Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/323fc90b-6288-332d-bda2-64cfa2241813.roa
File:                     323fc90b-6288-332d-bda2-64cfa2241813.roa (raw, json)
Hash identifier:          LalCIJrhBr/c+spZoW+BdeImDLikBYd+jnUZNZihCBY=
Subject key identifier:   19:0D:9F:67:10:5B:2E:1B:7E:EC:C3:9A:17:98:C3:18:E8:1A:5D:DF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A10620D73A412077960DA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/323fc90b-6288-332d-bda2-64cfa2241813.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3360
IP address blocks:        130.174.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:06:20:d7:3a:41:20:77:96:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=0b12e7bf-199d-4831-9e66-110c91d8fd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:3b:54:f0:2d:3c:d4:c8:6e:47:76:36:64:
                    ac:54:2d:f1:db:29:e1:9a:97:77:ca:17:a5:ad:49:
                    b2:66:a8:e0:6f:eb:32:9b:cb:6a:59:e2:40:3b:56:
                    63:4f:17:25:07:59:03:b0:ca:86:69:18:86:36:6c:
                    53:c7:58:db:11:35:f5:57:f4:66:f5:d8:48:ec:4c:
                    5c:0e:9e:72:ad:84:8a:e7:f5:05:76:66:23:85:97:
                    6b:cf:21:ec:c9:1c:e9:55:56:17:e8:6a:14:1f:e8:
                    ac:db:2b:da:57:48:35:5c:d2:1a:19:05:5b:4d:4b:
                    56:7d:34:c3:4f:b3:dc:20:72:35:27:32:a8:6d:64:
                    e4:79:ab:4c:fc:be:9d:bc:42:47:ba:39:dc:c3:57:
                    e0:47:1d:f7:80:da:81:07:6d:eb:46:06:74:84:e1:
                    78:10:22:09:8c:c4:0d:25:98:9e:f7:54:de:29:1b:
                    e8:2a:69:55:4e:61:f4:48:b4:d6:52:b9:cf:ff:91:
                    0b:8d:23:77:ee:dd:a8:0b:a3:67:26:2b:45:57:99:
                    ba:1b:2f:f6:6e:2c:8c:e3:0a:02:7c:5b:c7:b3:f4:
                    06:df:ac:74:77:b9:62:72:81:41:6c:1f:1e:3d:5a:
                    fc:e9:5d:ba:2c:23:87:7f:2a:1a:2d:08:57:0a:23:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0D:9F:67:10:5B:2E:1B:7E:EC:C3:9A:17:98:C3:18:E8:1A:5D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/323fc90b-6288-332d-bda2-64cfa2241813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2f:7c:05:1d:4b:68:0f:43:68:93:5e:48:b2:62:04:d6:ad:
         93:41:75:06:f4:fd:10:08:e1:b6:d9:90:97:b3:df:a0:8a:8b:
         81:e7:66:5c:11:4f:e7:9e:5d:3e:99:ac:a5:1d:a1:6b:35:be:
         69:ae:a1:e0:cd:9c:e7:f1:39:08:a7:8b:eb:92:3a:d3:f3:0d:
         3f:b3:11:b6:4c:38:b2:f2:ec:7e:d5:7b:b9:5f:c0:92:26:48:
         af:b6:d4:eb:a5:c8:4c:a0:96:5c:91:f2:7f:eb:22:0e:34:a9:
         2d:91:d5:24:01:63:e3:57:f7:5f:ac:d8:6a:0c:4d:40:75:f9:
         77:31:de:59:87:5d:72:c2:b1:7c:d9:aa:8f:76:65:a9:55:21:
         2c:75:a0:e1:3f:24:7c:78:ee:1f:50:bf:99:98:a8:1f:83:8d:
         5f:d9:f9:2a:52:0e:3f:fc:50:9f:c1:a5:b6:c2:ab:0d:0b:79:
         4c:f3:b1:68:d2:79:ac:05:84:21:44:b0:03:89:19:a0:04:24:
         3e:35:a4:e0:c8:63:bb:3d:34:57:28:54:f9:6a:c0:f7:36:fe:
         bd:8d:76:e2:43:c1:5f:32:05:06:03:ef:fc:30:5c:71:b2:15:
         6e:9a:29:a9:df:b6:56:d2:cb:c4:71:b6:b9:09:76:f9:19:20:
         af:94:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:13 2025 by rpki-client