Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f3ae5bd-6dc3-3048-9cf9-0fdc191ed6b2.roa
File:                     7f3ae5bd-6dc3-3048-9cf9-0fdc191ed6b2.roa (raw, json)
Hash identifier:          5vVcVc6J+YN610gd/kpSe8l6x1dY4q/6usRv62zKPDU=
Subject key identifier:   96:3D:70:9A:40:32:04:F6:53:88:6E:57:D5:C0:50:26:DB:7B:85:C4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619F8F558B9B72E7182AA00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f3ae5bd-6dc3-3048-9cf9-0fdc191ed6b2.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     3356
IP address blocks:        130.174.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f8:f5:58:b9:b7:2e:71:82:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=d11a4147-7e41-44db-ad26-94c5705116ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:6f:31:7f:97:f2:45:31:25:2b:31:11:bc:
                    c8:86:f8:02:d5:fc:29:f2:4d:da:d7:b2:f7:81:56:
                    52:e4:bd:74:98:b1:6b:60:8a:34:61:d8:82:d5:db:
                    5b:43:70:86:17:76:76:73:81:8e:33:95:99:53:65:
                    96:28:65:e2:ea:c4:e2:37:6a:95:14:11:86:bb:ec:
                    af:56:ef:54:e0:6b:3d:38:23:ff:7a:e7:f9:e3:21:
                    a0:b2:36:50:78:de:af:21:2a:34:e2:b8:cc:15:e8:
                    14:44:80:93:30:96:87:c1:4b:ef:69:57:66:e3:ce:
                    96:bc:54:ea:5f:3e:7c:a9:ce:77:57:52:0b:21:ee:
                    bb:9c:30:af:96:5b:c1:cb:3e:cd:19:52:85:4c:66:
                    7b:eb:66:5a:46:65:2a:82:6d:b0:41:d1:7a:00:bc:
                    bd:b9:e0:2d:ee:c3:be:69:aa:c5:93:9b:98:67:61:
                    a1:9f:82:de:7b:fe:e8:4a:01:97:a5:83:8f:0c:18:
                    cb:d6:06:93:2f:d3:19:2a:ae:2c:9e:21:0f:41:53:
                    3c:29:e6:dc:22:7d:82:26:70:7c:f0:4a:50:d6:cb:
                    f4:15:99:b3:99:43:1c:60:32:8f:ea:23:2c:b7:40:
                    0f:b0:b2:a3:6b:21:65:55:05:d2:7a:30:1e:a3:41:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3D:70:9A:40:32:04:F6:53:88:6E:57:D5:C0:50:26:DB:7B:85:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f3ae5bd-6dc3-3048-9cf9-0fdc191ed6b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:30:0e:e4:2b:13:38:4c:1c:73:23:17:21:fa:68:e6:67:ad:
         3d:1a:ce:59:db:8b:ec:36:d6:cb:22:80:a5:36:ea:12:d0:9d:
         3b:7b:66:e1:a2:06:6d:9e:bf:eb:ee:ee:9b:67:54:a4:18:e6:
         82:94:41:3b:2a:b3:59:de:b0:02:58:65:f5:a1:f3:82:09:91:
         6e:3f:86:d1:8b:0e:37:49:41:ff:69:e5:d7:ad:9a:6f:05:89:
         09:7a:b7:28:36:d3:ec:5f:0e:5d:cf:54:7f:6d:e0:9b:f0:54:
         dd:fd:d7:a1:39:c2:18:5a:1a:30:2e:d7:74:b8:f2:df:41:96:
         6b:3a:06:f9:a3:6e:10:18:59:e0:ad:7a:ef:e2:6b:0d:45:d0:
         33:a1:45:6e:c7:d0:5f:4a:33:79:2b:d6:09:6b:c6:a7:ff:21:
         be:30:c8:2c:77:28:d5:75:cf:c3:fc:b2:57:33:7f:74:aa:95:
         01:46:24:f4:7d:b8:7b:b0:c8:e4:fe:9e:fe:d4:93:b6:9e:f3:
         93:06:57:25:ca:af:06:76:e2:38:8e:04:08:86:13:b5:a0:55:
         df:4b:bb:32:57:35:2a:61:24:75:73:9c:b0:bc:be:87:c1:e2:
         e3:83:81:14:69:70:46:90:7c:a8:5d:04:62:d8:d5:7d:1b:a2:
         ed:d6:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:34:55 2026 by rpki-client