Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa
File:                     104038a4-0b27-3ddd-924e-b238fc38a0d9.roa (raw, json)
Hash identifier:          Rat68i2Wc1zCm0gy0b/EPP0tt/oJ/0Q5jKKCbvFjUfc=
Subject key identifier:   6A:5F:D1:24:58:09:DD:10:8F:D1:F5:DA:05:0D:3F:22:35:DB:5E:73
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FD533ED725E257918AB00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        130.174.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d5:33:ed:72:5e:25:79:18:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=c3e1da8b-0671-4ea2-b717-d579d32b2550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:83:ab:3c:79:4c:b1:7f:94:ff:a9:e0:9c:
                    21:32:b3:0e:04:34:c3:35:7b:e2:3d:6f:6c:3b:52:
                    1f:0f:c1:71:8f:7f:9d:45:ce:d1:c7:35:f2:96:df:
                    87:cd:f6:6d:d7:74:13:ff:f1:e4:ac:4d:dd:15:19:
                    a6:8c:81:e0:50:1e:d3:48:4e:50:57:d8:d4:1d:89:
                    56:86:20:f6:8c:ad:25:3c:55:b7:25:1f:cc:5d:39:
                    81:9f:c7:7d:02:d2:23:0b:a0:e0:19:39:b5:40:7f:
                    95:aa:8a:13:02:70:47:78:14:12:c1:a7:b1:04:32:
                    ad:bb:55:b8:89:e1:81:b6:15:8f:76:5a:03:6b:e1:
                    d8:c3:97:7b:7b:6c:23:b2:50:01:3f:93:9f:f8:17:
                    0c:de:63:0b:41:cb:c1:67:2d:a6:da:dc:71:65:35:
                    65:b8:65:47:e1:8e:61:26:a8:ff:f5:8b:fd:8c:b0:
                    b6:a9:53:bd:08:b1:e8:a1:00:88:16:43:93:60:39:
                    3a:4e:16:e4:f2:ce:cd:6b:71:8d:fb:19:e8:e5:88:
                    eb:94:1a:3c:4f:8b:1c:a9:be:dd:a3:0c:39:ce:9c:
                    53:a5:21:28:31:7d:32:e5:45:f4:09:09:82:ea:6c:
                    b3:d8:aa:94:f8:a4:d6:f9:4f:44:88:21:ff:ff:a4:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5F:D1:24:58:09:DD:10:8F:D1:F5:DA:05:0D:3F:22:35:DB:5E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:86:96:dd:46:ed:df:6f:73:ff:39:8b:5d:d7:13:3e:c0:57:
         f6:05:e0:4b:97:38:01:3b:99:76:e8:1c:58:90:7d:0a:33:5d:
         b5:66:94:20:38:01:60:49:76:e7:fd:4b:c9:39:01:44:c9:3c:
         66:30:17:ff:ca:c2:36:8a:60:72:ed:ef:8f:b7:3d:1d:d8:d0:
         27:64:77:76:6b:5b:57:49:d9:86:54:30:98:44:5c:f5:a9:34:
         d9:bc:4f:df:9c:d8:12:2b:2c:38:fb:a6:9c:ff:2e:ee:bf:b1:
         11:44:74:6d:27:7c:00:da:88:5b:bc:98:e0:e1:9a:01:62:3b:
         0a:52:58:b3:23:4c:84:63:2d:f8:6b:54:a6:86:b5:7d:43:c7:
         82:17:f6:b4:54:4e:cd:9e:b9:11:a4:b3:b9:14:5d:f3:9f:98:
         c5:59:35:1a:29:22:fa:71:c5:83:c9:e3:ac:22:4f:3d:1e:f3:
         eb:ee:74:29:36:3c:d1:38:6e:e0:e5:0e:b2:e4:9d:1c:cd:05:
         d8:1b:4f:60:70:71:80:e0:a9:ee:aa:4a:13:0f:43:d8:d1:40:
         3b:d8:d1:27:66:2d:f2:ba:36:1e:3d:55:e2:fe:fb:d3:06:ed:
         37:c1:91:02:2a:2b:d5:43:40:3b:18:00:74:71:0b:57:4f:a9:
         cb:4a:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:19 2026 by rpki-client