Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa
File:                     85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa (raw, json)
Hash identifier:          btvmhTkiI/aYoB1+zKantBdBIHS01H2kndepm+3PVvI=
Subject key identifier:   12:8C:61:CF:74:6C:FC:2A:27:47:2E:D1:0B:67:25:FC:80:66:A2:C7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B4A94088B73E6375265E80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     202
IP address blocks:        130.174.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a9:40:88:b7:3e:63:75:26:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=7204215a-78a6-45bc-bbd9-feef4a849ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:39:c5:0c:f3:fc:fd:bc:41:cc:6d:02:9a:
                    cb:d0:82:ee:2a:6a:46:3b:42:7c:53:8b:40:aa:5a:
                    41:b9:58:4c:62:27:22:6d:53:6a:54:8c:e4:7b:02:
                    f0:27:99:c1:0b:9d:f0:dc:11:19:f9:96:53:52:b2:
                    25:43:d4:88:33:cf:67:4e:c3:13:82:c5:89:c0:b5:
                    a5:5b:e3:d5:d6:05:d1:3d:c3:19:d5:ea:cc:fa:cc:
                    79:f4:ee:a0:25:92:67:62:db:1c:0c:71:4d:4a:2c:
                    88:ff:50:dd:50:65:ac:12:f2:33:21:aa:58:af:51:
                    f3:f9:c8:ae:6a:f4:6f:2a:4e:5e:a9:11:c5:5f:f4:
                    95:a8:a0:ea:bf:e2:5d:de:cb:52:db:3b:e1:ed:bb:
                    71:c5:a5:18:52:8a:92:6b:9f:62:e4:0a:c0:70:8f:
                    2d:19:fc:39:15:7b:6c:b7:4d:3f:0c:57:44:77:f4:
                    35:38:88:fc:e0:4e:c8:ce:ec:c7:4e:8f:52:43:b5:
                    2d:d2:63:3c:1d:b7:66:53:f2:a5:a1:7e:61:fe:48:
                    aa:1a:da:ed:53:e8:27:dc:94:e0:b5:98:74:66:2d:
                    a8:4a:c1:86:c5:b1:3a:0c:4e:70:f5:66:47:39:75:
                    ac:66:99:97:f1:ad:16:4e:ec:02:ea:80:f0:43:5c:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8C:61:CF:74:6C:FC:2A:27:47:2E:D1:0B:67:25:FC:80:66:A2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e9:31:b8:1e:0c:cc:4d:eb:44:bb:36:eb:13:31:71:35:f7:
         0f:56:77:ce:1b:a5:24:b2:1c:9c:29:99:35:bb:bb:5e:23:38:
         ee:d0:9b:df:38:e9:e9:7b:06:b1:fe:5a:6a:ba:9b:04:ed:0e:
         bc:7d:c4:2c:84:ee:57:68:8f:33:fe:b8:ba:67:ab:0b:ed:75:
         c2:31:78:42:a2:35:c3:75:b9:08:f9:b1:a1:af:bc:e1:fc:d1:
         ab:22:e6:c3:3b:8d:77:01:74:3a:46:f5:c6:50:75:69:90:93:
         37:2f:86:02:19:dc:78:2f:29:81:78:ba:02:44:9d:36:59:d1:
         d3:da:65:47:46:f0:62:9b:20:f0:d0:65:53:24:a6:22:48:2a:
         a7:12:19:49:9f:70:7f:1c:63:2d:31:29:72:66:83:d7:7f:e0:
         b4:ce:a6:f0:71:f0:fa:b6:eb:fb:40:20:fa:06:66:ee:97:be:
         cd:6a:da:e6:49:5f:a8:dd:b5:b4:90:f4:fa:e2:73:4d:02:7b:
         6f:7e:6b:df:91:c7:dd:4f:29:d3:f5:e1:ab:9b:5a:f8:9b:4c:
         73:32:17:f8:3d:c0:dc:aa:44:f2:ac:3a:29:75:09:5c:b9:80:
         1c:e8:93:98:37:71:1e:aa:fa:8a:46:f1:b2:bb:b5:dd:9f:76:
         c0:c3:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:32:41 2026 by rpki-client