Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa
File:                     b55a739f-372c-325e-887b-2f006cd12c3e.roa (raw, json)
Hash identifier:          eZ15uA0957fa0ZO2pusH/0vSdAV6J5Wd9MkEc7mQcX0=
Subject key identifier:   83:EB:14:08:6C:13:65:1D:86:98:6F:52:28:A7:72:01:A8:F9:7C:0E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BC831E9EDCA635D0F7000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        130.174.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c8:31:e9:ed:ca:63:5d:0f:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=8c2be0be-d5e4-4568-966f-628ac2dfadf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:38:9c:12:81:94:ec:a0:d8:c4:4a:67:20:
                    6e:dd:e0:44:f5:08:d6:f0:76:ca:70:ff:10:cb:43:
                    d3:6d:82:81:45:92:85:a8:45:97:5c:b1:3a:d9:32:
                    da:bc:6a:20:21:01:e0:a5:38:d4:35:53:a8:f3:96:
                    b5:d6:12:ab:00:59:13:a6:33:91:bf:ee:b1:56:52:
                    5f:30:f8:6e:43:61:e7:b3:68:f5:ad:e2:3f:79:79:
                    4b:ec:56:c3:51:45:e2:0f:3d:e0:9d:51:fc:c4:50:
                    8c:4d:18:52:a3:dd:d0:ff:15:b7:f3:1a:d9:dc:c0:
                    f3:0a:a1:1d:b5:5d:ae:8b:63:32:c3:2b:3a:aa:a7:
                    8a:16:4f:c6:96:87:e1:71:9e:63:5f:d3:99:14:24:
                    1a:db:a8:c1:92:b7:99:db:d7:c8:ff:80:a3:46:7e:
                    c1:50:c0:5c:ee:c2:78:1e:86:53:a4:e6:6e:e9:39:
                    95:d5:22:59:25:a1:90:7f:37:9c:c2:4f:9e:48:88:
                    74:ab:cf:a2:11:fa:82:c8:32:33:23:48:54:5b:24:
                    20:d5:b8:38:f8:72:f8:49:23:4e:d5:f0:c0:da:6e:
                    a2:97:72:2e:1a:c0:ac:56:db:79:fc:0d:14:13:49:
                    ef:e1:2b:7d:58:73:30:e4:25:bf:61:cf:9c:ee:96:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EB:14:08:6C:13:65:1D:86:98:6F:52:28:A7:72:01:A8:F9:7C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:75:cb:16:b2:5d:64:00:99:cc:d3:3d:7a:ce:82:e0:bf:ca:
         20:1b:8b:55:e0:c3:6a:5a:a6:31:c8:ca:de:4a:da:95:4f:76:
         d0:a3:24:0b:8c:89:62:3c:66:63:c6:e1:31:63:7d:81:f1:fd:
         95:41:30:95:93:88:6d:07:f0:44:79:7c:0c:36:f5:57:e6:b7:
         c1:55:3a:c4:f9:d2:3b:91:04:a1:3c:4f:eb:ba:7e:47:d5:10:
         98:48:75:d4:4a:d7:69:bb:ee:a6:3f:db:71:99:5f:6b:14:29:
         96:d1:7d:ac:ef:46:84:fa:67:da:b7:82:d9:dc:17:a2:41:67:
         12:76:57:2e:46:65:69:10:33:69:91:96:b2:f9:c7:6c:6a:46:
         b7:4b:ea:94:1f:b1:f4:63:44:2e:ee:68:62:db:c2:73:5a:15:
         d4:cd:c5:3d:47:63:1f:0f:63:4e:76:e1:7c:ab:e3:84:76:05:
         68:f5:5b:1d:ed:68:69:45:b4:35:89:88:1f:0c:d1:77:28:23:
         c4:92:0c:7d:b1:60:d8:f0:ac:e6:a1:6d:8f:6e:59:93:3e:87:
         3c:c3:4b:e7:01:16:03:95:62:de:47:31:a2:ef:6d:cf:b7:6b:
         df:4f:73:01:b6:1c:70:51:7b:47:2f:04:f0:21:9b:45:10:f9:
         c6:94:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:37 2025 by rpki-client