Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4cf74a1a-deed-3df7-9962-96105fd46586.roa
File:                     4cf74a1a-deed-3df7-9962-96105fd46586.roa (raw, json)
Hash identifier:          /cioRLM/Hm+Ayjyemhwu9tmck6rcoby1Af66QcbzR4M=
Subject key identifier:   20:17:F7:82:66:14:D6:AC:67:F2:9A:35:CF:BB:B7:4F:0A:E4:ED:2B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A100A80E087D0302AC1BC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4cf74a1a-deed-3df7-9962-96105fd46586.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     202
IP address blocks:        130.174.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:00:a8:0e:08:7d:03:02:ac:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=4e35daab-5d41-4d24-abe4-79f6f11636c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:2e:6f:f9:2f:46:83:7e:37:5a:70:f8:3d:
                    09:67:e3:93:c3:08:79:4d:63:e1:30:9f:bf:09:87:
                    3b:83:3d:02:33:d2:f4:ec:37:c3:dc:94:d0:32:8c:
                    cc:db:0a:34:9c:91:8c:7a:73:b4:e0:f8:05:04:9f:
                    b1:a9:dc:5f:c2:5c:4e:aa:a1:38:7c:db:67:8b:3e:
                    52:3f:28:78:d3:f5:ba:1d:29:20:8d:5b:27:74:c5:
                    96:c0:b6:50:ba:b2:e4:5c:03:2c:b7:13:70:9f:bd:
                    b0:37:00:a0:d8:18:19:9a:d5:6f:4d:35:cb:f6:d6:
                    39:89:36:19:04:31:48:03:e1:46:d7:4e:7c:8a:5f:
                    b0:d4:cd:ad:9a:44:ae:2a:75:e2:f9:e1:94:c6:47:
                    d2:8c:87:cd:1d:80:d3:75:53:7c:dc:70:53:c5:a2:
                    67:bd:e8:4d:ba:51:dd:2b:23:5c:d5:8c:a1:e2:1f:
                    c7:12:3a:8d:e4:e7:96:56:1a:fb:5a:c5:8d:5c:f7:
                    65:cb:54:c8:c6:b5:aa:11:18:6e:f4:4e:ed:8b:9d:
                    30:62:be:5c:2b:08:a1:f9:d0:b9:8f:b4:cd:a9:db:
                    f7:61:fd:8a:5b:60:d6:6d:d4:a2:5e:dc:4f:2c:b6:
                    d6:24:6d:1f:96:c7:3a:4c:52:fd:9e:a2:64:5a:a3:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:17:F7:82:66:14:D6:AC:67:F2:9A:35:CF:BB:B7:4F:0A:E4:ED:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4cf74a1a-deed-3df7-9962-96105fd46586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1f:68:b7:81:9c:bf:65:19:f5:1f:8a:58:1b:38:20:ba:07:
         4f:f3:08:6c:ee:56:cd:b7:d8:52:20:cb:0f:66:c3:62:7e:5e:
         6a:c6:8e:2a:e1:86:bb:00:a7:89:50:34:fb:e5:e2:be:05:67:
         60:65:35:d4:41:c7:93:43:30:46:dd:35:d8:07:df:0c:aa:59:
         d5:2e:d6:ea:25:4f:bd:a0:53:55:17:25:9b:e1:01:ae:be:50:
         94:0c:ca:c2:0c:5e:4e:74:16:e1:18:2a:38:d7:e0:8a:8e:ae:
         b7:6b:ea:ec:12:93:61:5e:6c:72:74:15:42:e3:c8:cd:c8:66:
         37:e9:9a:d0:05:46:9d:c6:15:d7:68:4c:2a:7f:ea:51:1e:cf:
         2a:a5:83:85:30:0c:46:e1:c2:75:37:45:83:56:52:ee:db:d6:
         a9:48:c4:dd:27:8d:83:eb:77:ef:e9:0b:5a:81:0b:46:ef:46:
         0b:aa:d9:ea:f3:90:32:ef:46:02:92:b7:98:97:17:9f:26:9c:
         07:fe:40:32:61:0a:fe:da:ac:65:8d:54:41:19:22:24:bf:51:
         fc:d6:0f:05:2c:e5:cf:4a:1d:8e:15:79:c5:4e:e4:52:af:9a:
         2b:80:90:ef:c3:6b:3e:d8:b7:c9:53:65:f7:18:a2:3d:97:83:
         9c:c9:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:49 2025 by rpki-client