Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa
File:                     d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa (raw, json)
Hash identifier:          7YLwiZpTmGKa51IPHZ7G2t70WtmPzprn4zVH3uIcwqA=
Subject key identifier:   10:0D:15:92:4C:A4:6A:79:61:8F:6E:EA:F4:AE:C0:B9:15:0E:B6:29
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D20A55FE785A985FEDD80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     203
IP address blocks:        130.174.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:20:a5:5f:e7:85:a9:85:fe:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=3323a8b9-01fb-48ed-b5d4-ff8133ef7e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:c5:81:45:ef:c4:50:c0:9f:9d:e0:d2:74:
                    7d:9e:40:fd:f2:7d:63:fc:0d:e3:92:b6:13:0e:4f:
                    3c:d0:25:c3:44:09:14:fe:9c:9d:bd:54:a5:47:97:
                    91:37:3c:23:56:76:34:96:ed:27:20:86:00:9a:e3:
                    11:f3:d5:22:61:4e:44:c0:9c:44:f2:72:a0:53:8c:
                    5e:10:c9:1f:c1:14:fd:d0:88:ad:df:f0:c1:50:a2:
                    25:8c:41:da:a6:fd:d3:42:2c:f3:88:8c:69:63:3d:
                    67:0d:18:7e:85:b7:a2:9f:8d:9a:87:c5:c0:58:6b:
                    89:bc:0e:01:4e:1b:06:66:fb:33:a5:17:6e:45:85:
                    02:fd:67:ac:58:cb:f8:c1:78:51:67:fe:4e:4b:3f:
                    43:f8:49:04:09:2e:aa:82:c3:f3:29:1b:6e:28:86:
                    c8:3f:af:c7:e1:13:5b:92:ac:47:a4:26:1c:4c:3d:
                    c9:a3:b3:30:b2:00:89:fe:5e:a9:9b:08:ac:06:0d:
                    1e:db:ee:f1:bb:9c:4a:d3:c9:c2:3c:f7:3c:f1:9c:
                    74:ec:65:9d:66:c4:22:74:17:fa:2a:6a:a3:ee:28:
                    9e:74:66:9b:1f:ea:2b:ab:4b:ee:70:00:78:1e:27:
                    c6:c0:f4:81:6b:8a:f4:8d:3b:3a:cc:31:f6:fa:bb:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0D:15:92:4C:A4:6A:79:61:8F:6E:EA:F4:AE:C0:B9:15:0E:B6:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:dd:e1:ff:bc:14:c9:63:e0:0e:36:b6:52:20:0a:38:0b:27:
         15:d8:63:ae:d8:e8:33:dc:a5:35:a8:5e:de:ed:31:f8:b6:51:
         cd:c7:18:b8:29:ff:7b:dd:0e:53:e9:8a:86:14:6c:4d:23:c8:
         1e:d6:2c:95:6b:bf:41:a5:fa:da:d7:45:4c:b0:81:56:42:d0:
         43:34:18:a9:49:e1:84:82:1d:9c:c3:51:8f:51:4c:5a:7f:68:
         a9:5b:00:35:49:13:5b:e0:07:be:78:13:f0:f2:b4:0e:47:62:
         22:91:96:2b:29:8c:9f:73:54:e1:d8:a0:5a:46:eb:a8:f4:69:
         79:a5:97:0e:c5:c1:d3:18:a3:6a:26:a1:c0:7a:f2:87:ae:ce:
         bf:e4:d9:c3:94:32:26:cf:4a:66:38:df:81:15:49:56:f4:e1:
         bc:4a:7e:c7:f2:3e:bc:f0:a5:18:19:e3:a7:b3:fb:39:5f:26:
         38:a8:e3:b7:52:f3:aa:55:e1:65:11:ae:43:7f:5d:14:83:ea:
         3d:bf:d2:fe:66:cb:57:47:53:24:8a:28:a8:70:da:6d:bc:db:
         eb:4b:f5:97:a7:a1:eb:77:97:c0:ef:5b:69:11:a6:92:ad:fb:
         c3:df:b0:e5:2a:70:1a:b6:25:3f:08:c9:64:83:f1:16:21:9b:
         0f:78:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:12:15 2025 by rpki-client