Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa
File:                     baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa (raw, json)
Hash identifier:          OSGNdlu3K2E+iXVPxlWywH9ekCqJKzTZfkf4OgTTf34=
Subject key identifier:   30:C4:11:5F:15:7E:0A:05:C3:28:CA:14:94:A1:74:64:B8:3D:9B:14
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BCC88A2A35F1E358FA350
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     203
IP address blocks:        130.174.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:cc:88:a2:a3:5f:1e:35:8f:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=767deef1-50a5-46d0-9002-4269e1eec3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:fb:01:01:a6:ed:70:6b:5c:38:b9:34:6d:
                    fc:e4:82:2d:cb:af:7a:74:2a:b2:a2:b8:d1:49:40:
                    c6:60:64:97:51:f8:13:6e:55:d4:13:8c:67:75:96:
                    36:fd:69:74:c9:74:5e:a8:40:fb:05:da:a0:6e:af:
                    c8:6d:14:22:38:21:1d:99:82:76:b1:ec:91:0d:da:
                    5d:a4:4c:f2:c6:79:be:de:4b:ec:3b:45:f8:03:dc:
                    08:ab:8b:64:50:18:c1:c9:e6:a2:04:77:0f:03:36:
                    9e:24:7a:50:2d:ae:a8:76:c1:f4:c7:81:cd:8a:73:
                    dc:21:bd:68:5e:51:06:d4:e8:b2:d0:b2:69:d2:f2:
                    55:09:31:b3:49:8a:2d:4e:fe:93:26:e6:50:dd:f2:
                    67:c9:87:da:a8:30:0a:44:94:f4:28:78:e9:81:03:
                    dd:f8:8e:bf:bd:d4:af:8d:f5:68:32:b1:78:3b:8a:
                    0a:d5:44:97:7e:d4:b6:63:86:24:c6:a4:cc:92:a0:
                    05:17:6e:ed:6d:85:2f:97:7d:08:50:45:12:f4:87:
                    83:68:c3:ba:f6:2d:3d:56:fb:68:b4:87:a7:58:f2:
                    fc:c4:ff:81:b3:e4:a5:f6:5e:ca:79:8d:d3:79:9c:
                    1f:2b:56:59:5a:8b:f3:91:81:37:92:35:4e:09:85:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C4:11:5F:15:7E:0A:05:C3:28:CA:14:94:A1:74:64:B8:3D:9B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:fb:fc:1b:09:ec:b5:f4:c4:10:d3:68:64:d0:46:c0:d5:
         d7:e1:1e:0c:d7:a4:c8:44:46:a1:50:b4:70:35:3c:ba:ab:9d:
         90:c8:b2:74:2f:e2:15:78:08:e1:84:cd:24:2e:0c:4c:78:bf:
         61:06:b4:8c:fe:f9:97:28:9e:6f:1f:b9:01:ff:e2:55:f5:da:
         55:8c:71:53:28:a8:14:dc:7a:06:ca:18:01:65:aa:bd:55:7b:
         73:a8:b5:5a:38:f2:b5:d6:29:d8:1d:30:aa:02:fa:b4:ce:a8:
         c3:8d:e1:63:43:6d:2d:20:f7:32:d9:eb:f1:59:58:9f:7c:ad:
         1f:9f:b6:cb:cd:6c:4b:32:79:ad:66:b6:b1:b8:44:ac:dc:d0:
         4f:4e:98:58:ea:12:49:6b:3f:a6:40:91:28:30:67:87:5e:29:
         94:4b:8e:01:4d:ad:58:e0:03:22:99:5c:44:94:09:ee:ce:6a:
         b7:39:43:bc:8a:9b:69:11:94:fc:0a:19:57:0e:18:8f:17:40:
         e6:aa:d4:0f:94:8a:3c:1f:c7:9b:87:92:1d:89:73:d9:c9:47:
         cc:14:13:45:e5:d2:a9:d3:8d:5e:d3:7a:a8:01:c6:e8:59:13:
         0a:e0:0d:9d:17:f0:7f:9c:19:19:cb:d9:20:ad:2e:8f:86:6d:
         cd:12:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:10:50 2025 by rpki-client