Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b5eb08f-a78b-35d0-aef3-9e74c2c65758.roa
File:                     0b5eb08f-a78b-35d0-aef3-9e74c2c65758.roa (raw, json)
Hash identifier:          3IGU5LAtHEXSME7kJB6dzUsJvWCu2zaZHHr3Af330N8=
Subject key identifier:   DD:DC:FE:B1:70:8F:E6:25:3C:FD:09:44:CA:68:C5:B8:B8:23:1B:2F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF717733E5A7BA71A402CFC90
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b5eb08f-a78b-35d0-aef3-9e74c2c65758.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        130.174.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:73:3e:5a:7b:a7:1a:40:2c:fc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e0953304-9254-4903-bb75-c052ba2854f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:88:d8:84:3f:12:9c:92:8e:22:0e:1f:77:
                    e1:ec:56:c6:92:80:ec:03:e9:41:2a:1e:44:1b:7c:
                    56:e3:89:a7:b3:63:3d:54:f0:bc:e9:3e:21:f4:1c:
                    0b:b3:95:15:5b:de:b7:d1:f9:de:b2:b0:b9:e5:7b:
                    b6:86:70:68:61:cc:a4:12:96:ed:99:de:f5:2e:11:
                    61:00:09:5a:26:dd:b2:9e:0d:f3:06:a8:6b:03:2a:
                    0e:55:b0:c1:cb:d0:bb:45:64:29:18:28:c6:30:a8:
                    78:16:a9:de:f7:bf:70:8d:91:5d:5a:76:f6:d8:55:
                    81:18:fb:87:11:83:59:b4:78:cd:2b:96:e8:ee:98:
                    14:23:12:f8:d4:35:99:2b:ce:b5:14:35:4f:fe:1d:
                    f0:dc:9a:33:5d:c3:7b:5c:0a:2e:da:6a:a9:9b:fc:
                    6c:e6:37:11:66:0c:0e:4c:3c:8c:53:d4:12:ed:57:
                    b1:c0:66:6c:5b:78:83:4d:2c:69:62:87:24:58:c1:
                    44:c6:8b:7c:f4:d8:a6:db:be:90:2e:01:ec:0b:11:
                    6b:b6:14:ee:35:bc:c3:42:ab:58:ae:21:e6:9e:c8:
                    34:08:96:ca:c0:36:77:24:15:5b:4e:e6:92:4f:bf:
                    71:f4:bc:f1:1e:dc:dd:c7:43:e0:07:3f:ae:75:aa:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:FE:B1:70:8F:E6:25:3C:FD:09:44:CA:68:C5:B8:B8:23:1B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b5eb08f-a78b-35d0-aef3-9e74c2c65758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:68:88:0e:f3:c2:61:0f:7c:29:f0:02:2d:07:6c:26:5c:15:
         19:d8:20:55:3a:2a:ef:6c:fd:a4:d7:42:b8:76:86:b7:d7:5d:
         1e:44:49:f8:fe:2d:81:44:c7:5e:b1:52:59:cb:49:f8:07:c3:
         60:d1:4a:14:c2:27:ae:3c:bc:82:7c:d0:33:25:29:5d:60:eb:
         e5:dc:dc:0d:cf:40:f1:d7:ea:2b:93:82:de:1f:eb:ee:d0:d3:
         45:91:35:4e:02:6b:b0:09:f7:1f:cd:7f:13:f2:fa:dc:a1:ea:
         dc:70:a7:c1:01:96:b9:2e:3f:38:85:58:f6:2f:2a:f6:e7:a6:
         fd:38:af:dd:50:e4:16:fc:f0:e0:bc:04:cf:a9:69:f7:7b:c6:
         14:9e:5e:04:6a:6a:12:8b:33:64:74:eb:c0:57:a4:cd:ad:9c:
         32:b2:a3:27:f8:db:28:fa:b8:8d:21:da:28:a4:dc:87:da:7b:
         ec:c0:10:73:4c:3a:1a:f2:1b:fd:6e:f6:7d:58:86:35:7e:dd:
         9b:df:56:41:98:63:96:a6:8b:8a:d0:40:9b:bb:24:83:71:1e:
         72:71:78:25:14:57:b1:c5:1c:4a:aa:12:f5:ca:3a:2a:6f:f1:
         4f:1e:60:86:97:9b:85:08:17:a6:77:c0:df:25:b4:97:24:2f:
         d4:29:af:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3M+WnunGkAs/JAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
ZTA5NTMzMDQtOTI1NC00OTAzLWJiNzUtYzA1MmJhMjg1NGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s+I2IQ/EpySjiIOH3fh7FbGkoDsA+lBKh5E
G3xW44mns2M9VPC86T4h9BwLs5UVW9630fnesrC55Xu2hnBoYcykEpbtmd71LhFh
AAlaJt2yng3zBqhrAyoOVbDBy9C7RWQpGCjGMKh4Fqne979wjZFdWnb22FWBGPuH
EYNZtHjNK5bo7pgUIxL41DWZK861FDVP/h3w3JozXcN7XAou2mqpm/xs5jcRZgwO
TDyMU9QS7VexwGZsW3iDTSxpYockWMFExot89Nim276QLgHsCxFrthTuNbzDQqtY
riHmnsg0CJbKwDZ3JBVbTuaST79x9LzxHtzdx0PgBz+udaoKGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3c/rFwj+YlPP0JRMpoxbi4IxsvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGI1ZWIwOGYtYTc4Yi0z
NWQwLWFlZjMtOWU3NGMyYzY1NzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANoiA7zwmEPfCnwAi0HbCZcFRnYIFU6Ku9s/aTXQrh2hrfXXR5ESfj+
LYFEx16xUlnLSfgHw2DRShTCJ648vIJ80DMlKV1g6+Xc3A3PQPHX6iuTgt4f6+7Q
00WRNU4Ca7AJ9x/NfxPy+tyh6txwp8EBlrkuPziFWPYvKvbnpv04r91Q5Bb88OC8
BM+pafd7xhSeXgRqahKLM2R068BXpM2tnDKyoyf42yj6uI0h2iik3Ifae+zAEHNM
OhryG/1u9n1YhjV+3ZvfVkGYY5ami4rQQJu7JINxHnJxeCUUV7HFHEqqEvXKOipv
8U8eYIaXm4UIF6Z3wN8ltJckL9Qpr6o=
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:38:54 2026 by rpki-client