Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d62d202-cf6b-393a-aa34-e209358d0373.roa
File:                     3d62d202-cf6b-393a-aa34-e209358d0373.roa (raw, json)
Hash identifier:          oZmuRkTdt+hH+BFAYSYKmz7xJAyMbwij7VC/vE7xXyg=
Subject key identifier:   56:3F:EF:C4:C6:6B:43:3D:75:0F:7D:CA:4F:0F:65:66:60:C9:36:BE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A105E98BADECDA39760920
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d62d202-cf6b-393a-aa34-e209358d0373.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     203
IP address blocks:        130.174.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:05:e9:8b:ad:ec:da:39:76:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=fc6adb36-ec1c-4456-af4c-a48f242a32c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:8b:79:d0:c1:c8:0e:8a:a0:69:a4:c2:5b:
                    cc:45:c3:a7:89:b2:8e:bd:7e:14:5c:bf:01:b0:91:
                    49:0d:72:7e:54:45:8d:a9:57:a5:05:91:55:4b:80:
                    97:a2:36:29:6d:49:31:25:88:18:b6:0e:fb:b2:45:
                    b8:fb:f1:05:b0:e3:d8:65:7b:03:f9:40:9d:4a:56:
                    cc:27:a9:7b:31:9f:9f:88:cc:0e:2b:75:c7:09:a8:
                    8f:83:7d:21:cd:9d:7b:53:1c:0f:2f:df:ab:77:a1:
                    d6:dd:3d:81:a3:0c:58:fb:49:c3:4e:6b:1d:65:dc:
                    f4:19:65:1f:56:af:46:49:22:6f:2e:d8:b5:aa:d9:
                    f0:a3:ca:28:3b:e9:5b:9e:c3:f4:dd:c8:0f:cf:a0:
                    3f:e6:d3:7e:e3:c6:3f:f6:38:76:3d:7f:88:4e:f4:
                    7d:c1:35:56:c2:88:d6:93:6d:75:1b:50:95:0b:61:
                    2d:c6:33:be:d5:86:64:af:24:d4:06:6c:cd:9b:2b:
                    c2:2b:5e:da:fb:11:ea:44:61:36:8a:38:60:5a:2f:
                    55:28:71:7b:31:12:9c:44:f5:b8:85:55:36:ba:72:
                    e8:24:c7:09:e7:ee:d7:7a:28:3b:61:a8:7e:7c:ec:
                    e8:5c:ed:40:f7:0e:6e:26:77:fd:db:3e:d1:d2:7a:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3F:EF:C4:C6:6B:43:3D:75:0F:7D:CA:4F:0F:65:66:60:C9:36:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d62d202-cf6b-393a-aa34-e209358d0373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:01:ca:9d:51:b8:d9:13:67:ed:01:b5:6a:bc:1d:a3:a3:56:
         1d:15:2c:92:6a:e8:ad:55:bd:df:cb:d9:e1:0b:c7:cd:00:c4:
         25:f9:54:a7:75:ac:58:f1:66:91:3e:36:af:5b:d2:36:8f:c3:
         50:33:56:c3:f7:21:25:22:8b:d2:ef:96:4f:67:49:5f:3f:7e:
         cc:a3:b7:2a:63:ce:11:b0:73:fc:8d:a6:3d:91:83:d5:21:4f:
         9a:dc:a3:13:8d:91:21:f7:d1:b4:c7:56:1d:65:69:bd:b3:8b:
         71:c8:6b:f2:5f:30:7f:ea:2a:d2:8f:7a:01:40:35:f0:73:02:
         f0:5e:b6:96:b7:f6:0c:df:38:7c:d9:b2:a5:ee:8a:53:e7:07:
         25:d1:99:5c:fb:b1:74:f8:ad:9e:e6:6f:0a:23:d4:a0:24:93:
         27:91:bb:c9:bb:1f:42:6a:57:e8:8d:5e:5f:4c:be:b7:b1:16:
         f8:ac:73:c1:c2:ca:bb:03:b0:ab:dd:23:c9:40:ca:3a:0e:c5:
         f4:1b:18:f8:36:9c:d1:e1:9a:fb:c6:3c:05:8d:7e:15:06:be:
         4c:bc:0e:4d:b0:28:00:1e:76:84:38:fc:59:c7:5a:31:a9:12:
         eb:cf:57:fc:22:f9:82:63:64:38:9c:47:00:6c:b0:25:68:da:
         9a:83:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:06:05 2025 by rpki-client