Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a5dbaa8-d4dd-34a5-9374-0fd3d904081e.roa
File:                     8a5dbaa8-d4dd-34a5-9374-0fd3d904081e.roa (raw, json)
Hash identifier:          K32i5ioXfrcAGZ9D6gpeDFFAsoF/DWtqz013eg9wdOM=
Subject key identifier:   DB:3F:DB:A7:F2:0D:F4:12:53:4F:4C:8B:1D:89:59:5B:4B:A1:AE:8D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B4A92A4255C3DF62C75014
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a5dbaa8-d4dd-34a5-9374-0fd3d904081e.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     3356
IP address blocks:        130.174.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a9:2a:42:55:c3:df:62:c7:50:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=c9640df2-882b-420b-b68a-12c3bfe17e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:59:07:29:60:25:39:5f:0b:dd:b2:45:ba:
                    a1:01:b6:aa:13:5f:90:8c:53:af:86:fd:ec:c9:bd:
                    ec:06:e5:30:9d:32:3b:87:08:91:8a:04:10:01:f8:
                    40:36:b8:f0:d8:ec:55:dd:a6:38:53:d8:be:cc:c9:
                    2c:02:cb:42:ec:7d:39:53:38:71:91:92:6b:0c:91:
                    b1:44:8f:a7:6b:9b:1f:65:1b:fe:f6:66:51:cf:d3:
                    d4:bf:94:2b:f9:d3:f2:a2:b0:9c:87:05:2e:3d:62:
                    a4:97:1f:fc:c1:e3:b4:27:4c:f9:a1:6b:30:1f:83:
                    32:1f:7b:a6:5e:d7:2d:d5:22:ee:f6:68:d9:34:33:
                    cd:9e:3d:54:58:bb:de:12:75:ff:1b:81:09:05:69:
                    62:f2:73:b9:38:a4:83:2e:c2:19:aa:fa:07:05:7a:
                    f5:0c:68:04:6a:9c:09:11:11:37:f2:18:f3:95:80:
                    e3:4e:1f:2d:73:c1:5c:1c:e8:c8:f7:01:b8:fb:fe:
                    ca:d2:52:78:45:76:11:09:22:f7:28:c5:b0:52:ad:
                    16:c1:4a:5f:89:be:61:32:6e:75:49:3c:b0:29:12:
                    6a:95:ee:e6:3e:45:23:70:4c:62:03:29:2e:38:84:
                    d0:b4:c6:d0:4f:12:78:f4:9c:0a:09:90:f6:33:02:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3F:DB:A7:F2:0D:F4:12:53:4F:4C:8B:1D:89:59:5B:4B:A1:AE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a5dbaa8-d4dd-34a5-9374-0fd3d904081e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:e6:09:05:97:28:7f:b0:6d:ac:63:35:e4:a3:2f:e1:23:
         78:bb:c9:bd:44:55:e5:45:ae:1e:0c:a4:e7:24:6d:ca:a4:02:
         34:1a:2b:21:36:91:c2:b9:63:9a:1e:e9:72:cd:63:24:43:8a:
         04:b5:34:43:9e:9e:d6:8a:bf:1f:9f:da:b3:03:b8:84:4d:51:
         57:09:40:7a:5a:5f:12:7f:05:83:7d:36:d1:75:3c:45:16:47:
         55:38:bc:e5:26:9f:8e:68:de:8d:22:50:23:5e:b7:a5:c5:53:
         62:90:ff:5e:42:64:9f:33:7b:6d:ee:92:64:47:b1:d2:ba:1f:
         25:4a:43:c9:1e:07:51:8f:e5:28:43:90:f1:75:5a:e5:8e:96:
         da:b0:6b:31:c9:c0:2b:77:d4:d9:2f:f2:61:fc:b4:a2:cc:fd:
         78:21:fc:e8:e6:84:21:da:d2:34:d3:8c:7b:6c:91:e3:e7:d6:
         d3:96:d9:a0:95:6e:a7:c8:23:0b:35:15:05:bf:40:31:79:0d:
         53:47:6c:75:08:30:20:06:3e:72:66:6b:3f:cf:a9:c8:92:5a:
         94:10:ea:cb:2d:ab:0a:ae:a5:ae:c7:ef:e3:2b:c5:1e:51:2a:
         90:3a:23:75:00:2d:c2:1f:50:91:db:44:4a:00:16:75:16:bd:
         de:56:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:49 2026 by rpki-client