Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af7edb2f-ccf3-344f-8ba6-f2ac725f4cd9.roa
File:                     af7edb2f-ccf3-344f-8ba6-f2ac725f4cd9.roa (raw, json)
Hash identifier:          WHUxHRW65+EzSmRfGicqGuCu+1I+iT7Eug0nusRbm7A=
Subject key identifier:   7B:4D:93:01:03:82:F0:44:B3:2D:AE:3C:FD:A9:40:10:92:E8:CF:16
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B49BA57EFDB3598E4674E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af7edb2f-ccf3-344f-8ba6-f2ac725f4cd9.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     203
IP address blocks:        130.174.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:9b:a5:7e:fd:b3:59:8e:46:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=f1aaf241-32a6-4c35-b254-55d345d4257b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:a8:40:63:ed:9e:2b:8c:14:12:22:bf:15:
                    76:56:51:ec:69:44:e8:88:72:fb:eb:cb:35:96:07:
                    88:16:24:2f:69:99:c1:e9:5c:10:d5:c0:92:c7:88:
                    fc:71:57:50:3d:83:0e:0c:39:c0:f3:2b:58:ba:2f:
                    d2:ba:49:d8:8d:d9:ac:f6:98:7b:b6:12:e9:26:04:
                    65:cb:8f:42:59:cd:e8:f7:4a:b0:85:e5:51:80:04:
                    a8:fa:ad:ba:c8:7e:34:60:fa:4d:36:15:54:82:52:
                    37:53:70:d9:0f:2c:2a:ca:ea:25:3d:c1:00:c3:08:
                    1f:ba:fd:c3:83:30:3e:4f:3d:2c:95:a9:cd:f4:11:
                    b1:8a:fd:89:9d:4d:fd:06:bf:31:f4:0a:01:b2:19:
                    74:32:53:48:f5:58:ae:12:fa:61:0f:3a:c5:40:15:
                    d3:d4:9f:ed:51:4e:fa:91:08:5c:26:9f:2f:ea:eb:
                    1a:c2:c7:08:0f:15:8a:69:4c:86:50:8d:39:c7:50:
                    9a:01:c4:0a:25:25:94:e2:ea:65:b0:be:1b:b7:6d:
                    1c:ac:d3:23:fd:f8:a2:9c:2b:e4:2c:0f:02:96:a7:
                    c5:8d:de:22:f7:8b:bd:1d:d5:4e:b1:18:f8:89:9d:
                    3a:bf:54:e2:cf:5e:18:ff:21:65:0e:d3:9c:9c:88:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4D:93:01:03:82:F0:44:B3:2D:AE:3C:FD:A9:40:10:92:E8:CF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af7edb2f-ccf3-344f-8ba6-f2ac725f4cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:a0:8f:8e:87:f0:34:30:fe:a0:72:46:d5:d4:96:05:65:
         9d:df:7a:0f:28:a2:ad:91:7a:d3:1b:94:4a:25:b7:2a:6e:5a:
         cb:a9:ff:84:07:7a:16:13:b8:49:f9:4e:1a:aa:0f:64:a3:09:
         3a:37:cf:87:4d:65:f2:19:4a:6c:4f:f9:e9:35:12:4e:7c:e7:
         90:1e:8d:0c:8b:76:48:bb:57:55:c3:d6:22:9e:00:45:39:f9:
         fe:45:fc:d8:ef:62:a4:35:e3:a9:ae:a8:ff:c2:2f:64:d9:ef:
         41:dc:73:7e:df:6a:b0:23:f3:0f:22:fe:02:30:2d:a5:cd:ac:
         3d:29:df:78:f7:f9:8f:8a:8f:2f:4c:59:3b:7a:1a:6f:55:f6:
         77:25:24:63:fe:d7:a9:86:27:2a:58:6f:ca:bb:2a:36:68:c2:
         8e:bb:31:a4:1d:da:99:39:c0:ab:e8:25:4f:cd:1e:5a:2b:91:
         b7:69:c0:5f:57:0a:2b:be:97:b0:1d:54:c0:d0:52:35:5b:6d:
         99:cc:19:d8:41:3c:f1:b8:4a:7d:80:96:be:8a:50:4b:a9:1c:
         95:22:3f:a9:13:b0:65:e0:f7:d9:24:3c:ca:3b:1f:0f:ef:e0:
         c8:32:b9:21:85:16:aa:19:54:ba:b2:39:82:1e:98:86:1b:06:
         35:12:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:56 2026 by rpki-client