Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cd837907-ba85-3903-a3b7-c4bf7c3b1e1d.roa
File:                     cd837907-ba85-3903-a3b7-c4bf7c3b1e1d.roa (raw, json)
Hash identifier:          N5KJlEBaz+aJ9iHv9jFScEQc5pVQtO4H7yB2pfy10aM=
Subject key identifier:   9D:E0:98:56:14:50:29:19:2A:21:DA:48:36:3D:B9:E9:86:3D:D4:C5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BCD3FE1D379A26C672EC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cd837907-ba85-3903-a3b7-c4bf7c3b1e1d.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     203
IP address blocks:        130.174.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:cd:3f:e1:d3:79:a2:6c:67:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=b3e037a3-8bf7-4af1-a282-e617f0f35dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:f1:6b:7e:9b:b3:1b:7d:2e:e7:a4:97:e0:
                    b5:df:77:3c:18:a4:99:3b:d3:12:cb:cf:99:72:c3:
                    46:4c:e9:d0:6e:bf:f2:5b:c0:5a:b9:17:af:e1:2f:
                    68:84:93:1f:9b:08:84:0d:7c:76:22:8a:a8:23:42:
                    9b:28:fd:a6:77:b1:66:f0:06:b1:e5:03:b7:1b:f2:
                    5f:ff:3b:3f:04:86:ac:fb:65:66:90:4b:98:77:94:
                    71:0e:61:ba:b6:7e:ce:4d:25:b4:26:be:af:b8:44:
                    ab:39:e4:29:db:65:c9:4a:a8:05:eb:7a:23:dc:6c:
                    e2:d0:2b:30:7d:ef:e6:51:7e:09:4e:c7:2a:a5:03:
                    77:c1:c3:53:ac:7f:5b:39:dd:fc:e2:55:d2:fa:70:
                    94:04:cf:cb:63:9c:2c:96:b1:3d:10:02:a6:06:50:
                    8f:79:96:ae:f0:57:f6:60:af:ee:04:c6:e6:ee:d1:
                    15:65:4d:ec:0f:88:19:a0:90:d8:90:b6:0a:02:6b:
                    d0:30:7a:53:a3:12:4a:9a:ca:83:c8:ff:10:d6:8b:
                    50:de:57:f7:16:ab:e8:16:6e:00:6b:10:dc:cf:dd:
                    47:2c:bb:a8:ff:57:d7:ed:45:5f:f9:bc:64:5b:33:
                    27:d3:b1:bd:a0:d6:70:ff:a1:36:ac:f4:42:a9:87:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E0:98:56:14:50:29:19:2A:21:DA:48:36:3D:B9:E9:86:3D:D4:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cd837907-ba85-3903-a3b7-c4bf7c3b1e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:10:01:87:ba:b8:cd:35:7a:5e:c8:ae:3c:b2:c2:43:4b:a2:
         8e:6d:de:a9:0f:00:60:d9:f7:e7:3f:b3:88:1e:5b:eb:ea:98:
         47:59:74:90:d1:f8:68:cf:26:7a:15:ea:05:94:5f:24:d2:a4:
         b6:8e:6a:ee:0d:7e:1d:c1:d2:9a:8d:ad:78:dd:25:37:c0:75:
         bb:10:d7:c5:3c:b2:68:10:94:40:1b:fb:8d:f2:0c:40:e1:03:
         c3:d7:0c:8e:ba:98:63:81:ea:49:fb:28:e3:d1:66:c9:6b:d3:
         3b:39:21:6b:78:aa:4a:ec:32:f9:4d:32:58:60:b7:4b:93:8a:
         34:e5:0e:36:5a:c4:f9:ec:7b:da:7a:40:c9:47:4b:4f:f2:77:
         4a:7e:9f:fd:48:61:72:b8:36:b6:25:b3:84:8b:d9:45:97:26:
         21:a6:92:ad:39:2e:5f:86:3e:0f:51:8d:84:3b:b0:06:32:4b:
         e9:91:d3:96:af:7d:e0:5a:96:8c:b9:82:4f:f6:f7:23:fc:e1:
         bc:87:22:3a:b8:69:a9:ed:44:2f:30:d9:ec:45:98:99:4d:76:
         5d:70:2b:73:10:74:74:a8:e4:17:09:21:bf:e7:c3:4b:c8:01:
         c3:1f:b5:d8:ce:a9:cb:b3:80:3b:f1:87:c3:18:f2:c1:90:85:
         99:43:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:02:05 2025 by rpki-client