Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2235c17-6c1c-3c11-a809-2e9ad0ccf7ea.roa
File:                     e2235c17-6c1c-3c11-a809-2e9ad0ccf7ea.roa (raw, json)
Hash identifier:          Z5DhKnKcApcUSi7QlkoY53+innZ9vV72/n48hmE/gCY=
Subject key identifier:   C3:9F:40:2A:10:C8:37:D6:29:1D:A9:E9:24:94:DA:D5:B5:86:3C:C1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A104315DA7E863316A5640
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2235c17-6c1c-3c11-a809-2e9ad0ccf7ea.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3360
IP address blocks:        130.174.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:04:31:5d:a7:e8:63:31:6a:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=c526041e-728e-409f-b887-06f78af94eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a9:f8:3b:e4:51:b8:4d:06:9d:b6:7e:8e:aa:
                    a1:d2:da:f7:04:33:b2:af:01:27:90:ad:dc:ed:bf:
                    45:fb:a4:2c:8d:88:0b:2f:de:e6:63:c3:ed:da:14:
                    96:8e:2c:fc:26:8b:d4:a4:89:a2:13:fc:76:58:52:
                    c8:44:4d:39:be:4c:94:40:a5:0a:7c:f0:08:c2:48:
                    96:2f:c5:64:0a:f5:eb:19:95:2b:a4:53:f0:86:5d:
                    ba:3b:2b:a7:30:97:18:87:40:40:b7:4f:a8:fc:5f:
                    51:19:88:fe:0c:9b:f7:4e:64:b6:ae:5b:57:96:ab:
                    80:86:1a:06:a0:e5:11:ee:f1:b6:a5:d5:db:89:07:
                    d5:7d:96:d8:dd:b6:9a:3f:64:6e:f5:f0:a1:24:49:
                    f5:c7:00:ca:a9:fe:76:b8:94:f3:1a:b7:0b:b7:3f:
                    5a:e6:f5:5c:ac:6e:20:0e:3b:29:e2:40:4c:df:d8:
                    c0:6e:45:81:b2:03:aa:ff:f1:3b:da:a9:4e:7e:69:
                    20:44:05:44:aa:1e:f1:8e:b9:5d:3e:5d:17:19:ef:
                    fb:cf:c4:dc:37:e5:50:e6:72:89:ff:d2:d1:e3:77:
                    a3:7a:3f:06:96:c9:8a:28:c2:8d:ba:47:e7:d8:c2:
                    3c:55:5d:cd:8f:72:3b:0d:67:ca:b9:64:ad:f7:e9:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9F:40:2A:10:C8:37:D6:29:1D:A9:E9:24:94:DA:D5:B5:86:3C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2235c17-6c1c-3c11-a809-2e9ad0ccf7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:42:35:0e:55:8c:30:e2:47:a8:6f:c6:d8:88:e3:74:5f:09:
         b6:b6:53:67:a9:65:1b:75:2b:35:9d:54:b7:63:00:34:55:2d:
         3f:5d:c2:20:ce:01:11:08:42:38:9c:62:6a:55:a1:dd:e0:ac:
         68:98:35:24:9b:86:a3:aa:1e:92:35:17:46:c5:ce:58:e9:3b:
         74:b3:05:4d:72:94:97:1c:26:38:f8:96:35:e3:c4:8d:9a:af:
         27:61:fc:d8:a4:b6:09:6d:03:90:eb:8f:70:76:f9:cf:ef:65:
         6c:4e:4f:6e:d2:bf:55:f4:1a:13:00:f4:1f:1d:6d:87:b2:0d:
         53:e5:36:7d:1c:81:a7:89:69:11:35:9b:d0:23:a7:fd:70:e8:
         44:3a:88:9d:46:c8:9c:88:e1:cc:a3:98:63:d0:39:ba:cc:ba:
         6a:a3:48:70:4b:0c:12:a9:78:66:68:f5:f6:db:d0:7c:a0:af:
         21:15:8e:47:51:9a:e9:f0:af:8d:38:6c:ce:16:ae:e2:ff:99:
         5d:5a:7c:91:d7:97:96:71:f5:d4:e0:69:7f:ed:93:01:66:7a:
         e7:95:3f:53:03:10:f1:08:46:51:41:b7:5f:de:88:f2:34:26:
         27:02:0f:94:3e:b2:af:62:d7:aa:41:48:e1:96:92:8d:a6:d9:
         42:1e:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:47:37 2025 by rpki-client