Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3663bb8e-0cdd-3988-9738-86706bda0100.roa
File:                     3663bb8e-0cdd-3988-9738-86706bda0100.roa (raw, json)
Hash identifier:          pfEy2RIu4+iyeWjPbj31B9UFodO/YAjo2m/RP+hZIL0=
Subject key identifier:   98:24:D7:78:82:77:D4:69:F1:E3:A4:48:FF:29:ED:50:AD:D4:4A:AE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A100F506BDA9741A4D7380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3663bb8e-0cdd-3988-9738-86706bda0100.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3360
IP address blocks:        130.174.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:00:f5:06:bd:a9:74:1a:4d:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=9de1d831-ddb2-465b-9f0f-4bc0af3f8881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:ab:5c:0a:b0:c2:79:97:97:43:5b:56:64:
                    28:b8:13:81:cb:b8:45:1d:56:6f:f2:0d:f3:c7:8a:
                    85:8f:f2:ab:fd:ca:9e:0d:b2:a8:43:c7:c2:66:ab:
                    8e:be:bc:24:ea:1c:69:75:99:43:3b:51:5a:5e:96:
                    e9:1b:fd:bd:93:fc:c0:21:c5:51:c6:cd:d9:ae:97:
                    35:b9:eb:81:3d:39:9b:c5:4e:56:15:ea:63:8e:10:
                    05:69:5b:45:4e:d4:4e:7a:08:17:62:6f:a3:5c:bd:
                    ad:a6:2b:c3:ef:86:4a:fa:ae:4f:6f:1b:df:0b:20:
                    90:3c:6d:1f:e2:2d:d8:03:6f:a7:5d:d2:d3:9f:7c:
                    e0:a9:9e:dc:92:22:39:a2:73:7b:77:86:7f:83:d1:
                    71:26:a5:81:51:4e:65:8a:7a:53:ca:0d:c0:9f:2b:
                    a7:65:36:d7:97:58:1c:24:a5:37:8f:41:34:8e:5b:
                    38:2e:da:46:55:9e:c3:1b:e8:ea:0c:1d:1e:31:a3:
                    87:3d:aa:66:ba:c4:84:1e:85:46:03:5b:6c:34:ce:
                    aa:2e:61:41:5a:57:81:39:49:f3:d3:1c:1f:78:2e:
                    b1:70:4e:71:1a:55:1f:be:60:59:5f:23:75:d3:01:
                    1f:e8:30:75:8b:e4:98:8b:6f:6f:6b:c2:5d:0e:46:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:24:D7:78:82:77:D4:69:F1:E3:A4:48:FF:29:ED:50:AD:D4:4A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3663bb8e-0cdd-3988-9738-86706bda0100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3c:17:f5:7c:04:b5:5b:48:46:e8:d4:6a:9e:2f:e1:ae:2b:
         e7:fd:78:9b:27:d7:72:7c:84:2a:d2:e1:13:78:48:6f:01:59:
         ce:20:32:32:fe:e9:2a:5c:57:9e:76:3e:e2:df:5d:77:3a:fc:
         2c:94:87:88:7d:6b:cf:16:91:ab:18:d6:13:9d:d8:01:9e:31:
         d1:71:22:34:91:23:84:07:c0:67:24:e4:74:c3:fd:9d:bb:9e:
         30:ce:40:04:60:b1:b9:57:4e:7b:ca:05:30:db:c8:0a:f6:69:
         ae:05:aa:c3:da:d4:97:7c:af:fd:20:32:a9:35:e9:0c:7f:4d:
         8c:c8:8d:73:38:17:f6:0a:ca:ee:f3:6a:36:1a:07:85:67:bd:
         89:93:47:24:22:f6:b3:c5:80:70:89:d7:2c:3a:75:56:fa:aa:
         03:df:b8:d7:51:28:2a:66:58:1c:5b:81:c2:48:ff:8c:29:1f:
         7f:ee:6b:4a:13:47:ff:c2:7e:44:a7:6c:1b:af:71:80:c3:9e:
         15:47:6e:58:de:32:08:c2:15:f9:16:29:ed:cc:7b:38:13:a2:
         2c:7c:83:64:ee:93:8a:00:a7:64:6e:56:d2:d1:23:2c:8f:0f:
         d7:7b:9d:a1:ee:4c:25:60:20:00:38:5a:3e:03:4c:78:82:6d:
         62:aa:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:44 2025 by rpki-client