Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e1c4a7-2167-324c-9296-7760383f83fd.roa
File:                     b2e1c4a7-2167-324c-9296-7760383f83fd.roa (raw, json)
Hash identifier:          JMa2sE+6CJ9bX6dlPi4lBRKoG8QYG0yi0r4DFRgmE38=
Subject key identifier:   BB:3B:E8:EB:B3:3A:06:A3:E7:5C:9C:20:CF:9E:E5:F7:2F:12:B3:8E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BC86AD68255DBBEB73D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e1c4a7-2167-324c-9296-7760383f83fd.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        130.174.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c8:6a:d6:82:55:db:be:b7:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=9c3ef06b-3f0f-41de-ac78-cdd429b996b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:ff:33:b4:72:56:fd:de:9d:f0:3a:9c:12:
                    91:5e:bb:35:d5:c1:14:54:98:95:fe:09:c0:47:66:
                    bb:22:d0:ed:b1:e5:3f:98:d0:ae:a5:a6:a1:56:7f:
                    d9:be:80:8b:b8:ba:a3:48:37:d6:47:6f:a5:8f:79:
                    37:12:bb:c5:4b:4a:67:80:6e:9e:f9:e4:de:50:fa:
                    c2:05:ef:e1:ff:8f:3f:f3:a9:7b:ad:fc:9e:84:ec:
                    b5:5a:14:3d:ff:e1:d3:f7:26:81:b9:d7:f3:d2:67:
                    c0:ba:fc:1d:7b:0d:22:bc:d3:8f:c4:b2:db:b3:ca:
                    56:59:91:d1:a7:fb:16:f2:56:71:ca:b5:cb:76:18:
                    85:c5:a4:c9:58:c9:79:be:d9:4d:58:1f:6a:bd:07:
                    28:11:ea:ff:59:de:e8:2f:57:27:85:d4:92:5b:47:
                    fc:51:7b:e0:2a:78:ff:e4:78:d6:f5:21:c5:13:23:
                    70:0c:e1:98:e1:02:d5:22:7e:1b:91:70:0f:8c:de:
                    cf:d4:bb:be:c3:49:b1:ea:9d:46:d9:64:91:c3:dd:
                    e2:bd:ea:8a:3b:82:7e:90:a3:ee:b4:7a:83:06:cc:
                    a0:da:30:07:6b:ca:80:63:9b:20:28:20:3a:4e:b4:
                    f2:fa:13:32:f0:4f:2b:7b:91:ad:14:04:2b:36:a4:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3B:E8:EB:B3:3A:06:A3:E7:5C:9C:20:CF:9E:E5:F7:2F:12:B3:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e1c4a7-2167-324c-9296-7760383f83fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:73:92:81:41:02:4f:5a:2b:d7:8e:5e:2f:f6:c7:a9:49:
         13:15:e8:52:ce:fc:10:cc:b6:6e:85:cb:b4:69:46:3d:b8:01:
         9e:ce:89:40:be:7b:44:23:65:6c:9d:b7:1c:0f:d0:32:5c:3f:
         f3:2e:dd:3b:27:ef:54:70:4f:bc:4b:ae:cd:a9:00:2a:b9:ba:
         70:1b:8b:3b:7e:38:fd:0e:2d:6e:15:aa:94:74:5c:2c:99:44:
         49:4e:cd:ed:ef:f2:22:35:f3:c7:b7:37:67:29:d4:38:e6:d6:
         ed:bc:d9:ce:bb:0f:7d:9b:c8:30:2a:db:be:af:1a:70:1e:bb:
         2d:75:d4:87:22:45:93:c0:0f:80:0d:75:3c:21:d7:c8:60:25:
         4e:62:d9:68:8b:9b:b6:6e:6c:36:69:29:70:1b:33:45:58:09:
         34:41:9e:e8:dc:4b:80:b7:ec:a0:0b:d7:91:1f:8e:08:15:44:
         ec:d6:79:31:f8:06:c0:f5:da:c3:e7:cc:3c:b7:c7:92:4b:4f:
         a3:c3:dd:9e:1c:89:3a:86:cd:f8:74:4e:3b:87:8d:ff:2a:03:
         77:f5:47:51:ef:d2:9a:2f:a8:ab:91:55:44:13:12:19:0f:2f:
         74:a2:97:57:9d:21:03:25:97:06:57:29:68:e4:bc:1b:cd:ac:
         4c:3f:ba:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8hq1oJV2763PYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
OWMzZWYwNmItM2YwZi00MWRlLWFjNzgtY2RkNDI5Yjk5NmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthj/M7RyVv3enfA6nBKRXrs11cEUVJiV/gnA
R2a7ItDtseU/mNCupaahVn/ZvoCLuLqjSDfWR2+lj3k3ErvFS0pngG6e+eTeUPrC
Be/h/48/86l7rfyehOy1WhQ9/+HT9yaBudfz0mfAuvwdew0ivNOPxLLbs8pWWZHR
p/sW8lZxyrXLdhiFxaTJWMl5vtlNWB9qvQcoEer/Wd7oL1cnhdSSW0f8UXvgKnj/
5HjW9SHFEyNwDOGY4QLVIn4bkXAPjN7P1Lu+w0mx6p1G2WSRw93iveqKO4J+kKPu
tHqDBsyg2jAHa8qAY5sgKCA6TrTy+hMy8E8re5GtFAQrNqQFiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLs76OuzOgaj51ycIM+e5fcvErOOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjJlMWM0YTctMjE2Ny0z
MjRjLTkyOTYtNzc2MDM4M2Y4M2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0tc5KBQQJPWivXjl4v9sepSRMV6FLO/BDMtm6Fy7RpRj24AZ7OiUC+
e0QjZWydtxwP0DJcP/Mu3Tsn71RwT7xLrs2pACq5unAbizt+OP0OLW4VqpR0XCyZ
RElOze3v8iI188e3N2cp1Djm1u282c67D32byDAq276vGnAeuy111IciRZPAD4AN
dTwh18hgJU5i2WiLm7ZubDZpKXAbM0VYCTRBnujcS4C37KAL15EfjggVROzWeTH4
BsD12sPnzDy3x5JLT6PD3Z4ciTqGzfh0TjuHjf8qA3f1R1Hv0povqKuRVUQTEhkP
L3Sil1edIQMllwZXKWjkvBvNrEw/uuI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:09 2025 by rpki-client