Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35b94d9a-c8de-3996-ab68-485b61aacbc6.roa
File:                     35b94d9a-c8de-3996-ab68-485b61aacbc6.roa (raw, json)
Hash identifier:          WagMRHC/Ni+4ED0Xeh4WsCBAXlScpF+Sm/KTFyYIXJw=
Subject key identifier:   F9:BC:F5:06:E6:CC:98:D2:4C:17:A6:1F:26:1E:0E:46:53:0E:E7:BA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BCC422961E04BA04D6390
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35b94d9a-c8de-3996-ab68-485b61aacbc6.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     203
IP address blocks:        130.174.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:cc:42:29:61:e0:4b:a0:4d:63:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=2c78e5a9-096a-4623-bcb0-3e28d7004a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:7a:49:b6:db:d6:2d:53:f1:cb:0b:42:d5:
                    a8:60:b2:db:18:58:33:10:f1:19:56:52:71:9c:43:
                    16:ed:32:35:a0:ba:d5:d7:6c:df:9f:42:49:3d:e8:
                    cc:b5:bb:a7:0f:52:49:b0:06:9e:64:e4:00:cf:f0:
                    f5:cd:68:dd:7d:e9:7c:b6:54:30:5b:d9:70:18:6c:
                    12:dd:a0:7a:b6:d0:a2:77:d0:ff:bb:a1:5e:c8:79:
                    50:bc:b4:2b:d4:2a:7d:f3:81:df:44:17:97:be:18:
                    ed:12:b5:4f:14:db:0d:fd:13:1b:87:8e:52:e8:b4:
                    bb:89:ae:6f:33:07:db:2f:f2:22:c9:06:68:a6:13:
                    45:23:8e:c2:c7:52:39:df:11:91:36:a9:53:e6:52:
                    74:47:68:74:0b:fa:6b:f5:75:61:bb:f6:d7:df:b6:
                    2f:fe:84:8f:8d:b8:66:c9:5a:14:88:8a:3f:e2:aa:
                    23:61:47:8c:15:0a:ee:54:f5:9e:ca:99:1a:f3:a9:
                    e3:bb:c2:f9:3d:4b:e0:91:4d:94:a5:7c:f4:b4:60:
                    93:ce:4d:60:73:a4:00:a4:2a:6d:09:44:05:39:d3:
                    88:9f:c2:80:c5:be:c8:fd:78:28:8b:3b:e2:6f:b2:
                    ba:98:7a:1f:40:5d:24:43:43:54:04:ae:ff:87:39:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BC:F5:06:E6:CC:98:D2:4C:17:A6:1F:26:1E:0E:46:53:0E:E7:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35b94d9a-c8de-3996-ab68-485b61aacbc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:34:d1:08:3d:22:b1:09:0a:32:9e:62:3a:6c:77:67:75:5c:
         96:6a:8b:a3:6c:20:b9:21:19:4f:ec:d6:16:04:89:95:6b:4f:
         2c:f3:8d:d5:85:cd:15:55:be:46:b3:62:2c:05:f5:71:63:a4:
         be:f8:eb:b6:79:49:24:6e:1b:b0:31:9f:a7:d5:2e:bf:41:80:
         ce:8e:af:d8:59:5f:cb:4b:7d:bd:b5:50:6c:9d:9a:d8:bc:59:
         95:71:3b:e2:34:67:f5:12:a1:57:4b:47:75:3c:43:a7:15:f4:
         bb:13:5a:89:20:e7:cc:25:d5:b5:41:c2:3c:d3:42:57:48:9d:
         d2:a3:9d:cf:c3:ba:24:56:ab:b3:cd:46:d3:f8:74:2a:20:a5:
         c5:c7:1d:fd:53:63:a8:8d:49:ab:d1:86:be:8e:ca:af:ad:1c:
         23:61:eb:cd:af:10:64:59:fe:52:fd:3f:35:6b:4a:04:3f:65:
         d1:b3:d5:e4:83:a9:c3:3b:db:ab:a6:e5:b6:78:ef:8b:14:ac:
         c9:cd:64:3b:0e:3f:2c:37:53:44:3b:84:82:4e:54:71:4e:00:
         94:0d:5c:fb:75:6b:00:c7:f3:a4:88:8a:dc:04:05:19:a4:b8:
         1b:97:59:ba:59:21:1c:dc:bc:37:76:64:d3:47:0b:39:0d:79:
         9a:17:42:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:14:23 2025 by rpki-client