Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5fc118c-ca52-32a5-9086-19c6b9b777ea.roa
File:                     e5fc118c-ca52-32a5-9086-19c6b9b777ea.roa (raw, json)
Hash identifier:          YuDVmcMt+GS5sapTFOjtBqzvJQEt4alMvaSiGa2DyQU=
Subject key identifier:   43:3D:5C:13:F6:87:D1:69:37:1A:17:C9:5B:95:1A:E4:D5:F1:2B:DA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7B4B7F41E9C5E3D9B89C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5fc118c-ca52-32a5-9086-19c6b9b777ea.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     3356
IP address blocks:        130.174.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b4:b7:f4:1e:9c:5e:3d:9b:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=74dc19da-9959-4c84-b38e-902df411d832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:38:c5:0d:af:51:da:1a:ae:3c:6b:ce:05:
                    aa:db:64:f3:4d:65:37:2f:d6:62:db:e3:b9:18:64:
                    df:df:dc:f8:61:f3:c0:53:6a:21:44:75:72:42:6b:
                    3e:2f:01:36:ea:8f:91:76:b1:ea:f3:d8:dd:67:c7:
                    7c:1f:7e:d3:f5:52:0c:df:d6:fe:51:1b:52:bf:2d:
                    75:b9:a5:cd:26:77:71:b7:9e:a3:da:f9:53:8c:7a:
                    78:60:0d:b1:2e:95:b7:33:8f:ff:96:f1:9f:86:f7:
                    53:3a:a8:27:94:d1:03:a9:0a:be:3c:3a:9f:fd:31:
                    b1:89:af:84:08:21:d2:9e:23:59:2c:8a:d1:f8:ab:
                    f5:29:b7:cb:9c:1a:2c:08:fa:e6:ec:48:bb:3d:ee:
                    27:4e:ab:7d:38:1d:33:6a:bb:49:33:5d:ff:d7:fb:
                    29:1d:cf:53:77:d8:45:aa:58:d4:24:4b:58:7d:22:
                    b2:5b:54:39:af:24:39:5d:61:79:4b:a3:b8:f2:5e:
                    a4:61:cb:de:28:f4:35:9f:7e:d4:0e:23:ab:4d:b2:
                    a2:dc:e0:d9:60:65:d7:12:fe:85:a2:94:0b:16:67:
                    b9:a2:51:01:37:8c:31:2d:8d:fd:c2:ba:b2:f0:78:
                    b9:c2:c3:2f:16:38:75:6b:06:97:bd:75:00:90:1b:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3D:5C:13:F6:87:D1:69:37:1A:17:C9:5B:95:1A:E4:D5:F1:2B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5fc118c-ca52-32a5-9086-19c6b9b777ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:af:05:bb:0d:0b:65:45:51:3a:6a:37:07:a4:ff:64:87:
         6d:95:59:71:a4:cd:21:c8:1a:05:de:87:dc:23:61:81:6d:20:
         f9:63:1f:38:c7:ae:fc:cc:79:b2:2d:93:6e:b9:a2:22:b2:89:
         5e:7f:58:d0:1a:1a:b3:fc:fb:5d:71:d1:b9:f2:0e:df:a0:c5:
         1b:fb:b7:94:06:a5:a9:51:aa:9e:74:d6:5c:f9:67:bf:87:ad:
         7d:7d:9e:c9:9b:2e:80:da:68:90:eb:77:c1:2b:32:90:dc:a9:
         14:79:5a:8a:d1:bc:9e:22:ea:78:3d:f9:0c:96:2d:e4:55:14:
         06:a6:72:aa:2b:ab:a0:ff:84:8d:d5:c7:42:bf:1d:28:1c:26:
         e7:e3:29:df:5c:f9:9a:94:36:06:67:8e:ea:28:69:d9:5a:4b:
         13:ef:07:9a:31:d2:30:f0:ae:52:67:d9:a1:5b:a0:df:a8:35:
         58:02:bf:b5:3b:bb:82:81:42:f7:75:fc:04:c9:f0:f1:5d:e9:
         f1:c9:7d:6e:26:a9:cc:cd:a1:46:96:2b:d6:5f:dc:1f:96:ae:
         ad:43:e6:ac:53:06:5d:e7:c6:ef:7f:d4:86:e9:4b:e8:e7:b4:
         06:c1:1d:da:fa:c6:07:5b:0d:97:ba:0c:33:e6:d1:fc:b8:82:
         8d:c7:b5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:12:16 2025 by rpki-client