Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/608a44ef-3dbb-3c1c-8126-65eb424c3491.roa
File:                     608a44ef-3dbb-3c1c-8126-65eb424c3491.roa (raw, json)
Hash identifier:          D4WrMDZgVLWXqKTnfJ2y6EyIE2xvCk3b+v2yMKRJdIs=
Subject key identifier:   BC:38:AC:33:F9:90:6A:37:91:F7:56:49:BF:57:13:B6:7E:BB:95:F2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BD00952398932A6A12980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/608a44ef-3dbb-3c1c-8126-65eb424c3491.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     202
IP address blocks:        130.174.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d0:09:52:39:89:32:a6:a1:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=49dba18b-19b0-4093-9b25-d80a1287349e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:48:48:7c:60:7d:77:67:ae:7c:b1:b2:7b:
                    06:35:23:71:08:c7:c2:1e:4a:b8:47:5b:42:8c:9a:
                    d6:6c:0f:70:ed:a7:8a:8a:3c:aa:8b:c0:9e:6a:93:
                    cb:ef:c2:fb:1a:84:30:e5:af:b2:21:07:fe:9b:dc:
                    70:20:3f:1a:3b:b1:8c:11:31:74:12:02:35:b3:83:
                    ee:83:53:02:a2:08:e7:bd:18:30:15:f9:e4:d0:b7:
                    8e:5e:82:92:ff:02:7c:d8:38:e0:5e:0d:7d:a9:31:
                    22:36:e1:5a:d2:ac:d4:dc:46:6c:0d:b0:db:77:5c:
                    0c:48:d7:b3:7e:cf:94:8c:2c:c9:26:3e:56:95:33:
                    cb:17:79:55:2d:13:fd:06:2b:d9:c2:ba:6d:65:4c:
                    91:9d:80:06:cc:bd:65:e0:ee:55:11:cc:12:b7:01:
                    13:ba:0b:03:8c:ec:0c:b7:72:6b:68:b9:c9:8a:aa:
                    40:9a:84:9f:95:6d:ce:c4:1c:fb:4e:d6:e6:97:23:
                    8e:8c:42:fa:1c:79:22:25:d4:de:78:39:a8:b5:62:
                    af:f9:70:2d:4b:fa:5e:ec:70:1e:10:5f:71:88:33:
                    f3:79:49:a6:88:63:20:90:81:01:e4:d0:f2:0e:9f:
                    96:bc:32:2e:f5:cd:85:78:1a:00:23:e0:eb:68:aa:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:38:AC:33:F9:90:6A:37:91:F7:56:49:BF:57:13:B6:7E:BB:95:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/608a44ef-3dbb-3c1c-8126-65eb424c3491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:da:b7:e2:7c:bc:0e:40:47:b8:7a:74:9e:a9:4a:23:8c:3e:
         12:c8:82:9d:35:8c:7d:3e:c4:ed:7a:31:3f:27:90:41:d6:94:
         2e:7f:fa:38:cd:bb:36:d2:d7:85:36:95:7b:0c:7d:c1:1c:04:
         cc:7a:84:a5:e8:87:06:5c:b1:71:a1:38:fc:c1:89:73:e3:a8:
         f1:e5:25:70:5c:1e:25:58:96:bf:b8:59:ab:83:bb:1b:d5:1b:
         d5:27:43:56:bb:62:6e:3b:b3:1a:62:44:ca:32:5c:8b:9b:8f:
         a9:2a:06:66:43:56:17:dc:c9:50:a6:a3:d2:e8:74:4f:6d:57:
         00:2e:82:aa:5c:6a:a0:24:a2:0a:ef:37:1a:6d:db:56:0c:6e:
         06:2a:55:81:8c:d4:42:24:9a:8f:27:75:61:19:d1:a0:78:c1:
         7e:57:f6:2e:e6:3b:6b:1b:12:78:7e:bc:7c:00:8c:ac:46:f9:
         ee:c9:3f:37:78:d4:be:a2:cd:e0:0c:b4:be:06:ee:b6:b0:f1:
         b4:1f:2a:2b:a1:03:c0:8b:87:46:da:e6:46:af:18:f9:55:28:
         f2:fd:79:20:87:0d:26:85:57:64:dc:42:54:2c:2e:c8:22:fa:
         ca:3a:74:f5:61:6c:ee:ee:e1:94:6d:9d:ae:85:a7:ab:c5:a5:
         5f:f6:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:17:50 2025 by rpki-client