Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af6881ae-39be-3ab5-8863-532369b6162a.roa
File:                     af6881ae-39be-3ab5-8863-532369b6162a.roa (raw, json)
Hash identifier:          DDirkGK3wcEdDSHyHHz7aRAOF7b+9TmrIYvNwfKRnDk=
Subject key identifier:   99:FA:3E:46:C5:6F:0B:B5:65:CD:81:5A:93:E0:2F:C4:96:D9:83:4E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E66DA3CEF12E68C526E362700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af6881ae-39be-3ab5-8863-532369b6162a.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     3356
IP address blocks:        130.174.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:3c:ef:12:e6:8c:52:6e:36:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=ad73d8f1-08da-4d38-9c9a-f3d63132d2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:bf:9e:d6:47:d7:2a:cc:ee:f9:b1:4a:cf:
                    cf:6b:81:69:bd:c3:5c:90:2f:df:31:f5:ae:de:70:
                    8a:11:19:51:6f:b8:0a:c8:2a:b4:08:89:74:8b:a2:
                    85:37:3e:62:aa:32:96:3b:fa:53:a9:30:3e:8c:93:
                    f2:b6:32:61:d9:29:5f:81:4d:87:0a:96:de:34:89:
                    0f:bc:69:41:6a:6c:75:fb:71:f3:bc:de:72:fc:9f:
                    db:e6:cc:0a:12:89:97:8b:3b:25:1a:32:85:4b:24:
                    16:fe:6a:d0:f9:2c:6c:a7:1e:77:30:2c:7d:47:cd:
                    c1:1f:15:00:77:03:7d:a8:0e:12:a0:20:44:5f:22:
                    0d:d7:37:e8:bd:92:37:4f:fd:f3:d5:77:b3:99:64:
                    fc:18:b4:78:19:93:2d:6d:9c:49:cc:02:e7:f8:52:
                    26:4b:a1:e1:06:d4:5c:85:3d:58:3b:ad:eb:6a:dc:
                    5f:07:ec:f0:e4:6c:8b:c4:6e:22:d3:02:f1:87:63:
                    af:57:a1:eb:fc:b7:a5:2f:d7:77:6f:da:70:aa:f7:
                    40:6b:44:88:cb:d3:e5:75:e9:ab:af:fa:78:57:03:
                    3f:2f:57:df:38:5f:f0:5e:d8:1c:69:04:1a:a9:29:
                    dc:a8:be:42:cd:37:ea:82:09:b9:6c:b3:4c:82:b1:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:3E:46:C5:6F:0B:B5:65:CD:81:5A:93:E0:2F:C4:96:D9:83:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af6881ae-39be-3ab5-8863-532369b6162a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:dc:b9:52:e1:53:91:1e:f7:8f:8c:80:0f:23:b1:83:ef:50:
         5c:28:86:43:4c:89:a5:5c:f7:18:0a:4b:e2:17:6c:65:d4:9b:
         6f:dc:5d:99:e4:ae:12:91:ec:92:b8:9b:76:da:74:69:6b:b9:
         ff:78:0e:8b:60:67:29:b2:2b:c5:1b:6e:6e:70:b5:2e:15:d9:
         14:29:6f:d3:f1:63:5e:41:3f:17:60:27:cd:4c:6e:83:71:e4:
         36:ca:66:8d:f6:a2:2d:39:41:b6:e4:47:78:2f:1d:d0:ec:b2:
         60:92:52:49:ef:82:8d:5a:53:e2:85:ed:f3:47:66:fe:c7:ca:
         80:8e:75:0c:de:c7:a5:06:0e:92:3e:1e:cb:f9:07:69:f0:3b:
         c7:07:35:c4:e4:93:df:10:82:51:48:61:4d:32:28:46:97:1a:
         88:b1:48:3a:ea:d6:42:e0:87:13:48:30:f7:93:6d:5b:93:65:
         4f:36:d0:a8:db:60:08:8f:1f:60:85:55:02:f2:21:eb:c1:ef:
         b5:b0:7d:16:e5:fa:35:ea:ed:9c:69:dd:b3:01:46:c9:8c:d8:
         f1:64:db:c9:de:e9:df:c1:80:3e:c5:5b:18:6b:40:5d:9d:04:
         da:57:4c:7f:6b:c8:ef:75:d4:28:c7:c1:0f:42:30:67:db:ec:
         ea:89:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:16 2026 by rpki-client