Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/01cbddd6-94e5-3a5d-b177-b716631c6265.roa
File:                     01cbddd6-94e5-3a5d-b177-b716631c6265.roa (raw, json)
Hash identifier:          CaOO9g25eBDa26OMxwpl84fUCGv2yb6ffwyjzPB4r8E=
Subject key identifier:   8F:8B:82:62:17:6A:39:C7:E8:29:76:8F:09:C9:1E:E0:F9:97:0A:C3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BB5C85008CA1C782147E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/01cbddd6-94e5-3a5d-b177-b716631c6265.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     202
IP address blocks:        130.174.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b5:c8:50:08:ca:1c:78:21:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=393ffd80-b20a-4151-bfe8-b0eacdf31ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:95:89:43:30:a4:ec:35:fd:cc:f6:1b:59:
                    43:23:b1:3a:77:84:6f:af:e9:00:13:87:a0:85:52:
                    0c:b2:6b:fe:48:70:79:74:bb:2d:4d:61:9c:3a:94:
                    0c:c7:21:be:2d:39:1f:c4:f6:00:af:6b:e4:c7:39:
                    3d:47:25:a2:71:90:c2:dd:3f:de:55:19:32:41:73:
                    e6:e4:5b:d0:f4:fd:87:17:3d:70:bb:e8:55:a3:c1:
                    ac:05:56:1e:8c:09:24:60:72:51:6c:9a:c5:a7:f5:
                    5c:0e:89:08:e9:cb:a6:d8:0a:93:7f:b5:be:ee:c5:
                    49:85:90:70:ff:31:df:b4:61:b9:d4:fd:09:ec:9b:
                    65:71:74:ce:f8:82:c6:33:28:c8:bb:68:a0:5a:4e:
                    46:51:cb:c0:5b:9c:e5:92:9f:7f:c1:a8:31:cb:3d:
                    03:2a:cf:ce:09:45:e2:de:c7:03:01:93:50:d2:0f:
                    1e:ce:84:b8:ec:ba:d0:f5:27:92:52:ae:ff:d8:69:
                    7d:96:52:80:d3:06:a6:57:d9:5b:21:0d:ba:33:be:
                    8b:58:77:3b:ad:e0:73:24:9d:29:ef:47:48:c0:fd:
                    63:11:3a:bf:9f:ed:4d:55:e4:fa:c1:16:cd:e8:41:
                    7b:5e:4b:7b:a2:e7:f9:2c:64:61:72:a3:18:80:d3:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8B:82:62:17:6A:39:C7:E8:29:76:8F:09:C9:1E:E0:F9:97:0A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/01cbddd6-94e5-3a5d-b177-b716631c6265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:43:67:68:3d:74:40:15:01:62:1e:47:7c:ce:c6:c4:eb:67:
         ab:f5:7d:af:f8:94:19:e3:a4:2e:a2:25:a2:02:a4:f1:48:db:
         b2:1f:17:6e:17:9c:77:d1:1d:3f:f0:1c:ac:49:aa:88:d7:2e:
         ad:ad:96:46:61:70:ed:6e:6a:b6:a9:73:19:7c:95:30:17:dc:
         d4:d3:eb:ec:9e:25:79:e3:4d:60:5b:21:d7:b6:03:0b:66:59:
         8e:80:b9:fb:f5:b3:d5:b3:0d:a8:91:78:1e:4f:dc:38:c8:63:
         60:db:2e:64:7d:dc:97:f5:8d:a7:af:50:7a:c4:f3:2c:6d:60:
         0f:4b:eb:be:4e:ed:a7:63:f0:61:81:6a:52:0f:ad:77:76:d7:
         aa:e2:e4:5b:64:f1:0f:5b:4c:29:e6:fe:fa:70:ac:66:5a:39:
         22:8d:75:6b:51:96:37:18:e1:89:1e:cf:4f:55:44:56:6e:43:
         be:90:c1:4e:8d:13:1b:68:c3:c9:3f:3f:7f:2c:1a:d4:5c:6b:
         e3:11:a0:75:64:ed:8c:9a:95:bb:51:05:c1:9f:64:b7:9c:94:
         25:25:e7:86:7f:3f:04:2e:dd:b3:e5:cc:2f:ed:e6:1b:66:46:
         aa:df:07:01:19:fc:13:8d:ce:03:7d:96:3a:70:fb:e3:55:c1:
         41:23:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:19 2025 by rpki-client