Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fd6e49d-0052-3d4d-985f-60128f453034.roa
File:                     0fd6e49d-0052-3d4d-985f-60128f453034.roa (raw, json)
Hash identifier:          FE6yh/aXrmYmQjdBzaSqQBTC6hkAsaMdrHztMcALwv8=
Subject key identifier:   2F:C7:1F:9F:55:B4:23:4B:03:DB:E5:8E:36:3F:FA:A5:D6:0A:93:BD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D24C4D42332DB6F2C9F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fd6e49d-0052-3d4d-985f-60128f453034.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     203
IP address blocks:        130.174.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:24:c4:d4:23:32:db:6f:2c:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=e010f360-258c-498e-93a1-e8ed577561a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:e6:27:bb:84:c2:e7:82:f6:44:af:26:52:
                    b4:49:65:ff:bf:65:36:ec:50:ba:52:08:81:83:bf:
                    a2:c0:33:23:9b:eb:42:86:ed:2d:bd:5d:67:08:b6:
                    04:ec:f0:2b:bc:37:05:c7:df:21:73:a6:69:b0:3c:
                    b3:88:36:d7:7f:ba:0d:7f:34:c2:53:4a:60:9c:d3:
                    f5:0f:29:0e:3b:b6:d2:d4:84:06:30:3f:e5:30:95:
                    0b:77:78:1e:c8:8d:3b:6c:56:92:d3:23:73:92:65:
                    25:d5:c3:c2:72:69:01:07:3c:74:48:89:15:bd:be:
                    37:1d:33:49:8e:db:4b:77:52:82:75:89:99:a4:65:
                    15:40:15:a0:8a:ca:29:58:62:9e:5f:f3:a2:1e:94:
                    38:eb:2e:1d:ec:4c:88:5b:58:8c:d3:b5:f6:f4:0d:
                    79:71:36:46:9e:3d:b6:92:c3:90:04:fe:85:18:ce:
                    a1:25:f0:5e:a2:9c:e5:cd:b6:32:d9:92:9a:5f:8a:
                    85:8a:d3:5f:b1:6d:91:ab:35:91:92:c0:6f:a6:dc:
                    07:1b:70:00:82:70:2c:db:1d:96:c3:1c:ac:55:d0:
                    0a:b5:7d:f4:a2:45:41:8d:06:29:70:e0:b5:64:ff:
                    9f:82:da:b9:cf:56:42:b8:36:75:29:8c:ad:99:5c:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C7:1F:9F:55:B4:23:4B:03:DB:E5:8E:36:3F:FA:A5:D6:0A:93:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fd6e49d-0052-3d4d-985f-60128f453034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:a7:39:b5:92:56:f6:44:01:d1:15:f7:eb:d7:4d:a3:ad:
         36:57:4c:ca:14:d1:f2:b0:ca:cd:6b:01:52:05:49:75:e5:79:
         27:cd:17:56:99:75:f5:58:06:7b:32:da:7d:a6:2d:e5:43:bc:
         c2:f4:13:5e:39:0c:a5:08:c2:6f:2f:e3:f8:35:a8:bf:61:3c:
         c9:6d:ea:ec:a8:09:f9:02:72:d0:15:ff:ef:c4:bd:20:7e:9d:
         10:24:b9:77:9d:25:7c:df:b3:06:93:20:38:11:56:a3:b2:01:
         97:41:39:97:9f:39:24:89:00:02:09:88:3d:02:18:8b:1e:14:
         22:75:3a:49:0b:1b:f8:0a:5a:94:e4:d0:06:5b:0e:54:63:58:
         29:36:5e:29:36:10:20:c2:26:32:5d:f8:6b:95:64:ab:3c:53:
         b4:9c:5c:0e:cb:d4:ed:be:e0:07:42:6c:51:21:cd:af:b0:28:
         40:49:c8:48:78:e2:c0:24:d5:f6:a1:03:60:b3:9f:ed:40:67:
         b2:86:7c:ab:c0:97:29:9c:a4:2b:1b:43:99:9f:08:1b:6f:7d:
         d8:52:eb:21:db:70:22:a9:8f:e0:f4:a7:10:e1:96:2a:0a:88:
         38:94:45:10:2e:87:6f:a3:f4:06:06:7e:fa:0b:20:4c:f7:a4:
         5d:27:ef:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSTE1CMy228sn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
ZTAxMGYzNjAtMjU4Yy00OThlLTkzYTEtZThlZDU3NzU2MWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R7mJ7uEwueC9kSvJlK0SWX/v2U27FC6UgiB
g7+iwDMjm+tChu0tvV1nCLYE7PArvDcFx98hc6ZpsDyziDbXf7oNfzTCU0pgnNP1
DykOO7bS1IQGMD/lMJULd3geyI07bFaS0yNzkmUl1cPCcmkBBzx0SIkVvb43HTNJ
jttLd1KCdYmZpGUVQBWgisopWGKeX/OiHpQ46y4d7EyIW1iM07X29A15cTZGnj22
ksOQBP6FGM6hJfBeopzlzbYy2ZKaX4qFitNfsW2RqzWRksBvptwHG3AAgnAs2x2W
wxysVdAKtX30okVBjQYpcOC1ZP+fgtq5z1ZCuDZ1KYytmVxtqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/HH59VtCNLA9vljjY/+qXWCpO9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGZkNmU0OWQtMDA1Mi0z
ZDRkLTk4NWYtNjAxMjhmNDUzMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFspzm1klb2RAHRFffr102jrTZXTMoU0fKwys1rAVIFSXXleSfNF1aZ
dfVYBnsy2n2mLeVDvML0E145DKUIwm8v4/g1qL9hPMlt6uyoCfkCctAV/+/EvSB+
nRAkuXedJXzfswaTIDgRVqOyAZdBOZefOSSJAAIJiD0CGIseFCJ1OkkLG/gKWpTk
0AZbDlRjWCk2Xik2ECDCJjJd+GuVZKs8U7ScXA7L1O2+4AdCbFEhza+wKEBJyEh4
4sAk1fahA2Czn+1AZ7KGfKvAlymcpCsbQ5mfCBtvfdhS6yHbcCKpj+D0pxDhlioK
iDiURRAuh2+j9AYGfvoLIEz3pF0n7wE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:32:35 2025 by rpki-client