Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4e3ac08-2cb0-3b5d-978e-5d200cf32527.roa
File:                     f4e3ac08-2cb0-3b5d-978e-5d200cf32527.roa (raw, json)
Hash identifier:          bB4hAyXXHQjCskiil82dW9cCMhHMTlVJ9jTZGEfTIp8=
Subject key identifier:   11:A1:CF:53:1D:4E:1B:2E:90:98:E5:1D:2E:48:65:E3:F0:5E:2D:0C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619F99D5D11DB153DE4BB40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4e3ac08-2cb0-3b5d-978e-5d200cf32527.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     3356
IP address blocks:        130.174.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f9:9d:5d:11:db:15:3d:e4:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=97a204b9-ca13-4606-8cbb-fa62fae239ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9e:2e:f3:ec:0a:6e:ed:be:ab:d4:0d:7c:d0:
                    f6:d4:7c:91:c2:d0:7c:9a:d0:9e:f7:83:9d:60:35:
                    c6:b9:ad:03:59:05:03:b9:df:50:f9:03:3a:87:6f:
                    c8:2d:b5:55:2c:13:8d:84:94:b1:84:70:c2:9c:c1:
                    19:8c:2e:6e:11:44:e2:64:6d:2d:81:d7:2f:c2:4f:
                    41:57:e1:04:2b:a6:5e:bb:63:78:9d:b3:88:41:6b:
                    08:e6:ca:c5:70:24:09:88:74:ff:7a:77:ff:13:63:
                    b0:1b:e3:e7:9a:81:b0:16:91:51:9c:94:6d:cb:83:
                    dc:12:a1:b2:1b:e4:e0:f7:a0:16:13:3a:38:d1:7c:
                    20:63:44:e9:1d:cc:4f:0b:e0:9c:80:0c:d3:f8:82:
                    ca:53:fa:e7:cf:77:ff:f4:ca:8e:11:7a:05:a5:3c:
                    b0:0b:d5:10:25:a0:c9:1a:0f:cb:d0:75:b0:32:8f:
                    96:db:79:87:42:7b:1f:c0:ee:2a:2a:a6:d5:44:fd:
                    38:83:1f:03:01:1b:12:c9:41:61:d4:98:16:00:15:
                    ec:b7:71:84:ae:6c:ab:7a:6b:46:e7:9f:46:bb:bd:
                    3c:ad:3f:ee:9f:cd:09:78:69:5b:b2:32:ee:f7:2a:
                    ba:c3:f3:4b:c8:a9:73:06:24:48:ea:a3:40:cf:c2:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A1:CF:53:1D:4E:1B:2E:90:98:E5:1D:2E:48:65:E3:F0:5E:2D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4e3ac08-2cb0-3b5d-978e-5d200cf32527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e7:d2:9a:da:64:a2:87:f1:d0:0f:12:4c:87:71:38:08:5c:
         8a:63:3b:ba:62:e4:b3:75:4e:f4:78:bc:b9:7c:fe:f2:b7:99:
         ce:40:4a:b6:9f:de:78:a9:c6:e7:74:17:92:c0:f2:96:65:36:
         49:72:5f:20:19:0a:df:41:04:aa:98:77:d8:b9:d8:af:a3:20:
         65:a5:52:7f:c7:5f:ae:1e:a4:07:e3:17:f6:d5:81:ea:e8:af:
         96:6d:2f:eb:29:df:77:4a:cb:a6:53:10:e8:a8:b0:b9:e9:de:
         b6:11:f4:72:ab:10:94:1a:81:e1:2b:da:70:97:c5:1e:c8:6b:
         6f:b0:1f:ad:55:95:e3:e0:80:d2:07:ff:9a:80:f5:1d:c2:02:
         37:cf:e7:37:22:69:e8:17:49:ea:05:a7:42:2e:77:be:2f:08:
         eb:5a:68:16:88:83:45:5c:6b:5d:4e:1e:43:45:97:66:d8:b2:
         bd:3e:b0:64:18:18:8c:87:b4:17:c0:52:63:63:8f:e7:39:c4:
         51:6d:15:23:c5:74:3b:de:8b:01:72:78:5c:36:95:aa:1b:2f:
         2c:81:eb:94:e6:ef:f1:fb:b3:8a:22:bf:6f:8c:81:1f:60:eb:
         f9:33:f1:5f:47:0d:af:bb:3e:6b:45:ac:b6:ed:c8:14:f3:63:
         de:33:d2:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGfmdXRHbFT3ku0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk
OTdhMjA0YjktY2ExMy00NjA2LThjYmItZmE2MmZhZTIzOWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA454u8+wKbu2+q9QNfND21HyRwtB8mtCe94Od
YDXGua0DWQUDud9Q+QM6h2/ILbVVLBONhJSxhHDCnMEZjC5uEUTiZG0tgdcvwk9B
V+EEK6Zeu2N4nbOIQWsI5srFcCQJiHT/enf/E2OwG+PnmoGwFpFRnJRty4PcEqGy
G+Tg96AWEzo40XwgY0TpHcxPC+CcgAzT+ILKU/rnz3f/9MqOEXoFpTywC9UQJaDJ
Gg/L0HWwMo+W23mHQnsfwO4qKqbVRP04gx8DARsSyUFh1JgWABXst3GErmyremtG
559Gu708rT/un80JeGlbsjLu9yq6w/NLyKlzBiRI6qNAz8KzNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGhz1MdThsukJjlHS5IZePwXi0MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjRlM2FjMDgtMmNiMC0z
YjVkLTk3OGUtNWQyMDBjZjMyNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnn0praZKKH8dAPEkyHcTgIXIpjO7pi5LN1TvR4vLl8/vK3mc5ASraf
3nipxud0F5LA8pZlNklyXyAZCt9BBKqYd9i52K+jIGWlUn/HX64epAfjF/bVgero
r5ZtL+sp33dKy6ZTEOiosLnp3rYR9HKrEJQageEr2nCXxR7Ia2+wH61VlePggNIH
/5qA9R3CAjfP5zciaegXSeoFp0Iud74vCOtaaBaIg0Vca11OHkNFl2bYsr0+sGQY
GIyHtBfAUmNjj+c5xFFtFSPFdDveiwFyeFw2laobLyyB65Tm7/H7s4oiv2+MgR9g
6/kz8V9HDa+7PmtFrLbtyBTzY94z0rk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:34:03 2026 by rpki-client