:f2:d5:ed:4c:64:b1:e7:ac:95:7a:e3:be:de:8c:
         2e:04:cf:a2:84:dd:b1:f1:c2:bf:85:99:00:47:63:c9:5f:b0:
         00:14:e5:6b:dc:4c:8d:96:3c:a6:09:65:67:f3:35:3a:53:3c:
         60:ae:b8:89:d0:32:b2:17:2b:37:ee:19:0e:b1:a4:10:f9:5f:
         5d:5b:4a:df:e1:52:06:db:73:7d:ff:1d:a7:fb:79:7b:ac:47:
         d2:83:aa:6e:34:39:17:d6:ea:c3:53:9f:ee:ed:21:6a:51:4c:
         6f:b4:6b:06:7e:8c:bc:c1:f5:d9:ca:34:03:6e:a9:1a:2c:16:
         22:98:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:38:40 2026 by rpki-client