Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa
File:                     98a28125-0165-31f7-a265-0615bd186c6e.roa (raw, json)
Hash identifier:          bphhj3rrA8UGkW8eHNCSFYkMjcnyNd9KpkP3c6xOaf8=
Subject key identifier:   63:10:86:91:86:2B:95:CD:E5:49:C5:A3:33:19:77:02:A0:8E:8D:52
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BCDD8345D72E9B2E58E20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        130.174.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:cd:d8:34:5d:72:e9:b2:e5:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=24e42547-bd32-497b-a497-91bd7368bc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:30:56:76:dd:41:34:04:7e:7a:1f:78:0e:
                    b4:68:a0:19:d5:11:15:1c:e1:15:3f:7b:06:07:d3:
                    d8:1f:d6:9f:4d:42:be:b6:db:3d:1e:5f:8a:ff:4d:
                    56:f9:2c:5c:ad:ef:0c:88:28:97:a9:56:4f:48:25:
                    06:03:87:0f:bd:04:8e:23:54:e8:c7:cd:f5:8d:c5:
                    6f:60:b6:c4:95:e3:dd:77:53:60:25:b2:a2:cb:3d:
                    4f:1d:b9:84:23:29:56:f5:69:d5:be:e4:6c:72:b5:
                    85:56:0d:1e:40:57:30:11:be:1d:81:4b:52:49:71:
                    b7:9e:55:4c:99:a8:56:56:52:3f:fa:6e:13:38:7e:
                    14:9a:6e:19:fa:18:54:58:d5:81:23:bf:f8:ee:5f:
                    95:b1:8a:d4:d1:b2:bb:f5:8f:32:6d:ac:30:8c:c8:
                    f5:99:3f:9b:93:1d:51:f9:5d:b1:69:67:d6:7d:32:
                    89:df:79:a2:c6:62:30:f9:0e:46:17:49:c2:20:2c:
                    ae:e1:ad:34:71:f4:03:dc:52:a8:89:b5:9c:d0:fc:
                    61:56:db:d8:43:5f:2d:c2:21:b1:e8:97:b7:e3:10:
                    84:9f:f1:dc:34:45:4d:04:d9:d0:52:b5:5c:e2:00:
                    a2:17:b6:25:4c:b6:17:3d:87:97:76:fd:d6:49:8d:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:10:86:91:86:2B:95:CD:E5:49:C5:A3:33:19:77:02:A0:8E:8D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:eb:23:cd:c7:08:04:9b:63:d9:11:db:c7:94:cc:d3:54:b7:
         a1:53:9d:15:eb:f6:98:b9:1f:81:a1:6e:0f:37:33:ea:b6:93:
         c9:9f:0c:11:82:10:79:38:b6:f1:69:6e:5b:75:f5:4d:2e:78:
         85:85:a8:f4:4b:37:29:4a:27:ae:37:ce:18:eb:f9:ae:a3:00:
         38:7e:c5:1f:0b:91:21:53:16:74:f0:e4:65:5b:87:6a:d1:5c:
         b3:e4:c3:ed:c0:b0:f6:37:fd:b7:76:cd:9b:c0:9c:ac:8e:27:
         0b:ad:09:b7:20:b8:2c:b6:82:89:95:d3:ba:a7:4c:e8:56:55:
         3f:05:62:9e:8e:3b:07:77:3c:bd:03:23:21:a4:c6:25:c1:cd:
         2b:90:4c:7d:b9:81:24:c2:75:67:99:48:e4:00:2c:04:48:6f:
         77:81:ba:07:ac:6b:55:3b:8d:7c:63:81:51:55:1f:90:75:33:
         3f:fe:97:50:a1:e1:81:c6:51:ed:8c:df:a7:c8:21:57:2f:2f:
         5d:d6:ce:e3:ac:95:7a:08:2e:22:d6:3b:4d:61:78:1c:cf:82:
         77:94:ab:fc:3c:6f:2a:cd:b1:a8:d7:3a:8d:b0:ff:2b:f2:ca:
         08:f7:a6:16:ba:eb:38:25:f9:3d:17:76:0c:99:0b:6e:25:04:
         3d:cc:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:32 2025 by rpki-client