Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21a6afcc-45bd-3f6b-9e48-facc8b47f5c1.roa
File:                     21a6afcc-45bd-3f6b-9e48-facc8b47f5c1.roa (raw, json)
Hash identifier:          9Zf/1VuWyVed9QR8hcrfIAI7ZiJ28dfNOJ+c3XEC4WY=
Subject key identifier:   8E:37:EB:BA:72:22:1D:13:EC:A0:4E:7A:48:95:E6:5F:7D:6D:DC:44
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A0FF9E6B60E7C803EB29C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21a6afcc-45bd-3f6b-9e48-facc8b47f5c1.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     203
IP address blocks:        130.174.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:ff:9e:6b:60:e7:c8:03:eb:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=33c756ce-bc79-4d33-aaaf-0f1f1ad1a186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:e4:30:d1:f2:f7:05:5c:2e:b0:de:f1:13:
                    e3:96:48:87:95:41:6c:20:da:45:c0:9b:3c:03:e8:
                    8d:9d:52:69:0e:bd:d8:b9:3f:f0:c2:3e:e0:7a:43:
                    0b:21:a7:7d:aa:a2:3f:e6:83:3e:4e:57:23:33:d1:
                    1c:ed:92:2a:cd:92:41:ec:cf:0c:7c:ba:0d:6d:78:
                    5b:8b:06:5a:d5:20:83:89:0e:9f:aa:8d:81:b6:9e:
                    b5:98:9e:58:57:bb:da:7e:dd:85:22:89:d3:7a:b6:
                    44:c7:17:97:70:f5:99:bc:71:fc:24:ff:89:c9:1c:
                    2a:1e:6c:28:73:cf:9d:63:3f:4f:b5:00:b8:89:c1:
                    1b:30:71:96:13:8e:86:0f:34:9f:7a:a6:26:9e:1a:
                    35:1a:5c:ea:d9:63:b9:ac:76:12:65:17:13:ac:9a:
                    36:47:73:56:a8:7a:52:77:9b:f8:70:7d:ae:55:c1:
                    59:58:35:2d:4d:8b:dd:5b:e7:f3:21:bb:18:1d:52:
                    89:a9:10:cb:6a:5e:aa:ed:a2:11:f9:d2:34:b5:8a:
                    9b:6f:aa:98:bd:c7:42:97:b1:2e:28:db:10:95:67:
                    e2:0a:bf:97:a9:6e:6a:b4:84:4c:71:89:09:74:ed:
                    c0:4a:a7:df:f4:b0:d0:4d:e9:2c:83:da:3f:8f:18:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:37:EB:BA:72:22:1D:13:EC:A0:4E:7A:48:95:E6:5F:7D:6D:DC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21a6afcc-45bd-3f6b-9e48-facc8b47f5c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:91:67:69:b4:bd:81:6f:48:76:6b:6e:de:15:16:35:39:5b:
         dc:19:ef:66:ba:68:d9:b5:fc:66:86:10:ea:90:d2:cd:15:99:
         46:22:88:7a:d3:02:73:c1:52:fa:15:b9:cd:23:1c:b1:a0:83:
         40:65:a4:b7:df:84:32:f4:18:8d:7b:d3:ba:5c:64:fe:6a:78:
         e4:90:75:6a:4c:b2:b4:d4:8e:b1:b9:42:8b:03:c9:44:7b:45:
         f8:04:ef:2f:eb:9c:87:78:a8:13:a9:b4:a3:c0:0c:3d:8b:8d:
         be:0e:1a:c7:2f:af:95:e4:db:8b:1a:ed:fd:ce:f7:9a:f2:c7:
         af:42:68:99:5a:4f:dc:89:3b:26:5c:e8:ea:31:6d:c8:a1:e8:
         22:19:c7:4f:f5:2a:54:f8:83:92:39:88:f0:f4:d9:e4:a5:df:
         e0:c0:74:ef:32:5b:c2:94:5e:78:d8:f9:20:63:63:97:9b:f2:
         55:b6:0d:3f:ef:8d:c4:d1:ba:a5:75:78:0b:5d:6f:fc:38:7c:
         a7:fe:5c:e1:84:3b:4a:e6:00:8e:92:cf:e4:77:44:08:0f:3a:
         3d:32:4e:ae:82:82:1b:a2:82:bf:c4:7a:b0:ad:83:66:4b:5a:
         4c:d9:f9:4e:7f:ce:65:d4:cb:64:fa:6a:d0:77:f2:cf:c7:e2:
         f3:2b:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:59:59 2025 by rpki-client