Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d3de3b31-2a28-3ea1-8a87-29ccba2bb691.roa
File:                     d3de3b31-2a28-3ea1-8a87-29ccba2bb691.roa (raw, json)
Hash identifier:          ImJ2tsz/5X5r7GxwI3qFN3X/vx4DqP9RCvArhP5GBhc=
Subject key identifier:   82:7D:75:BA:63:C9:16:6B:42:2D:25:66:83:52:40:A4:46:AD:DE:B7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B4A71ACFADE2D386945E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d3de3b31-2a28-3ea1-8a87-29ccba2bb691.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     3356
IP address blocks:        130.174.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a7:1a:cf:ad:e2:d3:86:94:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=0c251606-7613-4074-a9e8-f2c1cfea7208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:49:80:74:0c:e5:e2:c2:39:19:5d:62:55:
                    a6:55:d6:2e:b0:99:43:b7:8f:b2:33:92:43:91:18:
                    a0:3b:fb:78:70:0d:02:e9:9f:c6:7b:bb:80:c9:61:
                    f8:3d:b6:bc:5b:ae:3d:72:5f:19:db:2f:5d:b8:c5:
                    94:75:68:da:be:4d:1e:5a:a5:fe:f3:81:2f:2f:91:
                    6e:8f:4f:9b:88:16:9e:dd:80:18:7e:8a:f4:5e:30:
                    84:43:08:a2:56:45:62:53:9d:41:34:07:64:e4:52:
                    60:15:d0:03:92:93:19:51:ca:90:2d:9e:23:e4:63:
                    12:24:02:27:b5:40:7e:23:a1:d0:22:eb:0c:7b:b8:
                    8d:9f:bf:e8:76:3f:5d:b7:db:dd:1b:f7:c5:ff:e3:
                    15:9d:5e:c5:c9:e7:dd:95:83:3c:40:ba:7f:44:b9:
                    3e:66:69:6b:2f:4e:a6:e0:ff:d2:98:cb:8d:5c:d2:
                    6f:5b:eb:bc:90:11:4f:49:a5:81:dc:fd:2b:96:51:
                    cc:37:a8:15:85:25:a5:d3:ba:80:cd:1b:30:bc:78:
                    07:79:2a:48:05:97:ca:04:d1:a9:37:db:09:54:d9:
                    70:47:cd:b8:2f:7c:eb:64:36:ce:21:50:90:d7:82:
                    3d:46:a4:cb:76:ef:2f:b7:82:b4:89:14:d5:b5:7f:
                    2d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:75:BA:63:C9:16:6B:42:2D:25:66:83:52:40:A4:46:AD:DE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d3de3b31-2a28-3ea1-8a87-29ccba2bb691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:7a:58:25:ef:73:cf:03:6f:92:6e:5c:11:4f:41:cf:e8:
         3b:63:f2:73:a9:d0:56:f1:c6:8d:c0:7d:4c:ed:4d:e0:eb:d0:
         3a:ef:d3:64:dc:c2:8c:fd:2d:c9:5d:b3:b8:1b:f7:90:57:94:
         58:27:58:70:97:9e:54:d4:33:c5:cf:88:d3:cc:34:f1:84:a3:
         b9:03:6a:3b:ba:6c:ab:8d:59:7f:d0:79:23:10:e0:f0:33:b1:
         3f:68:36:b3:ab:6c:8a:aa:8c:7e:c9:61:70:f9:da:9c:33:61:
         4b:7a:3e:8e:5c:3f:21:41:2b:10:58:33:d6:c9:e0:ac:38:9d:
         cc:10:5a:45:3d:41:7c:99:7c:c9:3a:e5:7c:0a:8a:01:8b:c2:
         f1:04:e1:af:7c:50:be:c2:92:4a:68:fc:f3:f4:50:c3:0c:fa:
         79:f2:fb:0c:30:4f:76:00:a4:78:d4:c9:f9:2d:31:1a:19:74:
         08:ca:3e:f6:ea:ee:9e:d8:66:7d:59:63:58:92:14:55:8f:41:
         b6:96:f8:2a:0d:42:65:a2:e1:6d:64:b8:f7:1c:ab:db:bf:cc:
         da:92:b1:f7:de:77:10:dc:50:ce:68:90:8d:fd:9f:e0:5f:38:
         4a:b5:09:5b:60:f6:54:8f:67:59:ad:58:14:67:72:06:30:f5:
         c2:8f:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:05:16 2026 by rpki-client