Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95a0cdb7-d09f-3ea3-9c3d-82320ad222f6.roa
File:                     95a0cdb7-d09f-3ea3-9c3d-82320ad222f6.roa (raw, json)
Hash identifier:          giyTl65qkIgwKPDHKAUxHOVlDQgBFRKGSTTr51O+H58=
Subject key identifier:   30:7D:A8:55:1E:C7:5E:18:C3:34:2C:6F:B9:D7:53:74:80:1C:02:48
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF717700B46C50CE510520E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95a0cdb7-d09f-3ea3-9c3d-82320ad222f6.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3360
IP address blocks:        130.174.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:70:0b:46:c5:0c:e5:10:52:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=a5290ad1-27eb-487e-a1ad-ad4c0d1fd15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:dc:0e:a3:e2:7e:62:f7:fa:40:79:bb:82:
                    68:8a:9d:38:6e:73:25:d1:48:e3:47:43:7b:a3:24:
                    b6:b9:4b:21:c2:44:72:df:3e:a8:b4:94:8b:e9:0f:
                    c3:6a:d0:85:fd:64:fc:a8:40:f2:66:6c:be:52:a2:
                    ed:1d:10:92:7d:e9:a6:91:25:41:1b:69:59:6b:0d:
                    03:92:59:22:6d:84:27:03:bb:75:41:bc:c6:b2:3c:
                    38:cb:8e:2b:62:fe:57:3f:ce:9f:c1:2e:23:a0:05:
                    64:a3:11:3f:3f:a6:5e:74:35:ad:da:8a:47:74:a8:
                    94:b2:4a:43:f4:46:07:54:fb:39:06:c5:f6:de:0b:
                    e2:64:98:89:c2:b6:1a:7f:ba:57:e7:68:d7:ee:dd:
                    bc:34:00:0c:14:f2:8e:5d:67:13:3c:49:94:e5:7e:
                    f1:97:48:1f:5c:45:15:66:6f:e7:d6:50:51:fd:1f:
                    6d:03:35:85:88:2b:71:77:ab:b9:4c:48:e1:7d:ef:
                    24:71:23:3d:34:a8:af:bb:32:be:e1:1b:12:44:6b:
                    23:85:4a:ca:e7:9c:04:f3:96:a6:f0:4b:90:2c:93:
                    52:aa:6a:af:41:37:d2:fc:7b:20:03:da:04:d5:a3:
                    66:8a:d2:7a:5e:37:bc:08:5d:8c:30:7f:2d:18:44:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7D:A8:55:1E:C7:5E:18:C3:34:2C:6F:B9:D7:53:74:80:1C:02:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95a0cdb7-d09f-3ea3-9c3d-82320ad222f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:22:df:f4:a6:c4:11:a9:3f:d6:d3:fa:ef:06:44:b6:7f:54:
         b2:cb:1f:19:ef:55:f8:6f:e9:0e:54:ab:5c:9a:e2:56:80:87:
         d7:0e:f3:af:fb:24:3d:14:9c:59:15:6c:a1:b9:17:56:f9:69:
         36:47:08:ff:c4:44:13:23:47:87:eb:8c:d1:b7:c9:d9:5f:77:
         ec:69:cb:6d:e5:6f:45:08:32:7c:b6:f0:99:7f:52:9d:fa:1a:
         8d:0c:cb:b6:18:2f:86:44:ba:1a:6e:04:eb:2d:5d:7a:67:54:
         f8:e4:09:49:b1:c9:3f:8a:bb:12:9d:d6:20:8e:a0:82:35:3d:
         50:f9:91:68:b5:ae:81:eb:c4:7a:5e:3b:aa:b1:f0:77:43:50:
         ae:80:61:b7:4e:22:94:ba:5a:70:88:5d:38:99:9b:be:96:3c:
         33:52:94:80:68:89:5c:01:3c:02:d8:c5:e0:67:11:db:96:d6:
         9e:b4:cd:c1:57:de:dc:1a:f7:20:fa:0f:74:34:e8:ae:53:18:
         65:4c:24:1f:80:e9:34:20:b4:fd:3f:07:a6:76:00:51:76:8d:
         d8:7b:14:2d:7e:e3:f9:d8:8d:d6:9a:07:dc:7d:50:38:16:0b:
         8b:e2:86:cc:3f:64:0b:9a:07:8e:e8:18:4e:6f:de:3b:5b:f0:
         46:36:03:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3ALRsUM5RBSDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
YTUyOTBhZDEtMjdlYi00ODdlLWExYWQtYWQ0YzBkMWZkMTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5vcDqPifmL3+kB5u4Joip04bnMl0UjjR0N7
oyS2uUshwkRy3z6otJSL6Q/DatCF/WT8qEDyZmy+UqLtHRCSfemmkSVBG2lZaw0D
klkibYQnA7t1QbzGsjw4y44rYv5XP86fwS4joAVkoxE/P6ZedDWt2opHdKiUskpD
9EYHVPs5BsX23gviZJiJwrYaf7pX52jX7t28NAAMFPKOXWcTPEmU5X7xl0gfXEUV
Zm/n1lBR/R9tAzWFiCtxd6u5TEjhfe8kcSM9NKivuzK+4RsSRGsjhUrK55wE85am
8EuQLJNSqmqvQTfS/HsgA9oE1aNmitJ6Xje8CF2MMH8tGEQ1awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDB9qFUex14YwzQsb7nXU3SAHAJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTVhMGNkYjctZDA5Zi0z
ZWEzLTljM2QtODIzMjBhZDIyMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAi3/SmxBGpP9bT+u8GRLZ/VLLLHxnvVfhv6Q5Uq1ya4laAh9cO86/7
JD0UnFkVbKG5F1b5aTZHCP/ERBMjR4frjNG3ydlfd+xpy23lb0UIMny28Jl/Up36
Go0My7YYL4ZEuhpuBOstXXpnVPjkCUmxyT+KuxKd1iCOoII1PVD5kWi1roHrxHpe
O6qx8HdDUK6AYbdOIpS6WnCIXTiZm76WPDNSlIBoiVwBPALYxeBnEduW1p60zcFX
3twa9yD6D3Q06K5TGGVMJB+A6TQgtP0/B6Z2AFF2jdh7FC1+4/nYjdaaB9x9UDgW
C4vihsw/ZAuaB47oGE5v3jtb8EY2A5k=
-----END CERTIFICATE-----
Generated at Sun Sep 27 15:47:39 2026 by rpki-client