Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa
File:                     a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa (raw, json)
Hash identifier:          e/GpjedMlUmS9oMHVENLqZwp5beD+6AlvyGtgd+goUU=
Subject key identifier:   DF:C0:7F:E0:D6:38:FB:CF:D0:B6:9C:F6:F6:FF:63:47:FD:31:19:27
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BB7F2EBD59DB7133DB680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     202
IP address blocks:        130.174.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b7:f2:eb:d5:9d:b7:13:3d:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=cf8c87b9-bfb5-48cf-afed-3d9b6875449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:45:eb:9c:c6:aa:75:07:4f:a1:61:51:e2:
                    a4:f5:2c:f9:16:d8:6f:77:96:b9:0d:ae:7b:5d:08:
                    37:a1:db:c9:40:9b:27:17:b6:c9:6c:ec:8d:07:a0:
                    94:44:f5:78:ba:69:19:ba:f4:3f:31:f7:89:7a:e4:
                    50:79:7c:dc:13:91:2f:45:42:fb:b4:66:79:ee:07:
                    be:c8:44:d5:11:96:85:8c:56:1d:02:52:f7:d1:6a:
                    98:03:fc:52:cc:cc:c0:23:02:31:67:82:77:4c:79:
                    82:68:2a:ab:e8:bd:36:48:a2:43:df:31:67:15:1c:
                    e0:34:da:70:b7:b1:fa:4e:0f:5d:6e:38:b1:8d:00:
                    be:0d:4f:9d:93:11:32:72:8e:46:f2:9d:5d:aa:05:
                    6c:39:33:61:c7:ee:d9:2a:23:de:48:ef:31:bc:41:
                    c3:fe:7a:b2:9d:c6:f1:d1:ac:b6:82:bf:3b:b0:59:
                    66:be:37:37:59:24:f5:bc:1b:77:f6:02:9a:07:75:
                    63:48:35:4b:a4:e1:79:d2:7a:f4:7c:6e:ee:30:34:
                    bc:40:a2:e8:cf:e2:01:a8:c1:50:d2:0e:a2:e6:5c:
                    9f:af:04:a4:e6:06:b3:a4:d7:2c:05:3e:32:6e:49:
                    f5:00:63:68:10:ef:d2:dc:a5:a7:2c:4c:e3:de:b7:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C0:7F:E0:D6:38:FB:CF:D0:B6:9C:F6:F6:FF:63:47:FD:31:19:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:03:7b:78:27:19:2c:00:7c:67:c0:26:97:22:c5:87:7e:e4:
         53:95:6d:38:fa:ae:43:6e:d0:63:51:04:d9:4b:c4:25:95:39:
         80:7c:0d:39:05:d3:ee:dd:91:e4:fe:ee:bd:76:d9:e2:73:b4:
         85:c1:8d:96:52:de:71:a2:2f:f8:6f:ea:34:bf:a5:25:2b:a2:
         bc:7e:dd:19:bc:e8:8b:76:81:6a:c5:3b:e7:1b:f6:5b:d9:cc:
         25:d6:91:68:a8:2f:63:b5:13:c6:9d:c7:44:99:d7:34:42:96:
         02:fd:80:12:33:c4:77:17:7e:06:97:e0:f8:fc:a3:82:a9:9d:
         c7:9f:fb:b2:c9:75:b7:23:85:76:70:fb:b0:58:2a:4e:fd:a2:
         65:9a:3a:dc:88:e9:da:c8:5e:5a:e5:73:31:5e:87:70:87:b3:
         76:48:be:87:20:0e:cb:5e:bd:07:5e:ee:03:fb:b0:71:bc:5f:
         de:a7:d5:cd:e8:ec:54:eb:e1:39:1e:1a:90:38:2a:37:7e:39:
         c4:6e:02:00:a2:57:e0:45:79:bc:d0:69:8f:c9:5d:7f:bb:f5:
         68:7c:62:fd:8c:a7:41:29:7d:56:96:51:1d:ea:4b:2b:f2:ae:
         66:43:5b:c1:c0:7e:99:7c:f4:15:05:1b:8c:f6:e5:8b:8c:f8:
         02:a9:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:47 2025 by rpki-client