Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f10ade81-29f6-331b-8f7c-5897d7b26449.roa
File:                     f10ade81-29f6-331b-8f7c-5897d7b26449.roa (raw, json)
Hash identifier:          UHYldrNdXfykGQp31+7sqjHoRLB5BPzgBDS9+g0i81k=
Subject key identifier:   14:79:BD:CD:19:CC:30:C5:D0:CA:5A:2A:CA:DF:82:42:12:8E:84:75
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AC9DBB252689790E323DAA700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f10ade81-29f6-331b-8f7c-5897d7b26449.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     3360
IP address blocks:        130.174.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b2:52:68:97:90:e3:23:da:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=a0cf89eb-1747-40be-b491-d8647972141a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:94:43:be:1c:d7:67:71:93:bf:d2:ca:48:
                    1b:4c:72:3c:c5:b7:42:2b:0e:b3:dd:5e:d1:02:54:
                    2e:9f:70:17:68:bb:41:2d:a1:db:3c:46:0f:e9:7f:
                    8d:18:2e:f8:86:b6:e6:8e:a0:7c:6f:80:a6:48:f9:
                    e1:9e:25:e9:e8:18:5a:eb:1d:18:bb:f2:b5:e8:18:
                    42:2d:ce:55:d0:1a:b9:71:63:20:9e:bc:f2:02:d9:
                    27:ec:a8:c2:18:90:36:80:a8:59:a1:c7:4c:94:7a:
                    47:35:ab:07:1c:b6:8e:3b:bc:7c:dd:c1:1c:9a:7b:
                    01:94:dd:4b:05:82:dd:cf:7c:d3:d5:3d:b2:21:d6:
                    8a:05:1c:f0:b7:62:b2:70:21:37:41:6d:29:77:02:
                    e6:ed:76:f9:19:42:7c:2c:71:39:ce:09:54:f1:a3:
                    7a:b0:6e:8c:53:cc:ca:d1:89:85:fe:7d:a6:0d:35:
                    59:8b:7d:d5:bf:23:3f:b6:e1:bc:73:be:e5:13:10:
                    d7:1c:75:24:e0:22:81:0c:08:ad:cf:d1:fa:a4:14:
                    c9:b8:e6:c4:a8:cf:9f:a3:ac:43:97:ee:e4:59:a9:
                    22:62:5e:07:c6:dd:18:6f:b4:a0:ae:c0:fd:82:24:
                    35:a8:74:c8:0f:a2:dc:e3:40:4b:d6:4e:eb:ee:ac:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:79:BD:CD:19:CC:30:C5:D0:CA:5A:2A:CA:DF:82:42:12:8E:84:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f10ade81-29f6-331b-8f7c-5897d7b26449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c1:c2:ae:ac:e3:ee:ba:f4:b9:d6:7e:15:68:04:47:3f:bf:
         8c:27:ce:59:b0:2c:77:6f:55:13:43:f2:82:39:b1:a4:6a:d8:
         81:31:1c:1b:b8:c1:7c:64:6b:c6:35:f2:0a:6d:aa:05:4d:55:
         50:e8:f6:b5:b0:31:3e:a6:dd:06:48:08:1d:e0:f1:da:6e:09:
         0a:70:46:6d:f5:81:72:c4:48:65:7d:53:22:67:eb:b9:4a:7b:
         0c:f6:2e:7e:40:71:cf:10:47:d5:ae:35:69:81:cd:6b:e5:e9:
         6f:9b:9f:45:e9:dc:0f:be:7d:d5:52:14:b7:8e:87:a7:5d:9f:
         a1:c0:88:2d:8f:0f:9e:92:1b:1b:f0:a6:2f:74:7e:70:78:bb:
         36:8b:22:0e:56:37:a1:26:6c:46:0e:97:0e:4a:8e:f1:fa:d8:
         6c:9f:86:a8:db:30:d7:54:1d:87:bc:d3:66:52:4a:02:3a:9e:
         21:19:ea:95:5b:97:b2:26:be:70:22:ef:0d:24:db:8b:33:70:
         0c:7d:f5:8f:31:d6:98:6a:c8:83:16:07:c7:52:dc:d8:17:5a:
         1d:54:0c:e0:83:3a:f2:86:97:d1:1f:55:83:09:cc:43:e0:b0:
         1b:bc:aa:88:b5:70:7e:fc:24:28:f5:9d:b1:68:cc:d1:9e:ff:
         f2:12:39:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27JSaJeQ4yPapwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
YTBjZjg5ZWItMTc0Ny00MGJlLWI0OTEtZDg2NDc5NzIxNDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2KUQ74c12dxk7/SykgbTHI8xbdCKw6z3V7R
AlQun3AXaLtBLaHbPEYP6X+NGC74hrbmjqB8b4CmSPnhniXp6Bha6x0Yu/K16BhC
Lc5V0Bq5cWMgnrzyAtkn7KjCGJA2gKhZocdMlHpHNasHHLaOO7x83cEcmnsBlN1L
BYLdz3zT1T2yIdaKBRzwt2KycCE3QW0pdwLm7Xb5GUJ8LHE5zglU8aN6sG6MU8zK
0YmF/n2mDTVZi33VvyM/tuG8c77lExDXHHUk4CKBDAitz9H6pBTJuObEqM+fo6xD
l+7kWakiYl4Hxt0Yb7SgrsD9giQ1qHTID6Lc40BL1k7r7qwS5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBR5vc0ZzDDF0MpaKsrfgkISjoR1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjEwYWRlODEtMjlmNi0z
MzFiLThmN2MtNTg5N2Q3YjI2NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3Bwq6s4+669LnWfhVoBEc/v4wnzlmwLHdvVRND8oI5saRq2IExHBu4
wXxka8Y18gptqgVNVVDo9rWwMT6m3QZICB3g8dpuCQpwRm31gXLESGV9UyJn67lK
ewz2Ln5Acc8QR9WuNWmBzWvl6W+bn0Xp3A++fdVSFLeOh6ddn6HAiC2PD56SGxvw
pi90fnB4uzaLIg5WN6EmbEYOlw5KjvH62GyfhqjbMNdUHYe802ZSSgI6niEZ6pVb
l7ImvnAi7w0k24szcAx99Y8x1phqyIMWB8dS3NgXWh1UDOCDOvKGl9EfVYMJzEPg
sBu8qoi1cH78JCj1nbFozNGe//ISObU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:15 2025 by rpki-client