Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ede88ab4-8319-3451-a7c4-68c19359aed6.roa
File:                     ede88ab4-8319-3451-a7c4-68c19359aed6.roa (raw, json)
Hash identifier:          ow5PaArC4reiBaPHJMm/qz4hhk6ZZF46M1gX05KtXU4=
Subject key identifier:   B5:47:80:30:98:EA:CF:5D:A8:1D:03:E3:D9:20:44:03:C0:85:B6:B8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BB7DED2A3AC2AE03CC020
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ede88ab4-8319-3451-a7c4-68c19359aed6.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        130.174.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b7:de:d2:a3:ac:2a:e0:3c:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f24d4822-fc46-42ff-a4b8-575419133738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:3c:d6:cd:b7:26:31:13:e3:a9:66:10:f5:
                    c3:28:1d:f6:15:b0:8d:0d:5e:71:9b:2a:6a:58:23:
                    e5:d3:02:da:5c:71:de:ed:15:e5:e8:54:75:5d:9a:
                    92:29:24:91:1c:5f:58:9b:2f:13:dc:80:a4:1b:6d:
                    50:c8:50:1d:1e:81:36:95:e8:78:fc:ea:e7:63:5f:
                    95:6e:df:3a:92:e5:59:eb:9b:f3:5d:b3:9a:d9:37:
                    8c:c5:db:17:b0:16:26:14:25:28:b9:cc:b6:1a:60:
                    5c:de:0c:9f:7f:8e:b0:74:e5:ff:79:9b:dc:a3:8a:
                    4b:99:ec:32:bf:95:b7:3c:83:fd:58:8a:3d:af:6b:
                    54:25:a5:e3:47:48:45:05:95:0f:7b:ce:80:40:df:
                    8d:b6:29:97:87:68:6f:c6:1f:77:30:5f:a1:1f:63:
                    07:9f:e6:a7:41:3a:d3:a0:07:4e:d0:59:11:62:65:
                    12:4d:f2:7f:f7:32:4d:aa:f8:02:0e:4e:96:4e:de:
                    61:61:b0:c0:61:04:2c:38:31:92:47:29:68:3f:fb:
                    4b:88:8c:1d:87:bf:f5:f4:5e:7a:fe:3c:74:92:6f:
                    1d:1e:01:04:08:74:62:4b:f8:15:5b:e6:d1:c7:53:
                    c5:20:e0:b3:d2:de:84:20:46:43:d1:ca:94:b1:a3:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:47:80:30:98:EA:CF:5D:A8:1D:03:E3:D9:20:44:03:C0:85:B6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ede88ab4-8319-3451-a7c4-68c19359aed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:02:4a:d1:ed:80:e8:16:71:f8:1e:9a:e0:74:8e:dc:ca:
         46:99:d9:e9:f7:0e:ed:73:24:d1:26:c4:1b:ec:f1:84:43:80:
         28:72:b9:e1:78:e5:4a:d0:1c:cd:c7:6f:65:5c:09:6d:8c:93:
         f6:af:74:a3:19:a3:58:16:5a:7a:59:1f:bb:ac:0f:e5:8c:b7:
         b9:aa:3f:da:bb:8c:6c:12:3c:1a:a8:78:35:70:ab:ce:cf:5e:
         ab:ba:a0:19:57:48:cb:db:88:d7:67:14:89:0a:44:65:62:a9:
         ea:df:8a:05:97:82:45:70:71:9c:65:fb:de:93:4e:25:89:f1:
         b5:0f:74:cb:d8:de:db:f6:47:3f:b0:4a:43:06:44:7d:3d:e3:
         24:4d:c3:c0:95:9c:02:6c:14:5b:ea:79:9d:bb:4b:d7:5f:0f:
         8c:37:78:ed:36:e6:aa:c1:0a:09:37:24:72:76:1d:17:4c:bc:
         4b:bc:67:54:c7:a7:b0:4b:d1:c8:16:66:38:9b:a3:29:a2:d4:
         98:e1:4b:bf:a1:4c:58:03:fa:b5:a9:db:58:23:70:7b:67:b7:
         8f:09:c5:50:84:d1:65:93:d6:64:9e:27:b4:76:b7:a2:65:8e:
         bf:a3:cb:27:d9:bd:2d:12:ea:7c:a0:bf:3d:1c:63:7d:ec:a2:
         e1:19:c9:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7fe0qOsKuA8wCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
ZjI0ZDQ4MjItZmM0Ni00MmZmLWE0YjgtNTc1NDE5MTMzNzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyc81s23JjET46lmEPXDKB32FbCNDV5xmypq
WCPl0wLaXHHe7RXl6FR1XZqSKSSRHF9Ymy8T3ICkG21QyFAdHoE2leh4/OrnY1+V
bt86kuVZ65vzXbOa2TeMxdsXsBYmFCUoucy2GmBc3gyff46wdOX/eZvco4pLmewy
v5W3PIP9WIo9r2tUJaXjR0hFBZUPe86AQN+NtimXh2hvxh93MF+hH2MHn+anQTrT
oAdO0FkRYmUSTfJ/9zJNqvgCDk6WTt5hYbDAYQQsODGSRyloP/tLiIwdh7/19F56
/jx0km8dHgEECHRiS/gVW+bRx1PFIOCz0t6EIEZD0cqUsaN/cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVHgDCY6s9dqB0D49kgRAPAhba4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWRlODhhYjQtODMxOS0z
NDUxLWE3YzQtNjhjMTkzNTlhZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRNAkrR7YDoFnH4HprgdI7cykaZ2en3Du1zJNEmxBvs8YRDgChyueF4
5UrQHM3Hb2VcCW2Mk/avdKMZo1gWWnpZH7usD+WMt7mqP9q7jGwSPBqoeDVwq87P
Xqu6oBlXSMvbiNdnFIkKRGViqerfigWXgkVwcZxl+96TTiWJ8bUPdMvY3tv2Rz+w
SkMGRH094yRNw8CVnAJsFFvqeZ27S9dfD4w3eO025qrBCgk3JHJ2HRdMvEu8Z1TH
p7BL0cgWZjiboymi1JjhS7+hTFgD+rWp21gjcHtnt48JxVCE0WWT1mSeJ7R2t6Jl
jr+jyyfZvS0S6nygvz0cY33souEZySs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:25 2025 by rpki-client