Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8df73d95-a86a-3312-9392-cecf02d8dfb9.roa
File:                     8df73d95-a86a-3312-9392-cecf02d8dfb9.roa (raw, json)
Hash identifier:          x+7AR5Mzijr1shJ1To9Lpco8RZtYbAcGuqnPMJgZF1c=
Subject key identifier:   3E:BA:0B:25:C8:09:5C:70:78:C8:3D:7D:C2:92:C2:E8:D0:7F:D8:27
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619F76DF4DCEBC1ECEA7900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8df73d95-a86a-3312-9392-cecf02d8dfb9.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     202
IP address blocks:        130.174.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f7:6d:f4:dc:eb:c1:ec:ea:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=2677bc3e-2322-4570-876a-d66c74ca7353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9c:78:1e:eb:fb:1b:da:64:df:a9:f0:34:eb:
                    b9:38:34:2a:50:20:0f:97:b6:6e:e2:1d:0f:9d:71:
                    82:6e:84:44:d5:e0:7c:78:90:28:a8:f4:c1:e1:56:
                    78:8c:74:36:de:18:4b:37:01:79:2c:75:3d:a7:fc:
                    5a:27:f8:35:f4:8e:42:25:f8:75:36:e9:cf:d8:10:
                    6f:89:2f:6e:23:40:49:de:67:5f:68:ec:fc:18:7c:
                    47:71:7a:26:90:2e:02:11:bb:8b:fc:70:6f:46:99:
                    99:f2:29:c3:1e:00:be:54:32:74:dc:90:fa:13:ad:
                    3f:f5:28:2f:62:e2:ea:6b:5a:0a:de:d2:67:0d:16:
                    13:6c:f4:b8:d3:2e:52:78:d1:a4:18:ac:74:12:20:
                    95:b6:65:38:95:1a:c3:3c:79:c7:37:b5:2d:7c:ca:
                    8a:84:9a:01:ce:d7:4f:2e:c5:70:4d:9f:8a:78:19:
                    ed:a8:62:bb:c6:1b:8a:2e:a5:e0:e4:02:ad:ff:89:
                    27:93:53:42:af:b9:21:e3:fb:f9:75:c4:de:b8:c1:
                    64:06:cd:fe:c5:65:31:38:c1:f8:52:00:36:e8:41:
                    21:31:f6:fe:e6:f1:f1:3d:a4:64:e6:46:3d:b4:d4:
                    d5:e2:70:34:a9:59:70:a7:5b:b3:f1:61:a0:d0:79:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BA:0B:25:C8:09:5C:70:78:C8:3D:7D:C2:92:C2:E8:D0:7F:D8:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8df73d95-a86a-3312-9392-cecf02d8dfb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8c:ec:39:54:d2:37:15:38:fe:d0:38:59:31:b7:df:1b:75:
         d4:a7:ea:e3:50:63:26:94:02:92:62:68:e6:7f:d8:3e:d3:60:
         d0:28:81:e0:b5:1b:0c:ce:30:c5:09:91:c5:14:d7:8e:16:b0:
         a9:fb:7b:ed:b7:dc:b6:aa:63:56:2c:aa:a3:5f:be:24:51:5e:
         b9:38:d4:39:95:14:0e:83:7a:3e:30:eb:8f:bc:57:c1:f3:c1:
         a7:24:26:fd:55:6d:6d:b9:0d:3e:a9:3b:27:a4:50:5e:73:61:
         3b:5c:8d:32:e8:55:46:b8:29:37:55:af:3f:6e:ea:29:8a:0b:
         20:23:56:f0:0a:2c:1c:fd:4a:90:08:27:54:b3:81:ad:a3:50:
         f3:b6:c6:0f:23:82:37:18:a0:2f:ce:2e:a0:21:d8:f8:0f:68:
         46:24:05:48:d7:ec:5b:06:fc:21:12:41:d7:f0:8b:b4:46:8c:
         db:c5:b4:cf:1e:6b:ce:44:c9:8c:9a:e5:33:d0:4b:58:6a:62:
         1d:36:69:49:a9:1e:29:f5:d1:41:f1:98:70:42:5f:13:d1:79:
         d4:7e:87:7c:80:1e:3e:76:83:5f:7c:92:64:06:e9:98:57:0e:
         ec:67:05:b0:08:42:dc:be:24:36:a3:9d:92:94:9d:82:db:d8:
         96:f8:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:26 2026 by rpki-client