Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1476cb4a-18f9-37f8-a97c-88bbe87047b9.roa
File:                     1476cb4a-18f9-37f8-a97c-88bbe87047b9.roa (raw, json)
Hash identifier:          d/+sq1IbjuJN7UEnPQS5IkBjohrKX24r4xf4/x3yYzE=
Subject key identifier:   2D:DB:96:9D:5F:97:42:89:BD:58:1A:3D:0C:C6:FF:39:69:D3:5D:D9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7B5EF1C45D06F6E6836D2
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1476cb4a-18f9-37f8-a97c-88bbe87047b9.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     203
IP address blocks:        130.174.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b5:ef:1c:45:d0:6f:6e:68:36:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=b7097ed0-2e14-4238-a4e1-4825fd66fa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:ee:70:d6:a2:58:f3:0a:8f:c7:28:f6:54:
                    7d:c5:a3:e6:a9:a2:20:2c:ef:5c:2b:8e:ee:7d:6f:
                    dc:d2:f6:f9:32:65:3b:fb:55:ee:22:5d:03:7b:84:
                    25:31:f1:4c:70:c0:97:26:d0:43:fb:01:16:b9:f0:
                    8a:54:f5:7c:5f:d2:5e:c0:37:49:4c:0f:61:54:a2:
                    d7:37:21:78:a2:cf:a9:b5:1d:24:ef:a1:71:4e:f0:
                    92:24:fe:3f:1b:ae:55:d8:57:6f:f4:35:dd:31:88:
                    3c:01:b0:00:40:eb:15:1f:f5:71:02:35:d4:85:2b:
                    e1:7c:cd:a3:02:48:93:4b:e9:b3:13:fc:1e:a9:f6:
                    04:71:d2:8f:6b:40:b4:14:46:42:49:bf:88:e3:1d:
                    04:b8:70:82:90:de:84:62:d6:85:0d:61:7e:15:43:
                    30:35:2f:5e:58:c4:67:ce:86:ed:21:91:56:f9:3c:
                    27:7b:94:b7:67:62:3a:95:c2:27:a1:44:6c:13:33:
                    e5:17:5e:d8:d6:f6:c1:c4:c2:5e:7a:83:5b:f0:c1:
                    6f:4a:67:aa:9a:65:a6:45:a8:35:4e:fc:60:1a:a4:
                    08:11:51:00:a8:0f:bc:5c:d9:73:02:f5:44:be:f0:
                    ff:03:26:e0:4c:44:4e:e1:dd:90:9b:c9:0d:cf:e2:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:96:9D:5F:97:42:89:BD:58:1A:3D:0C:C6:FF:39:69:D3:5D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1476cb4a-18f9-37f8-a97c-88bbe87047b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e7:33:de:43:87:57:ed:3d:f5:85:5b:e7:93:1d:b4:ca:50:
         0f:5d:4e:3b:3d:88:cc:47:a6:83:41:04:57:e4:7c:cf:a1:78:
         ee:a0:b0:c1:4b:7d:1b:f8:c0:4c:ad:4d:81:ae:4d:72:da:45:
         ae:eb:c0:05:43:3f:74:e6:19:b3:0a:6a:a3:db:bc:b8:76:f9:
         79:c8:94:6b:9b:c7:37:7c:7a:86:0d:e9:59:5a:0b:c4:00:72:
         00:4c:b0:4c:4a:64:2e:2c:0d:38:17:3b:66:45:16:e6:37:a3:
         2a:9d:bb:b4:dd:80:0b:fa:c8:7f:7e:c3:b5:4c:88:5a:01:16:
         c3:45:1c:be:1e:01:6e:6f:47:e7:61:9e:cc:9b:b3:91:41:10:
         99:fe:35:3b:b5:3e:78:cf:91:b5:2a:06:87:bf:f4:59:4a:43:
         59:8d:f1:be:f4:73:51:9a:e4:06:a0:86:e6:ff:2f:df:10:89:
         68:34:97:a1:87:44:2f:2e:29:25:0e:31:09:12:4f:a7:7c:89:
         75:72:b6:47:f4:d9:12:a2:9e:b4:24:bc:54:72:e1:f6:45:db:
         2a:24:9a:cb:20:50:a5:97:b1:33:f8:83:73:b0:8a:c3:bf:48:
         fc:05:1b:b5:39:c0:0d:ed:f6:9d:10:73:b7:94:20:32:c3:97:
         19:4d:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:17:17 2025 by rpki-client