Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa
File:                     223954b1-65ee-3d7d-95c5-183cd5e169ed.roa (raw, json)
Hash identifier:          Gw1BFIHJ8W4h2ZkSz3xxJLQ5fxA6SQZ/kOfSg/UiGD4=
Subject key identifier:   7D:FE:5F:31:47:0B:71:6E:91:51:68:8E:6A:15:60:2C:3F:66:B3:A4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BBA3E00825D4EA52EAF00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        130.174.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:ba:3e:00:82:5d:4e:a5:2e:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=ce033d87-cc33-4729-a6d5-3a6470832e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:e2:98:6e:7b:dd:2d:69:d1:92:2f:e4:ee:
                    bc:e1:47:e3:70:78:ea:95:aa:3b:46:d2:c9:89:c8:
                    6c:c5:45:f8:43:c5:d7:07:2b:78:d8:ad:b9:71:da:
                    7c:b3:f1:a1:50:08:45:7f:c0:ba:17:02:dc:15:fd:
                    36:cc:0c:b5:58:cb:57:5f:d9:00:ac:f7:54:ec:83:
                    ec:23:0f:65:69:32:85:36:17:94:f9:a2:53:0d:5f:
                    66:fe:69:53:e4:4e:02:a3:8b:ae:ce:dd:46:52:52:
                    2a:0a:09:0e:91:7a:40:3e:e6:13:f7:f1:9a:04:d6:
                    a7:3e:9c:6d:84:69:a6:e2:4f:15:91:c4:b0:37:65:
                    79:d5:8b:7b:99:85:9c:0e:73:cf:c8:82:c7:7e:73:
                    3f:89:fd:b7:83:1c:59:cd:33:4d:fe:9c:f6:8d:65:
                    50:36:3e:b0:ce:c4:89:6a:47:c3:f4:9d:88:49:11:
                    3a:28:2b:1a:5b:4d:2d:95:27:2d:49:08:3b:66:be:
                    3e:91:7c:d9:4c:2e:8b:10:4e:b4:00:5f:3d:7c:6b:
                    0e:b7:a7:fc:10:be:79:e3:54:6f:08:3b:24:8c:cd:
                    c3:99:0d:bf:19:42:cf:40:5f:81:04:77:4b:1d:31:
                    6b:bb:4d:32:63:72:55:e5:5f:2e:e1:73:50:62:56:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FE:5F:31:47:0B:71:6E:91:51:68:8E:6A:15:60:2C:3F:66:B3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c7:4b:f5:71:c9:2a:e0:06:d3:ef:ae:0d:b1:f9:df:7f:ca:
         d0:43:af:59:d6:1c:1c:62:37:39:6d:1d:8a:c7:e5:b9:fa:e1:
         7a:50:54:7f:54:c4:ec:7b:70:6f:3d:61:3f:a5:99:c6:06:e5:
         df:d1:7a:a0:11:5b:af:0e:d3:b4:0a:8d:f4:f8:5d:e9:dc:3e:
         7d:0a:e6:45:20:9e:a0:2e:27:20:b1:10:40:ae:4e:54:ed:c4:
         53:a1:e5:b5:83:37:13:1f:dc:67:b9:04:45:d3:e3:1c:b7:ab:
         dc:70:b3:a6:c7:62:39:94:6f:7e:76:f0:2b:24:ac:43:cb:7d:
         11:21:e3:a4:a6:0e:71:08:66:0a:cd:51:e4:02:c2:2e:18:86:
         cf:81:c5:50:d5:62:d0:96:fa:dc:97:7a:6b:fd:75:eb:d4:22:
         7c:35:33:93:4a:f5:bc:a3:d3:d1:57:68:a5:06:7c:58:60:8f:
         30:98:19:51:81:07:0f:01:2b:83:bf:87:fb:71:c9:14:01:e2:
         8e:12:72:63:af:1d:1c:13:05:4a:6c:9a:3b:45:3c:ef:2c:cb:
         e5:fa:00:22:3b:8a:e2:62:dc:3d:f5:d5:35:ce:c7:4c:cc:49:
         ff:1b:27:c7:8c:03:bc:ec:29:5a:7a:39:fc:0d:0f:e5:15:96:
         00:ab:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:02 2025 by rpki-client