Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8988750c-1324-31ff-ae8f-0f122bedaa64.roa
File:                     8988750c-1324-31ff-ae8f-0f122bedaa64.roa (raw, json)
Hash identifier:          MXjIHXBxjGKHH4aPom/iMmRBIEp08/bsiLDrY+4Y+8k=
Subject key identifier:   4C:A0:E6:84:FC:7F:E9:C5:0F:6A:B8:6D:54:D6:19:C1:AA:66:8F:E9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619FB66EBCF99F0D6BA8F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8988750c-1324-31ff-ae8f-0f122bedaa64.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     203
IP address blocks:        130.174.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:fb:66:eb:cf:99:f0:d6:ba:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=89872d0f-c229-4069-b694-d391a958c612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:22:d4:2c:02:7e:11:80:e1:e2:e8:70:c5:
                    0d:39:98:3d:10:70:51:1f:8f:6d:76:31:a6:de:9c:
                    a4:c9:e1:93:48:5f:7f:98:37:06:89:1d:3e:49:fa:
                    1c:70:4c:a8:40:51:b0:d0:13:c5:dd:29:b4:05:f0:
                    8e:83:50:46:01:57:fd:d0:66:ed:11:fc:d0:d0:e2:
                    6d:ea:13:c0:f4:7d:e5:ed:91:a6:09:9a:1d:f9:13:
                    7b:ab:cf:39:59:7c:18:54:e8:e8:d0:6c:71:1c:20:
                    84:d1:ca:93:dd:45:c6:90:00:50:41:1c:d6:fe:eb:
                    20:32:e5:0e:95:12:2f:c9:35:15:8b:e5:50:47:73:
                    67:3a:6a:2d:c8:e6:2e:bc:e6:fe:74:6a:5f:bb:03:
                    5b:4c:0f:0d:21:cf:ab:83:7a:8d:59:f6:27:43:7e:
                    df:6d:5f:f2:0b:0c:69:cb:b2:23:46:b6:e9:25:92:
                    8d:f8:ec:7b:63:27:5f:47:fa:45:58:42:eb:96:b2:
                    63:b8:3d:07:e2:6e:15:c0:f9:1f:2c:c7:57:c4:12:
                    7a:bd:98:af:4b:8a:1c:78:33:82:12:34:29:d6:5f:
                    52:20:16:71:49:c8:3c:13:8f:26:d3:0c:44:05:c4:
                    31:d0:02:38:a4:77:e3:61:44:17:f5:8a:dc:00:9f:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A0:E6:84:FC:7F:E9:C5:0F:6A:B8:6D:54:D6:19:C1:AA:66:8F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8988750c-1324-31ff-ae8f-0f122bedaa64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:80:f1:a9:8d:34:9d:1d:ce:27:21:e1:c0:30:fb:74:5b:1d:
         73:db:35:d1:7d:79:2f:99:fa:54:83:41:8f:65:2e:e6:16:68:
         99:e8:a9:2a:c9:62:64:7d:06:8b:2a:7f:3d:cf:a8:13:eb:7a:
         51:e0:76:ec:26:23:de:1c:aa:35:c1:b8:8f:2e:1b:c0:2a:f2:
         b5:82:01:b1:8c:73:cb:d9:89:b0:90:32:f4:f0:cf:07:cb:af:
         6d:6a:2c:68:96:ef:5a:a9:04:a8:18:c7:12:f8:5c:48:cc:20:
         3d:a2:93:ee:6a:17:35:48:12:6b:81:a1:7b:4e:bb:86:e9:1d:
         17:1d:3f:8a:27:dc:e4:fd:e9:88:73:48:e3:c2:df:b7:0b:94:
         0b:0c:9d:87:24:4a:eb:d3:19:12:b7:84:ab:21:6b:cf:b7:1b:
         ba:25:83:0b:33:eb:74:16:1f:03:f1:8c:d3:30:82:64:42:74:
         f0:a9:98:4a:ec:d0:62:c4:33:d7:29:14:48:45:b2:c1:b3:72:
         5f:90:ac:11:24:9e:82:c7:f6:37:3d:11:55:28:2a:c7:28:77:
         d5:96:95:eb:62:43:05:24:2a:19:d9:ae:1f:87:fb:76:87:e5:
         80:f8:74:aa:6a:d5:2a:b3:24:94:23:19:7a:ba:1d:a3:65:a6:
         11:bb:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:33:14 2026 by rpki-client