Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb5342e9-1be1-34a0-bd36-0f717da400d8.roa
File:                     eb5342e9-1be1-34a0-bd36-0f717da400d8.roa (raw, json)
Hash identifier:          YHiXTUMQc0/es/E2UcLh0pRmC90g7fv6h8UUJUzzBlw=
Subject key identifier:   E4:BE:22:AC:96:46:CD:8A:5C:3C:56:8C:02:94:A2:29:E5:07:FC:1A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF71766CE0C821D62939608C8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb5342e9-1be1-34a0-bd36-0f717da400d8.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     203
IP address blocks:        130.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:66:ce:0c:82:1d:62:93:96:08:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=422826ee-e0aa-4307-a0e3-5f5182f481a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:f3:12:b3:6e:0f:e9:3a:3f:9a:96:99:a5:
                    6c:7c:8f:33:94:b2:27:bc:7a:70:bd:cd:52:2e:12:
                    8f:3e:a8:a9:d5:40:1a:3a:91:87:f6:57:2a:49:6e:
                    80:06:5b:c6:26:7c:51:cb:da:1d:7f:d2:03:9d:00:
                    54:ac:8c:22:9c:2e:78:f2:4a:88:9e:da:ac:f3:04:
                    7f:93:d3:90:64:49:60:c0:60:1c:ae:af:d3:db:af:
                    e5:34:8c:d8:0f:7c:d5:7b:db:2e:1d:90:a5:3e:53:
                    c9:49:ff:4d:0b:43:58:f4:bb:c0:df:5d:f7:90:7b:
                    b2:e1:64:70:43:1a:58:9a:23:b3:30:33:73:51:8a:
                    54:33:67:37:67:dd:84:5a:b0:7d:11:3c:51:ac:eb:
                    73:6c:91:8b:95:13:12:27:2c:1f:41:c0:1e:dd:06:
                    b1:bb:43:22:1e:ad:21:28:34:1b:b1:61:0b:3d:e7:
                    39:1c:31:03:e1:26:95:bd:a1:18:45:b7:bb:13:aa:
                    b5:11:04:7d:93:f2:2a:e3:56:66:77:8d:e2:7f:83:
                    da:4f:8d:35:cd:00:78:7e:0b:85:1e:c4:e7:ea:72:
                    58:48:94:d2:ca:1c:64:ed:48:ac:7b:f4:08:ee:1b:
                    a3:46:83:bf:11:6a:f1:14:3d:85:fb:1b:32:0a:e1:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BE:22:AC:96:46:CD:8A:5C:3C:56:8C:02:94:A2:29:E5:07:FC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb5342e9-1be1-34a0-bd36-0f717da400d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:b7:6e:02:bb:a7:9f:9f:f0:d3:b5:af:60:59:61:7f:f8:
         76:d5:d5:15:77:65:b9:b4:09:fa:b1:21:4a:28:fc:e1:a7:0c:
         44:9a:5c:c3:39:91:3f:00:0a:e6:bd:24:e7:e7:08:ce:90:39:
         bd:6f:75:a4:8d:42:6b:8f:89:21:9e:14:bc:ae:94:e7:5d:e9:
         a1:8c:97:e0:a2:43:2c:2f:01:72:bd:d6:da:bd:f9:96:e9:c7:
         ae:4a:63:51:3c:dd:3c:93:4a:6b:66:80:e2:46:7a:e2:a5:34:
         ac:c1:e4:39:41:54:75:6c:bb:41:4f:6f:f8:97:c2:a5:2b:99:
         24:36:a8:01:f8:ab:fe:94:26:76:cb:43:37:04:5f:c0:e8:80:
         d2:7b:dd:5a:96:d6:3b:29:8b:17:e2:b9:2a:1f:80:8e:91:20:
         1e:41:28:4d:cd:79:6a:93:d4:57:e3:85:e0:af:f8:ea:ef:b1:
         97:80:22:76:ff:a9:98:ed:e6:34:2c:1b:a8:40:7f:1c:e0:30:
         4f:b0:7e:f5:46:59:68:19:cd:d3:67:75:2e:ee:bf:28:4b:69:
         39:f5:87:c5:78:56:49:90:68:74:1c:93:1b:1b:01:eb:82:bc:
         f6:0f:68:09:4a:5c:4a:df:23:51:9a:41:4c:28:33:44:d3:c9:
         de:62:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:51:01 2026 by rpki-client