Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82347d6e-e686-3d87-84b5-12e60450894c.roa
File:                     82347d6e-e686-3d87-84b5-12e60450894c.roa (raw, json)
Hash identifier:          NSLt0MinvGl22K5QkbE4tiFdnAFeH+VBKkzN6I2uysI=
Subject key identifier:   4C:2F:C6:13:90:15:8B:A3:34:F9:4A:4A:C2:87:3A:F1:F7:47:BD:19
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D300A498DB821E5AB80996A40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82347d6e-e686-3d87-84b5-12e60450894c.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     3360
IP address blocks:        130.174.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:49:8d:b8:21:e5:ab:80:99:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=bdada3ff-059a-436c-9037-382e3242e68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:6b:fc:61:8d:67:6d:99:50:ca:e7:1c:03:
                    be:99:a7:84:87:1d:41:35:d6:ca:1d:f4:58:28:ea:
                    4f:84:8a:3f:35:a9:5b:61:99:59:73:3b:4d:bc:bd:
                    98:0d:38:d7:f8:a9:07:29:75:ad:7f:3c:8a:48:aa:
                    f0:5c:b9:06:ea:e3:1c:63:3e:b7:50:de:fa:84:74:
                    c9:25:2f:33:14:97:b7:b1:f1:47:52:f7:fe:1d:19:
                    5e:58:b4:9a:d6:7e:3b:71:cc:a4:97:14:87:62:80:
                    a0:bd:b8:9b:62:24:e9:0a:dc:76:a6:07:5c:bf:2d:
                    fc:98:73:9e:2c:2b:86:8c:66:97:e6:f7:0e:71:02:
                    7a:3c:44:13:5b:f6:5b:ca:87:7a:b8:cb:7f:0a:8a:
                    1f:9d:c8:ec:09:34:60:72:fa:88:06:42:ed:e1:ed:
                    24:8c:77:a4:81:8f:13:d4:12:41:aa:e6:8c:eb:4e:
                    99:6e:70:90:d6:32:d9:2c:5a:f2:fa:94:e6:56:04:
                    14:55:34:ef:df:76:15:11:83:3e:ee:c3:6d:53:fa:
                    44:bc:8b:4a:6c:c5:af:8b:96:df:a6:f5:a6:e5:f4:
                    62:83:90:54:c9:0b:e5:3a:e7:2d:fd:f3:94:92:8d:
                    2d:61:d0:cc:23:32:48:ff:4d:96:e8:9d:62:e6:a9:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:C6:13:90:15:8B:A3:34:F9:4A:4A:C2:87:3A:F1:F7:47:BD:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82347d6e-e686-3d87-84b5-12e60450894c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:6b:17:aa:49:03:52:20:f1:2b:b7:5a:e0:5e:9c:4a:b0:
         27:96:88:4a:73:19:32:b6:a1:7a:d6:36:cd:58:6d:e0:8d:c0:
         1d:fc:d7:59:b0:fd:2b:57:2d:d9:2a:35:fd:40:79:40:59:38:
         b5:30:16:1d:ee:16:ab:d0:c1:86:6e:db:43:b0:09:60:38:37:
         b8:4e:36:c9:72:5b:b2:1a:77:d1:33:76:1c:f3:08:ef:61:79:
         17:d9:86:00:b0:3f:f9:57:83:50:b7:cd:17:cd:a3:09:68:b4:
         85:d5:b4:ac:ba:1c:89:af:a7:d7:81:10:bc:d7:98:c0:c8:67:
         b1:ab:08:57:e7:2e:92:37:07:95:70:35:ef:5c:55:5a:fc:5d:
         a8:83:c6:60:2a:29:b9:3c:03:c6:9f:89:2f:c9:df:33:54:3a:
         a5:2b:20:a1:01:bf:d7:78:f3:d5:54:9c:54:89:71:45:bb:aa:
         2d:ee:6d:95:a3:6a:ad:6d:da:9c:72:2b:73:ef:05:1e:14:58:
         ef:23:d0:52:15:8a:c5:fb:09:e6:f1:cd:12:dd:85:9a:a2:4b:
         e0:e6:86:40:e8:68:66:98:4e:34:1b:f6:64:e4:2a:e0:f3:69:
         e1:a7:a5:1c:2c:1a:b3:9c:02:0a:b5:f7:f9:e9:de:e9:f9:bb:
         9d:cd:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:29 2026 by rpki-client