Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dabe2f7-c824-3ec8-978e-f55b4022901c.roa
File:                     2dabe2f7-c824-3ec8-978e-f55b4022901c.roa (raw, json)
Hash identifier:          7s2yfAYDPvHGBhF1qDbiqu5XEU7tj8oDSH/fL0oHOQU=
Subject key identifier:   E5:A8:30:D0:66:6A:F8:98:09:20:D3:E3:18:1F:28:15:42:73:13:0C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BB987D9CF18F1882E7100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dabe2f7-c824-3ec8-978e-f55b4022901c.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     203
IP address blocks:        130.174.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b9:87:d9:cf:18:f1:88:2e:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=1ba0ec7e-17ed-4a15-9fdf-e00cffd90f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:e0:bb:d7:96:d5:be:c2:42:7e:6a:54:d0:
                    74:78:e7:8c:d2:63:52:53:ec:0f:10:e2:b1:16:cf:
                    35:47:f5:a5:81:b6:5e:d7:3f:20:6f:d3:86:b8:83:
                    93:79:7c:04:e8:cf:bd:6f:dc:5c:be:12:1d:13:2f:
                    f8:01:50:42:a2:15:5a:91:c8:b6:a3:db:69:96:0e:
                    41:48:94:87:cf:8e:1e:0d:2c:6b:29:cf:93:ca:32:
                    da:0d:11:c8:1c:62:71:bb:e2:50:a7:99:68:dc:bf:
                    a6:2b:66:e6:95:ea:83:9b:22:62:f7:b6:fe:76:70:
                    f9:56:fa:7a:39:5a:ac:42:c7:82:6e:79:ea:80:2f:
                    8e:2e:91:9a:c4:95:78:02:0e:18:7f:0e:e7:ed:6f:
                    7f:89:c1:8d:9b:f0:ac:9a:6c:76:90:f5:14:3c:12:
                    b7:01:35:5b:e5:4a:df:6a:87:8f:a0:92:62:4a:bc:
                    87:35:99:96:75:ce:da:e3:af:51:74:92:42:57:5e:
                    29:b3:3f:75:85:68:c6:07:ed:65:51:8a:54:d3:24:
                    af:c3:be:c5:41:83:27:89:39:4c:1b:72:6f:b4:69:
                    6f:9f:b4:ba:f7:56:90:d7:82:4b:ff:8f:86:99:59:
                    96:c7:b8:5d:75:0d:3b:42:11:82:94:32:c5:02:9a:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:30:D0:66:6A:F8:98:09:20:D3:E3:18:1F:28:15:42:73:13:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dabe2f7-c824-3ec8-978e-f55b4022901c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fb:a0:0f:71:40:75:6a:09:0a:48:c0:d4:e9:48:23:37:bd:
         5d:35:f7:a3:21:ee:41:5a:11:1c:4e:43:f5:82:05:a2:91:26:
         ea:77:2d:91:0e:05:6b:d0:a2:98:07:4c:1a:13:d7:8e:39:b3:
         d9:0d:00:df:1e:66:3e:b0:28:3d:b3:68:eb:f9:8b:66:dc:6c:
         84:ae:91:e7:19:69:01:33:c5:fa:dd:ef:4f:9c:4d:d5:07:73:
         72:20:d2:1d:95:d8:a8:90:41:3b:80:6f:a7:3f:46:e7:1e:d1:
         6d:8c:6d:ed:08:64:c8:ad:56:93:4c:80:22:d9:7d:bd:70:1a:
         a4:a3:01:c6:df:05:e9:ba:10:c3:ea:40:9e:49:f3:72:7a:54:
         01:d5:ad:1a:0c:fe:cb:00:50:de:1f:01:9a:2f:54:44:5e:c9:
         dd:60:e1:85:d5:94:8f:c9:aa:e2:ff:3c:53:18:ca:fa:80:9a:
         c1:d0:1d:4b:09:99:23:b6:60:88:69:25:b6:af:ff:49:cc:3e:
         7d:c8:ec:ec:cb:c4:e5:4e:87:6e:29:57:df:a4:22:69:db:74:
         0b:c5:d3:ac:00:a8:cc:95:44:e9:3b:79:b3:ad:f7:99:b5:cc:
         f8:a3:8c:27:3a:1b:0a:77:37:80:ff:5e:7e:b9:42:0c:66:d4:
         53:ac:32:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7mH2c8Y8YgucQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
MWJhMGVjN2UtMTdlZC00YTE1LTlmZGYtZTAwY2ZmZDkwZjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGbgu9eW1b7CQn5qVNB0eOeM0mNSU+wPEOKx
Fs81R/WlgbZe1z8gb9OGuIOTeXwE6M+9b9xcvhIdEy/4AVBCohVakci2o9tplg5B
SJSHz44eDSxrKc+TyjLaDRHIHGJxu+JQp5lo3L+mK2bmleqDmyJi97b+dnD5Vvp6
OVqsQseCbnnqgC+OLpGaxJV4Ag4Yfw7n7W9/icGNm/Csmmx2kPUUPBK3ATVb5Urf
aoePoJJiSryHNZmWdc7a469RdJJCV14psz91hWjGB+1lUYpU0ySvw77FQYMniTlM
G3JvtGlvn7S691aQ14JL/4+GmVmWx7hddQ07QhGClDLFApoNpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWoMNBmaviYCSDT4xgfKBVCcxMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRhYmUyZjctYzgyNC0z
ZWM4LTk3OGUtZjU1YjQwMjI5MDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEL7oA9xQHVqCQpIwNTpSCM3vV0196Mh7kFaERxOQ/WCBaKRJup3LZEO
BWvQopgHTBoT1445s9kNAN8eZj6wKD2zaOv5i2bcbISukecZaQEzxfrd70+cTdUH
c3Ig0h2V2KiQQTuAb6c/Ruce0W2Mbe0IZMitVpNMgCLZfb1wGqSjAcbfBem6EMPq
QJ5J83J6VAHVrRoM/ssAUN4fAZovVEReyd1g4YXVlI/JquL/PFMYyvqAmsHQHUsJ
mSO2YIhpJbav/0nMPn3I7OzLxOVOh24pV9+kImnbdAvF06wAqMyVROk7ebOt95m1
zPijjCc6Gwp3N4D/Xn65Qgxm1FOsMkw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:51:54 2025 by rpki-client