Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6994f802-5219-3843-a48c-da154e62c878.roa
File:                     6994f802-5219-3843-a48c-da154e62c878.roa (raw, json)
Hash identifier:          cqQyI8xzZyjZvBMMC30F18oe50MeTnPQpMOC/iY45bw=
Subject key identifier:   22:CC:28:21:A8:09:10:2B:05:93:50:1B:CC:33:E6:17:EA:0B:68:BB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BBAFA1A26170229EE97C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6994f802-5219-3843-a48c-da154e62c878.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     202
IP address blocks:        130.174.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:ba:fa:1a:26:17:02:29:ee:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=a8ad6d60-e457-4393-8dd6-cc59fcc54d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:42:2c:4d:b1:e4:94:df:33:0a:f6:13:28:16:
                    17:be:bb:1b:0e:4f:56:e6:e5:f8:fe:c1:1e:03:41:
                    6c:ce:f7:e1:12:f0:f2:f3:32:8b:42:c0:18:aa:4a:
                    f1:46:02:2f:51:ed:36:f0:58:b9:b0:b9:ff:8b:2f:
                    be:48:4e:c3:7c:24:a8:02:40:6f:54:ba:56:1c:4e:
                    b3:f1:20:86:13:39:36:bd:34:55:ac:19:78:2e:96:
                    ba:14:03:39:cc:ce:eb:ac:be:b6:53:6f:27:04:f6:
                    e1:f5:75:52:cb:6c:a5:90:8c:e5:95:db:2e:1c:52:
                    86:86:89:46:ba:53:63:51:a9:fa:b4:4f:5d:75:97:
                    36:89:07:f8:e9:3c:43:46:66:5c:28:30:4d:4f:a6:
                    f5:6e:e6:01:33:27:5b:4b:4a:23:99:17:5a:cb:49:
                    ac:27:83:b6:06:b0:9e:38:f8:f4:0b:84:48:b2:c2:
                    60:47:a3:24:2e:fc:da:d5:30:d5:79:43:9c:ae:cf:
                    d6:34:bf:eb:de:bc:f1:05:8c:b3:54:93:a7:82:b2:
                    ae:11:40:ff:14:e1:0d:35:48:55:d1:21:47:89:e7:
                    00:b7:84:81:2e:c7:ac:cc:86:ed:f8:d8:3c:89:95:
                    fb:9c:26:57:63:dd:83:a3:a2:c3:0f:9e:61:3f:4c:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CC:28:21:A8:09:10:2B:05:93:50:1B:CC:33:E6:17:EA:0B:68:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6994f802-5219-3843-a48c-da154e62c878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:98:d0:fb:2b:5e:14:d6:04:66:e6:3c:0f:ed:6e:1d:9b:4f:
         fe:ed:c4:f9:a6:dd:3d:86:b4:5c:7f:d3:e6:d3:26:15:1c:66:
         f7:3d:96:eb:a0:b2:9c:26:41:93:5e:02:98:cb:17:16:eb:26:
         b5:88:fc:e6:5f:bd:90:7b:e2:e4:87:dd:88:77:be:0e:e5:a7:
         34:56:fa:66:11:b7:a4:ad:06:44:c3:c9:10:a2:4f:4e:fb:da:
         24:62:00:97:81:d0:81:ca:e1:2a:7e:5e:45:db:e4:0c:98:af:
         03:e5:ca:a1:30:92:6a:e6:21:07:ab:74:a9:d1:65:42:c2:bb:
         ed:bf:9e:2f:9a:f2:8a:db:3b:cf:d1:a7:1d:94:50:8e:a3:ec:
         02:90:d5:6e:ad:72:19:9c:61:8f:bd:52:37:64:3d:1d:9f:a1:
         06:ea:82:6a:3c:14:fe:79:da:71:ab:1d:79:0b:da:5c:5c:cb:
         dd:e1:2f:3f:77:53:56:80:da:3f:20:8b:7d:86:03:ba:05:65:
         fb:05:3e:7a:7a:5b:d5:52:1c:0f:d5:71:0c:6f:4f:5d:2d:6d:
         97:d5:8d:16:f2:d8:f1:f3:cc:7d:8c:31:bc:fa:bc:5d:ba:9c:
         c7:ea:dc:31:ee:29:6a:a4:f3:2a:c1:b5:5a:36:a3:3c:8e:b2:
         3e:cd:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:17:16 2025 by rpki-client