Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23239702-6a15-38e6-ac10-94f9dfab6ac7.roa
File:                     23239702-6a15-38e6-ac10-94f9dfab6ac7.roa (raw, json)
Hash identifier:          Y6n+/Rhq29rCRYCAQIHVDmH84AD/nqBnbzzSb7M28A4=
Subject key identifier:   89:10:66:62:77:05:03:B8:30:51:20:D1:12:8E:A4:96:B1:0F:59:88
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B49C5B188C6C25952A2EF0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23239702-6a15-38e6-ac10-94f9dfab6ac7.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     3356
IP address blocks:        130.174.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:9c:5b:18:8c:6c:25:95:2a:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=07927dd4-2f7d-43ed-8235-0a401215446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:70:93:ed:1f:25:e9:c6:38:8b:60:0f:b1:
                    10:c1:a9:a7:cd:b9:a6:83:b0:15:3e:bb:95:e1:7e:
                    14:46:3b:31:20:7e:cf:29:77:93:f1:39:0e:bf:e1:
                    7a:f6:6a:95:45:e0:53:9f:ab:85:0e:e8:33:91:ac:
                    16:88:b8:7b:41:2a:fb:e2:62:2e:43:48:cd:ea:d1:
                    e5:30:99:dc:dc:43:b8:ab:ce:2d:92:14:0c:30:36:
                    36:68:35:cf:b7:6f:01:59:c8:93:bc:c1:50:01:e9:
                    92:81:93:90:c9:7e:ce:42:f1:6b:eb:bd:a8:9a:82:
                    fa:0c:ad:66:5b:e0:bf:2b:8f:1e:33:10:e1:30:5d:
                    be:6c:9c:f6:f9:aa:ec:79:03:e9:46:49:47:87:b0:
                    54:2a:d9:87:90:37:7b:3f:73:82:38:6e:9d:47:52:
                    49:dc:af:77:48:0f:d2:8d:b7:a4:72:fd:b5:12:58:
                    08:08:8f:1f:db:f8:c3:d3:7c:c1:54:10:3a:1d:a0:
                    54:fa:1c:0c:50:a0:b6:52:e4:cd:65:5c:82:6d:9c:
                    28:d9:d6:42:67:c1:77:bf:ed:d2:9d:08:29:7d:9d:
                    85:9c:0b:f3:9a:60:14:96:d5:80:86:5f:26:6e:38:
                    60:e0:60:4f:ac:4a:c7:02:dd:cd:d3:e0:9c:34:37:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:66:62:77:05:03:B8:30:51:20:D1:12:8E:A4:96:B1:0F:59:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23239702-6a15-38e6-ac10-94f9dfab6ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:fb:2b:f5:68:ec:ad:1b:f5:d1:0c:d6:7e:9f:70:45:9e:
         e7:52:6c:d0:8c:43:26:ca:44:37:fe:b2:54:16:67:df:19:07:
         77:67:76:48:1a:5e:7c:ce:3d:0d:e2:12:12:b7:ac:f1:d5:b5:
         51:75:0f:be:aa:43:51:63:c9:33:5e:29:53:08:7f:57:90:a1:
         d8:dd:29:1f:2a:99:6b:00:03:c4:3b:b6:c2:c2:e3:e9:dd:5f:
         bc:7f:83:2d:db:ca:66:98:91:d9:42:5a:3a:48:7f:90:0c:48:
         72:c1:2d:09:fc:e0:a5:89:1c:cc:00:8f:e2:60:a6:bb:30:ea:
         65:72:5a:3e:e1:8b:a3:16:93:26:52:2e:cf:76:9e:f1:6f:57:
         c2:29:a7:f2:40:8c:0f:cb:b4:ca:86:30:80:b4:79:64:84:91:
         9c:49:c7:46:a3:95:68:1f:11:f4:6d:1c:b6:eb:32:2a:b2:ca:
         32:34:23:c7:30:23:b9:12:92:8b:f3:07:3d:dd:e4:12:da:80:
         8a:dd:37:63:8c:56:e7:d5:56:e6:a6:26:75:4d:a8:66:a8:3f:
         04:46:e9:21:9a:c7:d9:7c:44:73:56:ca:f6:2a:f1:2c:23:ed:
         f4:d5:7c:02:4a:9d:71:0e:08:6d:d6:da:fa:33:42:4f:c2:23:
         24:04:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:01 2026 by rpki-client