Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1894cb05-95e0-3628-b61f-b212e30d416d.roa
File:                     1894cb05-95e0-3628-b61f-b212e30d416d.roa (raw, json)
Hash identifier:          JXwwQ2hWCn9MbIP13QZhbVqkMClzqbp5cJFTVFSGjzc=
Subject key identifier:   CA:41:43:AC:B3:7A:2A:AA:B7:98:90:94:B4:37:56:C5:69:0A:49:FE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B79F074C85D539BA590A22680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1894cb05-95e0-3628-b61f-b212e30d416d.roa
Signing time:             Fri 10 Oct 2025 14:45:00 +0000
ROA not before:           Fri 10 Oct 2025 14:45:00 +0000
ROA not after:            Thu 08 Jan 2026 15:45:00 +0000
asID:                     202
IP address blocks:        130.174.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:f0:74:c8:5d:53:9b:a5:90:a2:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 10 14:45:00 2025 GMT
            Not After : Jan  8 15:45:00 2026 GMT
        Subject: CN=266c7567-7632-434c-a2e6-a1216ed440dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:da:e6:c6:fc:19:80:a1:6d:f0:78:dc:c2:6f:
                    06:ee:d5:29:27:a0:0b:be:0f:78:87:72:2f:52:97:
                    14:e7:c5:37:eb:cb:74:e4:da:d7:d6:d2:a9:4b:c9:
                    32:39:16:28:f7:b7:63:bc:7a:36:f9:6f:e4:27:84:
                    1d:9b:0f:3c:34:d8:ad:86:32:e3:2b:c7:a5:9a:56:
                    d8:8b:5e:f9:09:e0:57:9f:66:12:94:41:25:63:c9:
                    21:d4:f0:0d:c3:16:d9:21:92:52:0a:be:98:ee:e2:
                    44:72:15:fe:2d:4a:e8:4c:41:45:c2:1e:28:bc:99:
                    2e:21:e0:9c:71:e8:76:56:40:a3:7a:09:cc:cd:94:
                    b6:db:6c:d7:5a:46:ea:a3:81:16:c3:62:77:c0:e0:
                    87:b6:8b:9c:df:51:e7:4b:f6:3b:1c:95:44:8d:bc:
                    21:e3:d9:63:a4:99:7e:a8:8d:ad:cb:46:ba:d8:7c:
                    06:39:ec:61:e1:d7:fc:ca:b3:65:3c:c2:3d:9a:53:
                    b8:c9:23:e2:88:c8:ba:b8:61:d9:f1:ff:15:f2:97:
                    44:1f:e8:55:14:91:fb:08:04:69:55:2f:5b:80:b4:
                    2a:6a:8a:f9:1b:a1:da:bb:c4:48:a4:c9:9c:79:30:
                    e3:62:17:8b:e0:24:93:a8:3a:45:a9:6a:89:55:a4:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:41:43:AC:B3:7A:2A:AA:B7:98:90:94:B4:37:56:C5:69:0A:49:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1894cb05-95e0-3628-b61f-b212e30d416d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:51:f1:05:2d:91:37:1e:34:69:ca:7a:ef:e7:bc:44:0e:
         3c:d0:26:8e:d9:1c:5b:3a:2e:33:ea:dd:41:55:38:64:ae:85:
         98:8b:fc:c1:f8:e3:49:c7:4c:17:93:6f:bd:24:03:d4:7c:73:
         31:7f:21:9e:5b:13:76:23:4c:f1:66:e0:91:bb:8b:4f:eb:3f:
         ef:4c:28:4e:da:cf:3b:69:2c:6c:4a:e3:01:3e:42:85:34:71:
         ea:a6:4b:d0:a7:ea:02:5f:9d:12:76:48:6e:0b:58:2b:44:e1:
         05:e4:37:ce:6d:02:99:b6:19:ce:8a:8e:ed:78:f5:72:3d:b7:
         40:50:17:69:d2:78:b6:bf:e5:5f:eb:60:24:a6:6e:48:b1:f8:
         bc:5f:e0:ba:26:9a:81:96:d7:92:79:47:f2:49:d5:9a:3d:43:
         c8:bf:5a:29:5c:ee:e3:ae:b5:7d:2f:57:55:63:a4:ab:26:24:
         2d:73:b0:a6:f4:de:ec:60:c0:26:8b:49:14:ba:35:97:1e:11:
         11:77:8a:94:39:e6:6b:fa:17:27:7c:b7:3a:39:a6:53:d8:61:
         55:2e:6f:24:99:5f:bf:44:70:22:83:4e:82:62:bc:af:f6:4a:
         2f:ec:a3:85:af:55:dd:4d:02:dd:c0:e2:3b:5c:c5:a2:ef:b5:
         5a:5a:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:34 2025 by rpki-client