Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa
File:                     dd9f908b-e4fc-32a0-b013-15842bd0459e.roa (raw, json)
Hash identifier:          GHHTKJwJNd0qg2bofjg9Xx5278JqdF/RsxL4Nwhx1yI=
Subject key identifier:   E5:E2:E5:33:0A:6F:23:9A:A5:F9:8A:98:42:76:9D:12:03:9A:BC:93
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BB90AA12EFA4C8A042B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     203
IP address blocks:        130.174.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b9:0a:a1:2e:fa:4c:8a:04:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=845030d3-7438-411b-a9d6-2acaecfda05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:49:1a:b6:a5:78:24:03:93:7a:6b:90:4e:
                    8c:83:15:15:c7:55:6c:fd:c8:70:48:3e:c1:f6:92:
                    73:5f:a2:52:f7:8b:62:cb:6a:11:6d:9b:d5:27:b0:
                    2f:a4:ff:ff:45:3f:ee:08:9b:59:99:2d:2c:88:01:
                    61:f6:98:84:1d:4c:20:8b:b9:f6:6b:20:f9:19:d8:
                    60:cb:66:97:b6:18:c2:f0:71:06:b0:ce:ee:3d:20:
                    51:f8:4b:9b:d7:5b:94:a2:0d:1a:cd:8b:0b:84:9d:
                    1a:4c:9a:ea:5d:3d:2d:b8:a7:b2:64:93:7b:1d:03:
                    ed:06:e8:61:75:cc:cb:9c:d7:49:92:37:c0:f7:ed:
                    f3:2a:34:a2:9c:c5:ff:4b:f7:44:25:b8:db:15:ec:
                    48:f8:6c:b8:be:06:83:8d:2b:b1:7b:f2:64:e5:f6:
                    56:cb:4e:f5:3d:f5:6f:a7:6d:da:42:7e:42:3d:e8:
                    46:a1:8d:49:41:54:68:07:53:c6:60:2e:49:fa:dc:
                    ee:87:2d:2f:be:85:82:55:55:29:f2:ed:d6:d6:ff:
                    e9:da:b5:25:b1:ed:a5:d1:47:3c:b6:86:ee:05:07:
                    ac:12:f0:7f:48:a7:50:7a:81:f2:39:08:0f:f6:b6:
                    f8:28:9e:6b:4d:2d:82:a4:09:1e:f0:fc:c8:5d:d5:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:E5:33:0A:6F:23:9A:A5:F9:8A:98:42:76:9D:12:03:9A:BC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:e9:20:50:51:e7:ed:5f:4b:5d:54:0d:f4:5f:eb:64:63:
         51:1e:63:66:2d:2b:d7:98:28:f8:88:ac:45:08:12:b9:ba:dc:
         a7:13:ad:38:4c:60:12:f4:f7:30:24:ce:7f:91:2b:f5:13:09:
         a1:66:30:dd:4b:08:4e:52:9e:cc:47:fc:5e:38:e6:31:f9:fb:
         11:15:f8:be:9f:be:dc:6b:b3:be:12:38:01:4e:ad:bb:42:b9:
         b4:01:27:2c:04:b1:a0:79:2c:a3:fa:5e:e6:fe:4a:5e:2c:8e:
         8e:0b:99:d4:ec:98:06:f0:1c:96:87:b3:ea:69:96:a1:b1:bb:
         6e:0c:25:7c:0b:32:c3:6d:4d:06:6d:b8:78:e3:1a:44:dc:9b:
         24:7f:fa:04:ec:87:a3:11:85:31:45:1a:22:9f:ef:0e:4d:61:
         a0:47:14:f6:58:f0:42:23:36:78:9a:46:c4:e5:44:1e:0a:0e:
         83:e0:8b:ab:b7:88:06:47:0e:50:db:99:92:f5:a2:7e:9b:13:
         2c:62:6e:6c:9e:4d:23:2c:95:f7:d6:e4:30:bd:f0:cb:55:66:
         38:cd:24:2b:e4:75:98:61:ac:b1:ce:63:3c:7c:42:1a:ef:51:
         08:ae:a2:c2:68:57:94:76:d0:26:13:d9:24:8f:68:63:52:33:
         fb:6a:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:10:46 2025 by rpki-client