Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa
File:                     a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa (raw, json)
Hash identifier:          ry1Lgk+rZJWRzMSU68j4+Ylwk4cwWVh+jO3imaMgshQ=
Subject key identifier:   CB:C1:8E:EF:CF:59:0F:41:5E:80:0F:64:62:CE:F5:45:F0:58:8E:7E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B49CDD38BCFFBB4DE455C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     203
IP address blocks:        130.174.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:9c:dd:38:bc:ff:bb:4d:e4:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=fe859673-8014-4633-bc92-d9c0203cdd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:06:c3:57:5e:20:c3:ef:24:49:de:f0:0d:
                    f2:6c:27:47:de:2a:07:4f:8f:74:f1:f3:dd:36:39:
                    b0:55:c8:45:bb:25:c3:7e:36:a1:88:17:62:67:2c:
                    c3:ff:3a:06:83:bc:bf:ee:6f:15:7c:3b:e2:83:dc:
                    37:e2:c8:f7:5e:a7:40:75:91:d0:5f:7c:13:01:30:
                    01:09:ca:2d:8c:fe:ae:2d:6a:aa:fd:c6:f8:49:02:
                    f7:9e:ce:e9:12:61:0d:4c:4d:da:32:1c:7c:7e:9e:
                    29:83:06:b6:bb:3d:c6:03:35:d5:10:ca:d2:2d:fe:
                    d9:6b:3b:49:bc:0d:49:a5:38:90:79:7f:b3:c0:4e:
                    fe:50:e1:93:cb:34:ef:88:4c:9a:b6:02:7f:4f:2d:
                    87:a3:1f:d5:3e:7f:57:43:21:f9:e1:ea:d7:c9:4d:
                    8f:4f:92:b4:6f:64:d2:58:65:22:67:0a:0e:b1:a2:
                    b1:f6:fb:6e:87:32:03:d0:96:bc:88:eb:58:0e:c9:
                    f3:18:18:08:6f:b7:9c:07:53:0f:3f:51:59:3a:4d:
                    22:f5:8f:e7:f8:74:52:96:bc:b9:28:4e:0f:c4:0c:
                    20:89:f0:e0:f3:11:f9:f0:ae:48:31:91:cc:99:36:
                    b3:6a:b0:3a:9b:f7:e4:ff:ff:3c:a1:bd:c3:ef:30:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C1:8E:EF:CF:59:0F:41:5E:80:0F:64:62:CE:F5:45:F0:58:8E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:83:34:4d:24:f5:ad:97:4e:3d:c0:07:14:e9:c8:e0:54:08:
         17:0f:8a:58:de:87:31:27:fe:e4:d4:f6:8a:54:9c:98:7b:1a:
         57:fb:b9:36:d7:39:96:c0:99:30:92:6c:7c:be:dd:0e:d0:fa:
         47:1e:85:11:c6:59:01:b3:8a:d0:c1:73:85:05:be:e1:a8:2a:
         fd:66:f7:d9:03:15:02:68:70:0e:11:9f:57:22:79:55:19:a3:
         e7:2d:8a:ee:3f:fb:09:b8:14:3d:28:2e:f4:d5:d8:9b:ad:83:
         a8:3b:f5:e3:ae:ee:ae:19:57:fd:72:e1:7c:d6:2b:f9:2c:3c:
         30:d0:f7:ce:68:c3:c6:8c:93:e6:67:c0:2b:f3:dc:60:d5:bb:
         e6:71:62:2f:99:f6:37:7a:5c:b2:1a:52:24:d1:dd:1d:fc:4d:
         91:a8:e1:f9:af:8b:31:d7:ea:5e:c5:54:1b:91:07:89:c0:80:
         90:aa:4f:4a:ae:7f:67:2f:97:88:1a:45:1d:21:bc:4c:8d:ff:
         32:1f:17:d9:bb:a3:07:76:e3:3b:26:81:53:73:17:29:5b:52:
         d3:b0:5f:a9:64:c3:d6:78:12:28:b2:5a:77:bd:2b:cd:82:71:
         fa:51:3f:70:0e:f4:d1:f9:56:78:09:fb:7c:58:c4:ad:89:97:
         bd:77:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:56 2026 by rpki-client