Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a064c8da-1191-3ee2-bd8e-0c68e23fc16d.roa
File:                     a064c8da-1191-3ee2-bd8e-0c68e23fc16d.roa (raw, json)
Hash identifier:          wpMH+cnJBQ9PGyhYxBaJpJ2qhJkeq7QvzVJr2YsTidY=
Subject key identifier:   AD:8B:3E:6C:B5:AA:99:E7:80:D0:1F:A9:B0:EB:C5:90:25:EE:72:E8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A1007C28B9C090389DA240
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a064c8da-1191-3ee2-bd8e-0c68e23fc16d.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3360
IP address blocks:        130.174.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:00:7c:28:b9:c0:90:38:9d:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=039b12a6-0dc4-4397-9050-d6679d174079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:5c:81:ac:81:1b:52:4b:57:78:fe:c8:f7:
                    4d:f8:28:91:4c:f1:eb:68:ac:4b:e4:34:04:db:04:
                    86:80:8d:c9:05:2b:17:3a:58:8f:78:a8:0c:aa:fe:
                    b5:a6:d5:a2:d3:0f:41:4f:62:fc:84:f9:be:c5:c7:
                    03:c2:37:2c:9b:1a:f0:95:32:1d:1a:22:fe:9e:b9:
                    23:82:37:c3:09:b5:2c:b9:e3:2f:f2:91:6f:f5:02:
                    ed:f7:7a:e9:ec:65:fb:87:bb:b8:d2:7e:2c:ed:b5:
                    3f:a5:6c:ba:0a:e2:a0:9d:51:8c:94:70:d6:8c:09:
                    e0:2f:98:f2:0f:fd:6b:4c:03:78:30:03:a1:b6:3b:
                    fb:39:f3:c5:01:28:a7:67:02:d8:89:b4:fe:d3:c1:
                    a1:60:94:01:ec:c3:da:a1:ff:6c:58:40:54:39:3e:
                    bc:55:f2:d3:8b:a1:2b:c9:b6:91:a8:cc:94:6e:54:
                    6c:a2:e1:3e:da:ca:86:52:61:01:86:46:f4:22:61:
                    a0:c9:c5:4a:b0:09:1c:bc:75:4b:6a:66:fb:58:2a:
                    b7:b9:5d:73:bf:62:81:2b:48:b3:92:09:dd:de:32:
                    ba:3d:f2:91:f7:d9:6c:80:3c:ee:f2:8e:42:3e:47:
                    b6:ef:aa:9b:48:51:f9:2d:29:d8:38:fa:9e:ae:1f:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8B:3E:6C:B5:AA:99:E7:80:D0:1F:A9:B0:EB:C5:90:25:EE:72:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a064c8da-1191-3ee2-bd8e-0c68e23fc16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:1f:dd:ac:f3:3a:69:b7:f9:bb:2d:95:18:5a:ee:8f:6b:
         eb:65:8c:cd:5f:09:73:6e:ca:9d:92:a5:c6:5f:6d:c3:64:51:
         9e:cd:b0:05:65:a3:3f:83:e2:8e:f3:aa:62:01:67:99:ba:fc:
         52:88:e4:a5:78:aa:a8:28:f5:92:c9:37:26:0f:79:49:0a:30:
         d0:87:30:a2:e6:c4:a3:95:2c:dc:69:48:37:fb:b6:95:12:64:
         49:c7:7d:a4:84:c1:63:29:55:91:d6:b1:ba:85:85:5c:40:d6:
         2a:4c:04:06:af:e0:3a:6c:e2:c4:8f:0c:1c:f4:b3:a8:13:7a:
         51:aa:96:50:32:82:4a:40:5d:7a:d8:99:b7:b5:a1:ee:76:9e:
         f9:a3:e3:dc:c4:50:25:90:19:4c:d3:4e:70:4b:47:24:12:03:
         ad:61:ce:e5:cd:ac:17:7c:c9:da:22:eb:42:fc:da:c1:dd:15:
         25:4c:c6:6a:fa:ad:39:02:5d:0e:3d:f6:cf:72:bc:ae:a2:c9:
         53:5c:3a:94:6d:e1:c8:ce:91:12:1d:f6:1f:b0:bc:ef:dc:1d:
         1a:69:c5:0a:a6:d8:40:b3:fc:a8:c8:9d:b2:00:c5:6d:7f:dd:
         76:0c:63:4d:6d:e8:ba:85:84:78:70:45:75:a7:83:2b:b4:64:
         e7:8e:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:04 2025 by rpki-client