Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca5d3e11-2f3b-3f49-a1b1-f951010e0061.roa
File:                     ca5d3e11-2f3b-3f49-a1b1-f951010e0061.roa (raw, json)
Hash identifier:          Fw3ulBWSFcCI5eIZhe4c/GtHZSRacq1Dc38coxcN6gU=
Subject key identifier:   12:69:0B:08:C4:6E:E9:12:C2:6A:31:57:56:E3:AC:2B:71:D3:A7:0C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B79EF5E12A346E6E4E3963700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca5d3e11-2f3b-3f49-a1b1-f951010e0061.roa
Signing time:             Fri 10 Oct 2025 14:42:48 +0000
ROA not before:           Fri 10 Oct 2025 14:42:48 +0000
ROA not after:            Thu 08 Jan 2026 15:42:48 +0000
asID:                     3356
IP address blocks:        130.174.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ef:5e:12:a3:46:e6:e4:e3:96:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 10 14:42:48 2025 GMT
            Not After : Jan  8 15:42:48 2026 GMT
        Subject: CN=b70dde3b-0e07-4731-a21d-d13574137a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:b7:4b:ec:b3:5c:53:f4:42:27:ef:0c:63:
                    05:0b:2f:ff:00:10:f5:61:74:45:d7:93:13:6a:0b:
                    99:5a:41:42:07:2c:0e:7d:c7:8d:7b:20:9f:62:e5:
                    31:6e:84:7d:c1:1d:0f:45:5c:90:dc:ba:f8:80:3d:
                    ea:0c:bd:b6:a7:74:7b:46:8a:92:10:e2:6c:18:85:
                    86:79:3a:4f:96:64:cb:fd:fc:3c:a8:aa:03:d6:20:
                    7f:a8:94:d4:3a:f4:a8:70:fa:4c:d7:fb:e2:13:f1:
                    08:6e:fa:0c:a1:58:1e:71:56:e1:e8:e5:77:a8:93:
                    e4:a7:20:4d:4b:66:63:a6:05:5f:cf:a3:f6:58:a9:
                    05:b8:f4:6a:f3:01:5b:36:22:da:57:bb:8a:02:bc:
                    ed:dc:d4:4b:66:a7:c6:a4:13:3c:c1:73:ef:86:d6:
                    0c:f4:02:3f:a7:64:7d:1d:2e:0c:e5:ef:d4:d7:50:
                    c6:17:39:6f:7e:0b:92:77:17:ec:48:6e:cb:af:0b:
                    48:8e:fc:fb:c2:5c:50:29:00:62:e8:4f:74:e7:7d:
                    95:46:63:c5:dd:43:c0:9e:e5:54:fd:a0:b1:97:4d:
                    de:e2:39:ba:87:15:3a:00:78:95:86:f2:29:5c:21:
                    1d:6e:8b:2d:e2:8a:00:ab:83:b1:46:b5:7d:f5:96:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:69:0B:08:C4:6E:E9:12:C2:6A:31:57:56:E3:AC:2B:71:D3:A7:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca5d3e11-2f3b-3f49-a1b1-f951010e0061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:70:17:7d:06:78:a0:85:4a:5f:da:62:be:f6:1d:0b:aa:ce:
         64:1f:1f:fd:c3:c6:47:b3:7e:c4:36:0a:95:fc:46:a1:d7:28:
         5f:05:05:b9:6b:ba:bf:90:a2:4a:b3:1f:6f:c5:2a:5b:ef:ea:
         0d:05:83:0e:80:ec:e6:e8:22:00:7d:dd:02:90:dd:ef:ef:b2:
         0b:42:93:d3:ed:ed:6b:4d:8c:be:4c:95:2f:d1:fd:b0:16:0d:
         e3:49:3a:b0:29:88:22:dc:78:ff:0e:e6:3f:08:a4:31:4c:30:
         5d:ac:7b:fa:e3:87:17:e5:36:96:04:51:23:49:c6:77:f7:91:
         4f:4c:66:08:cf:c4:8f:8c:64:5f:0d:75:44:aa:bc:a1:07:3e:
         89:28:fa:53:b3:d5:a1:55:79:83:40:99:3a:0a:1e:c1:24:1c:
         c6:bc:fb:9c:66:04:52:70:18:3a:d8:06:6f:23:ee:73:8d:92:
         c3:94:d9:2a:86:41:0a:dd:7e:7f:ac:b3:77:9a:1b:9d:b9:cc:
         8b:95:a1:a1:5c:88:e0:a2:f8:f5:d5:bf:2a:03:e2:bb:c9:30:
         30:22:0c:1a:52:02:13:9a:9a:95:ca:c2:28:85:4e:e1:97:b3:
         9e:46:d8:65:21:67:1c:6b:89:13:69:92:89:be:47:df:df:61:
         10:88:fb:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5714So0bm5OOWNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAxMDE0NDI0OFoXDTI2MDEwODE1NDI0OFowLzEtMCsGA1UEAxMk
YjcwZGRlM2ItMGUwNy00NzMxLWEyMWQtZDEzNTc0MTM3YTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPa3S+yzXFP0QifvDGMFCy//ABD1YXRF15MT
aguZWkFCBywOfceNeyCfYuUxboR9wR0PRVyQ3Lr4gD3qDL22p3R7RoqSEOJsGIWG
eTpPlmTL/fw8qKoD1iB/qJTUOvSocPpM1/viE/EIbvoMoVgecVbh6OV3qJPkpyBN
S2ZjpgVfz6P2WKkFuPRq8wFbNiLaV7uKArzt3NRLZqfGpBM8wXPvhtYM9AI/p2R9
HS4M5e/U11DGFzlvfguSdxfsSG7LrwtIjvz7wlxQKQBi6E90532VRmPF3UPAnuVU
/aCxl03e4jm6hxU6AHiVhvIpXCEdbost4ooAq4OxRrV99ZaMAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJpCwjEbukSwmoxV1bjrCtx06cMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2E1ZDNlMTEtMmYzYi0z
ZjQ5LWExYjEtZjk1MTAxMGUwMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5wF30GeKCFSl/aYr72HQuqzmQfH/3DxkezfsQ2CpX8RqHXKF8FBblr
ur+QokqzH2/FKlvv6g0Fgw6A7OboIgB93QKQ3e/vsgtCk9Pt7WtNjL5MlS/R/bAW
DeNJOrApiCLceP8O5j8IpDFMMF2se/rjhxflNpYEUSNJxnf3kU9MZgjPxI+MZF8N
dUSqvKEHPoko+lOz1aFVeYNAmToKHsEkHMa8+5xmBFJwGDrYBm8j7nONksOU2SqG
QQrdfn+ss3eaG525zIuVoaFciOCi+PXVvyoD4rvJMDAiDBpSAhOampXKwiiFTuGX
s55G2GUhZxxriRNpkom+R9/fYRCI+40=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:06 2025 by rpki-client