Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8ec4a5a-c642-37db-bc1f-963dc302d809.roa
File:                     f8ec4a5a-c642-37db-bc1f-963dc302d809.roa (raw, json)
Hash identifier:          +d0U5yjptYKIJTENs1Dworunannlkbvj+L01zek13WE=
Subject key identifier:   A8:71:36:0D:BF:7A:60:A9:83:8E:16:89:28:56:38:E9:DC:C4:3B:80
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BAA97B1D46AAA3E28E1B8CE80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8ec4a5a-c642-37db-bc1f-963dc302d809.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     3360
IP address blocks:        130.174.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:b1:d4:6a:aa:3e:28:e1:b8:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=cdd902d2-4a97-4468-9058-21340b58279e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:9b:0c:ad:62:5c:52:80:35:8b:b6:04:a4:
                    da:85:a6:b6:3e:12:6a:38:e2:25:df:e5:1a:ae:f0:
                    30:57:a4:8a:d5:25:0f:f2:b6:88:7e:0e:ec:9b:6c:
                    9b:91:14:c3:16:d7:cb:80:bf:07:d1:aa:85:6d:dd:
                    ff:65:96:cb:d9:bf:29:46:f8:ff:f3:05:e8:cb:d5:
                    1a:8a:99:85:ac:cf:39:a9:41:4c:6f:ce:ba:3f:96:
                    ee:ce:8e:9e:23:db:60:d7:66:80:ff:bc:f0:94:c7:
                    ab:3d:4d:53:f4:67:42:9e:55:b1:b0:e2:a1:80:3e:
                    a1:6a:8f:ad:18:5f:ea:3b:c1:ad:69:55:b9:8a:5b:
                    35:cb:34:78:45:cf:ad:1c:0d:30:65:2e:6d:c8:4f:
                    c4:d5:5d:9c:94:b0:2f:15:ed:41:e3:28:8d:56:06:
                    89:96:e0:50:aa:6d:03:2f:79:e4:80:b1:97:ec:58:
                    e2:32:eb:0c:29:a6:78:ce:1c:a2:5a:98:01:d1:5b:
                    c5:1a:a2:2b:b8:b3:7d:d2:3e:ef:ec:86:b3:6e:46:
                    ad:67:2d:21:3f:40:3d:0e:cf:f7:5a:2e:ed:82:91:
                    0b:e2:d6:11:16:a0:84:c5:07:b3:ff:e5:5b:cf:21:
                    d9:4b:97:43:40:dd:8a:91:eb:a2:c7:ef:0f:61:76:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:71:36:0D:BF:7A:60:A9:83:8E:16:89:28:56:38:E9:DC:C4:3B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8ec4a5a-c642-37db-bc1f-963dc302d809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:63:cf:95:17:fc:37:e9:d9:8c:b8:ad:98:63:27:a2:48:
         65:66:b9:f2:3d:c6:b4:ac:cb:bb:e5:25:db:cd:21:07:1b:fb:
         cd:ea:6b:3f:e3:fa:a7:86:0a:74:92:79:9d:47:0b:4b:cd:4b:
         3c:5a:c3:9a:8d:b6:c2:27:0f:14:27:43:04:6e:96:26:a4:8f:
         52:b2:98:23:6b:08:37:9b:dd:05:b8:a7:45:ff:b0:f7:db:6c:
         5a:19:d6:b7:e8:bd:dc:85:16:5a:2c:c0:2b:f9:5c:c1:74:0d:
         9d:59:da:e8:53:b5:c7:19:86:cf:8d:2b:dd:3d:8a:b3:b4:77:
         b5:44:58:f7:66:73:a3:0b:41:84:6c:e2:c3:bd:9d:23:df:e6:
         97:12:26:8e:1c:6a:d5:0e:cd:35:3b:79:aa:bd:f9:8f:60:88:
         e5:63:da:a8:61:e0:4a:09:63:9d:47:33:e7:93:31:09:c4:52:
         b4:f8:d1:d9:22:cb:87:e8:95:7a:06:00:12:64:6c:10:9f:00:
         50:c7:99:35:a6:e7:41:c3:db:31:ab:89:04:c9:2b:d3:4e:39:
         9e:8a:b2:d3:c7:51:94:56:49:ac:38:71:e6:bc:ff:82:e1:5b:
         ea:2f:dd:91:7f:7c:8a:5c:01:2c:da:f9:15:41:2d:6a:a0:7b:
         28:4c:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:15:26 2025 by rpki-client