Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa
File:                     bf90fca5-79a9-3e91-8066-10aabfcc4701.roa (raw, json)
Hash identifier:          NuycM79MoW0Km2fLxTkyh4JdQuzSLCtOs5bYww+yMuw=
Subject key identifier:   5F:80:FC:11:91:1B:35:55:04:EA:EF:77:BF:C9:E6:DE:20:97:55:F6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A100D2E3A01EDDEC0DB940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     202
IP address blocks:        130.174.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:00:d2:e3:a0:1e:dd:ec:0d:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=1780e4fb-4ff1-41ed-8033-93110b0ceed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:bc:80:b6:9c:dd:63:f4:c6:a1:e9:49:1e:
                    36:43:09:85:78:e8:68:b8:80:90:9a:11:89:8b:ac:
                    b0:d3:c3:c1:0c:92:cc:39:76:e0:27:50:4c:2f:82:
                    fb:00:21:d9:8a:58:80:49:ba:87:16:ad:2c:d2:43:
                    1e:9b:9b:c7:0b:6c:ff:72:3c:f8:b2:a6:ff:21:70:
                    03:e7:01:50:e3:94:e5:ea:14:1d:c6:65:0f:37:af:
                    5a:6f:78:0d:6c:37:92:d4:7e:c5:a2:96:e4:ea:31:
                    7e:6c:82:4f:5a:15:be:d9:22:99:79:4c:60:d5:c4:
                    e0:cc:54:62:4f:4c:87:c5:f9:fc:04:bd:98:f3:2a:
                    0c:a0:0f:04:55:54:2c:5f:9a:ab:73:04:0a:73:16:
                    22:01:e7:e1:59:b3:cb:20:c3:d8:b7:e4:78:a2:65:
                    11:fe:d2:fc:a3:09:23:90:7e:f5:1e:05:27:0c:57:
                    33:d8:73:8e:d3:b1:2f:ed:19:95:6f:4f:2b:54:cc:
                    1f:a0:67:ef:e7:19:5f:2a:da:b4:5e:19:1c:16:60:
                    23:8a:cc:5b:ff:4f:c2:e7:ce:4d:5f:3b:a2:30:d5:
                    5d:71:38:7e:fa:ee:1a:f6:86:18:54:60:da:a8:c6:
                    eb:5f:d9:b0:1a:50:d5:49:15:6b:ad:d9:ef:e2:db:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:80:FC:11:91:1B:35:55:04:EA:EF:77:BF:C9:E6:DE:20:97:55:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:3b:39:77:15:66:3f:52:04:d7:ba:48:a9:b8:88:ff:99:d3:
         1b:dd:10:05:d5:79:06:c2:66:3a:65:5a:08:6a:5d:61:08:f7:
         d4:84:f7:df:c2:b0:25:82:78:67:2d:97:aa:76:07:16:84:84:
         a2:e6:f6:28:5c:da:ea:98:ec:5e:03:4d:a7:73:12:e1:59:ed:
         e0:e2:86:ee:eb:7b:2c:2b:7b:46:ef:fb:bb:9c:e3:5f:82:9c:
         bf:d0:d7:82:ea:d7:8d:73:c5:73:50:95:ac:99:28:1a:0c:3d:
         b8:02:da:e9:90:36:28:dc:68:9d:11:77:80:60:c9:df:90:a7:
         79:17:35:e9:91:a9:e1:05:2c:26:1b:16:86:89:d0:8d:e6:f9:
         19:a3:24:74:d0:fc:35:64:ae:8f:7d:3d:8f:30:22:83:dc:6a:
         07:af:19:e3:be:5f:65:f8:06:ec:8e:9b:b5:dd:0f:79:d9:7e:
         23:3d:25:0a:6f:0e:cc:bf:f3:a1:9d:22:5f:61:d3:34:cc:4c:
         cb:70:08:54:36:bc:15:62:ae:02:c0:b9:72:f0:bf:3f:c0:30:
         a7:e8:97:88:44:88:67:a8:8b:21:74:20:45:38:af:ec:27:73:
         97:38:3f:b3:f5:e7:cb:aa:62:7b:de:45:42:53:3d:8b:67:86:
         95:21:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:13 2025 by rpki-client