Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a33ce663-567e-38c3-ad3d-6ddb53403b19.roa
File:                     a33ce663-567e-38c3-ad3d-6ddb53403b19.roa (raw, json)
Hash identifier:          UnaYCAYxRvyOxmL32BRJf8Y9MR5z2J/k0fDBs0sxZ80=
Subject key identifier:   DA:CF:B1:0F:19:6F:BD:68:80:EC:8F:5A:C6:5B:61:2C:35:54:E8:46
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B49CFF5B80B7423B854300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a33ce663-567e-38c3-ad3d-6ddb53403b19.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     202
IP address blocks:        130.174.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:9c:ff:5b:80:b7:42:3b:85:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=b99b15a2-a1b5-4936-a25e-f958e746d77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:6d:98:60:15:a6:61:af:7d:1f:53:3d:2f:
                    43:6b:5f:c7:75:29:01:23:cd:81:b3:7e:22:d3:4d:
                    83:2a:ba:ee:54:14:82:ac:19:f1:89:7c:aa:82:01:
                    3d:af:eb:64:aa:e3:fb:3a:7d:4d:09:b9:14:48:64:
                    64:46:f6:0a:68:72:97:2a:31:c7:61:d6:60:1e:89:
                    90:0c:98:98:83:9e:0f:b9:f8:8f:2e:fa:99:1e:13:
                    48:56:fd:9a:3d:b3:b2:95:af:72:05:69:8a:12:50:
                    8a:fe:74:b7:b9:b5:0e:64:a4:56:6c:2b:10:9a:35:
                    1b:59:8e:df:c6:e0:a4:09:b9:af:4b:8e:fb:be:86:
                    97:dd:1d:84:93:d0:5b:73:36:37:dc:13:9f:d2:74:
                    6f:ae:c7:be:9b:0b:21:ff:76:cc:cb:89:f9:92:1d:
                    2c:df:30:12:bc:ab:b4:7d:4d:e0:a9:9b:0c:7a:66:
                    64:5d:60:ca:d4:e3:60:92:8c:3f:73:c4:2b:1e:cf:
                    1d:7e:ef:36:38:0f:93:13:9b:f1:9a:51:5f:e9:7a:
                    da:0d:5e:91:39:fb:91:74:ac:6d:59:39:41:52:34:
                    5a:af:d8:48:08:57:17:1b:b7:d4:3f:10:0a:e6:fd:
                    d5:f9:08:9b:b7:7b:7c:22:43:4e:1b:a3:3c:99:cd:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CF:B1:0F:19:6F:BD:68:80:EC:8F:5A:C6:5B:61:2C:35:54:E8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a33ce663-567e-38c3-ad3d-6ddb53403b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fc:4e:5f:33:9d:c0:d9:be:69:f6:bb:85:e8:ed:81:db:1f:
         5d:3a:b5:3e:8c:b6:c7:40:51:58:18:5c:99:a2:20:77:12:7b:
         3a:fd:f6:c9:33:47:4e:44:f7:6a:82:e2:7e:bc:ea:fe:be:ca:
         29:f2:4e:ce:d4:3c:40:a4:ab:4b:db:bd:fc:de:9b:2b:ca:7f:
         39:49:e2:d3:4e:1b:3e:f1:b1:27:6e:a6:62:40:1a:60:41:61:
         92:b3:e3:e9:0b:77:8c:a1:f0:f9:e0:51:7f:65:88:19:26:94:
         53:50:52:24:55:3f:3a:f8:01:4d:51:e7:83:30:c9:1f:93:ee:
         ff:1a:d3:9f:ea:41:b7:f8:46:60:63:1e:fe:a0:62:69:b2:af:
         b4:0f:75:f0:f9:bb:29:3e:53:aa:09:74:84:34:67:43:4a:1f:
         29:4d:0d:32:53:a2:11:50:bb:20:fa:15:85:17:86:3a:64:1a:
         e1:6a:1b:d0:76:7b:90:4b:1c:21:84:19:8c:c0:5d:1c:1d:e6:
         2c:fc:e5:77:66:ea:f3:05:fd:42:43:84:4c:ed:cb:26:e0:6b:
         9b:71:fe:d2:1d:dc:5b:91:d3:e2:40:40:92:eb:b2:00:46:4f:
         85:23:54:56:48:8f:a5:84:e2:50:35:f6:44:bb:18:f2:77:13:
         6a:fb:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:43 2026 by rpki-client