Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21434ac2-9eec-3ffd-904d-efccfec9107c.roa
File:                     21434ac2-9eec-3ffd-904d-efccfec9107c.roa (raw, json)
Hash identifier:          P3pTu/AG6Ke+A6xa17v60/aTOO+zQ8+9BNG+dVgm+mk=
Subject key identifier:   6D:30:BF:DC:26:29:57:6C:F6:1C:B0:FD:F5:55:77:B0:5C:6C:FC:14
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BCBA57FBAA59B2E07B970
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21434ac2-9eec-3ffd-904d-efccfec9107c.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        130.174.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:cb:a5:7f:ba:a5:9b:2e:07:b9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=69646097-d2b0-4443-896e-fe45991f4c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:a7:81:62:2e:40:ba:cd:db:fe:15:2d:25:
                    f1:9e:33:06:a4:ca:cf:31:0a:cf:c9:35:ba:71:6e:
                    a9:c4:5e:ca:db:23:8e:d4:2c:52:e5:01:6a:3f:06:
                    ff:29:61:f9:9f:4d:b6:9c:5d:05:90:dc:81:98:01:
                    c9:89:c1:09:89:35:4b:40:67:8a:6c:46:cb:6f:e9:
                    cb:7d:90:37:95:68:ce:e6:cf:d6:93:56:30:fe:95:
                    75:f9:0d:6a:3e:0b:af:5b:dc:e7:6e:7f:58:4c:cc:
                    c6:71:3d:1f:a4:fa:6e:da:51:a0:01:d0:fe:66:50:
                    5e:91:5d:87:6a:5b:0c:0a:29:a2:85:47:5e:f9:2d:
                    df:08:bb:0e:12:5b:27:74:16:86:5e:57:9b:7a:83:
                    86:43:1a:c5:4d:14:5c:94:87:92:8b:c6:1a:85:4c:
                    13:23:98:43:b8:89:ca:d6:5c:68:27:8d:43:97:2e:
                    de:e4:a2:bf:2f:d5:3d:1e:ba:f9:0c:8b:47:00:77:
                    84:13:aa:4c:3d:ef:42:7a:87:e7:88:cd:23:ec:4f:
                    82:d3:f3:e2:37:62:d5:95:d5:5d:7f:9e:0a:6b:ac:
                    3d:7c:46:4f:92:7d:be:d8:45:d1:f1:08:a3:17:e2:
                    7b:dc:b4:bf:0b:b2:a0:73:72:d9:1e:79:32:e6:7e:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:30:BF:DC:26:29:57:6C:F6:1C:B0:FD:F5:55:77:B0:5C:6C:FC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21434ac2-9eec-3ffd-904d-efccfec9107c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:eb:e4:85:a1:1c:30:5b:d4:d5:75:f0:c3:3e:f9:1d:6e:
         11:cf:3a:a6:32:82:cf:7f:c6:56:2c:63:14:8d:e8:cc:db:2d:
         a5:f1:09:b7:aa:93:91:ea:24:fa:90:c5:58:11:7d:43:e5:00:
         a5:e0:a0:7e:53:e8:4a:39:78:fe:87:9b:55:56:6d:2a:51:7d:
         17:02:ef:1a:9e:33:09:b6:4e:9e:68:03:ad:59:da:76:3a:06:
         fb:4e:0b:45:8a:48:4d:b2:b7:7f:52:08:96:85:1d:38:93:8d:
         9d:e7:31:16:d4:12:ff:92:9c:6d:09:53:7e:57:26:e6:ca:e1:
         41:4e:47:1d:36:7a:34:cb:c7:ca:5e:87:9e:1b:f8:66:1c:80:
         4c:97:5e:0c:20:6f:ae:30:44:98:63:58:77:72:fc:b0:ab:38:
         2c:41:c0:b5:2a:91:17:18:73:42:fa:21:b6:3f:eb:35:5e:d0:
         24:b4:42:5e:b1:72:27:71:dd:05:fe:6d:64:b0:af:c4:f5:c5:
         32:6e:f5:e6:e9:e8:47:20:89:ff:bb:28:69:67:aa:2c:83:54:
         31:a6:a2:92:ef:75:3b:c6:f8:04:e1:5d:ad:84:14:ae:1c:ce:
         ee:70:89:02:97:43:51:72:ec:be:e6:3c:02:9b:01:6c:c8:6a:
         2c:ec:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:22 2025 by rpki-client