Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56418911-95e6-325f-9e4c-2859b4ca237a.roa
File:                     56418911-95e6-325f-9e4c-2859b4ca237a.roa (raw, json)
Hash identifier:          CPicOrxjSwE7MCrnPvbog8NhvHRXX6OTuqkLsxaqR30=
Subject key identifier:   15:F0:43:F3:2B:2C:4D:F8:C0:42:19:DC:76:F5:06:C8:FB:54:22:C7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B79ECF95CEF13BA7662B20780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56418911-95e6-325f-9e4c-2859b4ca237a.roa
Signing time:             Fri 10 Oct 2025 14:37:59 +0000
ROA not before:           Fri 10 Oct 2025 14:37:59 +0000
ROA not after:            Thu 08 Jan 2026 15:37:59 +0000
asID:                     3356
IP address blocks:        130.174.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ec:f9:5c:ef:13:ba:76:62:b2:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 10 14:37:59 2025 GMT
            Not After : Jan  8 15:37:59 2026 GMT
        Subject: CN=10946f20-2bfb-478f-975f-45018190c530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:18:77:fe:81:f4:19:30:96:dc:77:65:7f:
                    a6:e1:a5:48:58:cc:a3:e3:f1:71:e7:89:18:c8:66:
                    bf:3f:12:25:53:28:95:aa:22:92:dc:9d:4f:04:77:
                    a9:08:5a:d0:23:a4:11:e9:85:ef:6b:d9:61:41:a1:
                    5a:f7:46:8c:0e:94:5e:ce:2a:17:9a:9d:5e:a7:43:
                    1d:52:fe:81:68:13:7a:57:2b:66:83:32:37:0d:86:
                    71:01:b1:75:49:22:3f:29:b7:72:ba:f6:7e:3c:1e:
                    e6:0b:21:4a:c8:1f:a9:91:0e:84:48:db:e4:8f:8c:
                    ed:15:45:1a:74:d1:cd:a1:8f:b3:06:87:c2:73:98:
                    ee:f4:eb:ef:ff:aa:be:1b:43:24:02:36:f7:96:6b:
                    fa:e9:9d:30:2f:0f:2f:0f:bd:bd:da:48:98:d8:53:
                    90:81:58:6f:93:2a:a2:88:bc:3a:7b:d9:36:3b:0b:
                    8e:e4:ea:da:49:0b:4d:b2:9c:1d:a4:91:66:f1:d3:
                    1c:b4:a2:a6:df:c4:3f:49:9d:91:9b:98:67:f0:13:
                    ab:ba:08:2d:62:96:ba:d4:ca:ba:ff:81:21:7f:ab:
                    43:c3:64:ba:25:66:99:bb:5e:9a:9b:ef:4b:ea:63:
                    b5:5f:a5:df:8c:41:e4:e4:44:46:33:01:c4:c8:55:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F0:43:F3:2B:2C:4D:F8:C0:42:19:DC:76:F5:06:C8:FB:54:22:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56418911-95e6-325f-9e4c-2859b4ca237a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b7:08:f2:8a:8f:15:54:4c:20:8a:ef:1a:16:bd:94:fb:1e:
         a6:bf:1d:42:5f:c3:9b:4f:de:f5:0d:14:4a:1d:f2:7d:87:4e:
         1c:5b:80:0c:01:97:f2:1a:1d:91:95:70:8c:77:be:c8:7c:4d:
         2c:f3:ff:29:82:19:01:6a:25:9e:0e:b8:2e:df:68:7a:3b:f6:
         65:b1:71:9d:07:1f:db:0e:e0:d5:04:53:4b:16:05:f4:f6:59:
         a8:1f:bb:a4:71:52:af:36:51:ff:62:e8:2e:4d:03:ac:80:a2:
         dc:65:e6:81:ae:f4:4c:b0:58:bb:33:17:66:c1:48:be:ff:96:
         af:57:18:d6:ca:8f:48:ce:bc:83:ce:06:08:c1:48:72:2c:10:
         58:54:15:86:43:80:02:01:89:8a:c1:3e:67:25:75:cc:c2:b6:
         8d:3d:59:58:77:aa:0e:4f:4d:27:9d:17:a4:26:ff:d5:9a:3c:
         86:2d:64:a5:71:86:64:f9:60:da:bd:ef:86:ce:ef:82:cd:f4:
         ef:78:af:98:a3:aa:0c:ca:72:14:14:e7:6c:16:f7:89:00:47:
         10:25:09:90:15:9b:75:0d:5d:13:92:a6:83:18:53:ea:e0:1a:
         34:f0:50:fb:49:32:5f:10:5e:1e:a9:55:7e:5a:93:16:d3:6b:
         70:47:96:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt57Plc7xO6dmKyB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAxMDE0Mzc1OVoXDTI2MDEwODE1Mzc1OVowLzEtMCsGA1UEAxMk
MTA5NDZmMjAtMmJmYi00NzhmLTk3NWYtNDUwMTgxOTBjNTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSkYd/6B9Bkwltx3ZX+m4aVIWMyj4/Fx54kY
yGa/PxIlUyiVqiKS3J1PBHepCFrQI6QR6YXva9lhQaFa90aMDpRezioXmp1ep0Md
Uv6BaBN6VytmgzI3DYZxAbF1SSI/KbdyuvZ+PB7mCyFKyB+pkQ6ESNvkj4ztFUUa
dNHNoY+zBofCc5ju9Ovv/6q+G0MkAjb3lmv66Z0wLw8vD7292kiY2FOQgVhvkyqi
iLw6e9k2OwuO5OraSQtNspwdpJFm8dMctKKm38Q/SZ2Rm5hn8BOruggtYpa61Mq6
/4Ehf6tDw2S6JWaZu16am+9L6mO1X6XfjEHk5ERGMwHEyFXnQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXwQ/MrLE34wEIZ3Hb1Bsj7VCLHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTY0MTg5MTEtOTVlNi0z
MjVmLTllNGMtMjg1OWI0Y2EyMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI63CPKKjxVUTCCK7xoWvZT7Hqa/HUJfw5tP3vUNFEod8n2HThxbgAwB
l/IaHZGVcIx3vsh8TSzz/ymCGQFqJZ4OuC7faHo79mWxcZ0HH9sO4NUEU0sWBfT2
Wagfu6RxUq82Uf9i6C5NA6yAotxl5oGu9EywWLszF2bBSL7/lq9XGNbKj0jOvIPO
BgjBSHIsEFhUFYZDgAIBiYrBPmcldczCto09WVh3qg5PTSedF6Qm/9WaPIYtZKVx
hmT5YNq974bO74LN9O94r5ijqgzKchQU52wW94kARxAlCZAVm3UNXROSpoMYU+rg
GjTwUPtJMl8QXh6pVX5akxbTa3BHliY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:29:57 2025 by rpki-client