Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de674802-9a74-35e8-9256-21bde92f984a.roa
File:                     de674802-9a74-35e8-9256-21bde92f984a.roa (raw, json)
Hash identifier:          4uNgekg5/bGWOxr1hC1mkOx7r3Bml+LMzdg5rEgTL80=
Subject key identifier:   34:06:31:81:2F:CD:5A:F1:70:35:B9:A9:5B:A6:06:E3:A1:08:5D:8C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619F5A83535905AFA10F800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de674802-9a74-35e8-9256-21bde92f984a.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     3356
IP address blocks:        130.174.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f5:a8:35:35:90:5a:fa:10:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=1a0e9886-08b7-447b-8e4c-b24bc4b6e26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:1c:23:37:7d:6e:aa:fe:71:0d:bf:56:31:
                    c5:60:87:af:b7:18:80:0a:93:40:fb:c4:86:4c:66:
                    ed:ed:f9:81:bf:59:b1:2c:23:62:cc:77:b7:9a:8a:
                    ca:ca:7f:60:a1:07:af:c1:f9:43:35:f4:c8:a0:cd:
                    bf:40:12:f5:9d:da:e1:85:2c:32:42:33:32:8f:29:
                    bf:a4:81:db:f4:c3:9b:c9:9b:28:8a:a7:8c:9a:f2:
                    ec:c8:e8:ff:91:41:db:35:a5:10:51:5f:94:31:7e:
                    56:ed:b5:37:fd:3c:cb:07:2c:55:02:f7:ed:41:ef:
                    41:8a:44:6c:4a:15:96:5e:04:19:37:df:04:af:18:
                    1c:b2:57:08:dc:34:16:8a:44:65:23:0a:95:df:fa:
                    1c:46:9d:26:cd:00:48:e0:a8:2c:0f:4d:64:14:39:
                    58:a9:74:7a:1e:6b:bf:fc:27:ae:f2:0a:38:52:ce:
                    f6:0a:c4:ff:22:64:96:e1:54:9d:bd:9b:c8:19:61:
                    64:8d:ca:0b:35:3d:90:58:79:2b:6c:fb:c1:4d:45:
                    bd:c9:c8:65:74:32:d1:9f:fb:b7:ae:a8:af:1c:be:
                    f0:c8:b7:e9:c0:e2:03:27:6e:5c:15:28:7b:ed:d1:
                    67:25:db:e7:eb:be:b0:ec:18:5f:80:dc:ff:39:04:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:31:81:2F:CD:5A:F1:70:35:B9:A9:5B:A6:06:E3:A1:08:5D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de674802-9a74-35e8-9256-21bde92f984a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:48:03:50:f3:0f:8f:ff:96:62:74:bb:d5:97:b0:9c:0f:96:
         9b:20:0c:2d:0d:53:f4:1e:a4:4c:d2:2e:81:5d:99:be:35:fc:
         d1:2b:b6:39:e2:91:e0:60:20:c4:e2:5a:d5:46:53:f0:3d:43:
         cd:ef:22:24:e0:bd:71:39:90:9f:33:53:5a:d7:74:70:be:7c:
         b2:f6:97:a5:50:24:1a:3c:ad:bb:cd:4e:53:ef:f4:8f:2c:d5:
         eb:dc:4e:fb:6b:27:b6:45:73:3b:1c:da:ef:b4:24:37:77:68:
         1c:b0:14:57:8a:88:f2:11:83:c9:c5:e6:d8:3f:f3:3e:82:f3:
         67:49:ef:4e:e1:c9:62:96:95:3e:f4:d5:cb:ad:4f:c5:78:77:
         ea:ab:dc:b0:ad:a9:d3:66:62:d6:12:e7:d0:06:4b:2c:98:0d:
         3a:67:3a:b0:b6:c8:4e:9a:b2:ac:38:f3:18:d5:e5:8f:68:40:
         92:cb:65:5b:6c:a7:8c:b6:be:0e:66:a8:a8:44:3d:4d:0f:fe:
         c6:e8:99:9e:c3:b8:57:d7:5a:cf:44:02:4d:af:77:b0:cf:7b:
         32:4a:fb:7b:0b:f1:d0:14:b9:16:91:33:b8:da:9d:88:56:57:
         0a:e0:4f:f3:92:96:a3:5f:5a:78:0c:f3:49:ea:c1:f2:09:d2:
         d6:5e:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:21:19 2026 by rpki-client