Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178dbdc5-30a6-3d30-b6b5-01970e7cd319.roa
File:                     178dbdc5-30a6-3d30-b6b5-01970e7cd319.roa (raw, json)
Hash identifier:          ctf7Iry6z7pgRMSzu4wJ4ONFpz0kMwPqoBvfoow8CCg=
Subject key identifier:   A2:B0:D3:66:C6:F4:C3:0F:E1:4B:1C:A7:98:2F:F2:F5:C4:99:32:57
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D1D0F99A02ED4D7587000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178dbdc5-30a6-3d30-b6b5-01970e7cd319.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     203
IP address blocks:        130.174.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:1d:0f:99:a0:2e:d4:d7:58:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=567dc5a7-602f-445d-91f3-e4b7bfb89367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:fb:ff:e8:f5:47:de:68:d8:b6:2a:87:c9:
                    b3:57:9d:e2:db:0d:21:eb:a0:91:bd:9d:01:f4:ad:
                    a3:15:66:1c:d9:c8:36:15:c9:40:bd:40:d3:dc:1c:
                    9e:85:70:71:23:67:77:2b:f5:25:78:59:87:58:fa:
                    69:00:cb:cd:24:26:70:cb:3a:cc:6e:1a:ec:3a:31:
                    dc:1d:57:0d:75:2c:4d:aa:fe:9b:f0:de:d0:3f:e2:
                    82:6a:9d:94:a0:0b:e7:51:92:1d:4b:b3:87:69:c3:
                    25:a7:e4:d3:68:32:66:4e:3d:36:27:27:98:ea:cc:
                    e2:64:8c:bc:30:69:1b:c6:12:3e:47:d1:68:c9:98:
                    7b:5e:00:99:37:17:27:b9:4d:45:6c:0f:8a:e9:52:
                    f7:22:bd:cd:7e:98:ab:a7:c8:55:9a:ad:2e:76:34:
                    c6:26:ce:74:03:11:e1:9f:67:6a:17:e2:47:8f:4b:
                    0a:ea:26:77:9d:d9:e1:27:17:4b:b0:c5:7c:f5:f1:
                    1c:ab:73:37:e2:6f:0a:5d:ad:e4:a0:fa:3f:5f:1d:
                    82:19:72:63:f2:83:e2:83:73:de:1c:df:9e:79:c8:
                    2f:63:95:6b:b2:5f:66:b5:c6:9c:37:74:56:60:d1:
                    b2:42:02:a0:61:ba:5b:2a:a3:b8:82:e8:f4:99:fe:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B0:D3:66:C6:F4:C3:0F:E1:4B:1C:A7:98:2F:F2:F5:C4:99:32:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178dbdc5-30a6-3d30-b6b5-01970e7cd319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c2:c2:8d:bf:fc:23:18:83:19:74:ba:75:05:69:4c:71:b6:
         1a:f2:5f:f8:2a:ce:44:64:a6:7b:af:80:74:3e:f2:8c:1d:d2:
         d1:e0:0c:29:ea:e4:8e:25:a1:d9:a8:50:b1:f0:89:6e:60:2a:
         7c:2c:26:e2:3a:d2:e5:87:e7:4f:1f:e0:5b:8f:9e:94:a9:5f:
         60:eb:a9:79:2f:1f:82:6e:54:0e:a8:52:35:7e:67:ef:08:37:
         8b:c7:3f:18:57:1c:6f:f0:f7:6a:94:1a:55:c4:ea:e9:de:3c:
         ab:d0:32:24:a8:cd:c0:8a:d0:6c:55:ca:ae:d8:60:94:22:76:
         e5:f6:c7:d2:5b:9f:0e:bb:f8:5b:e2:7d:d5:6c:18:bd:97:fd:
         21:34:bd:b3:f1:0e:c9:a3:db:a2:e9:d1:d9:de:49:6e:97:4a:
         6a:13:a8:78:32:4d:62:12:7c:95:a3:8c:3c:15:9f:31:9d:ef:
         e0:29:96:d9:ee:86:19:91:3e:fa:2d:61:75:e7:47:46:97:02:
         db:af:ee:d1:8a:fd:18:32:ab:f1:31:9a:8d:26:c9:e7:70:ba:
         75:30:97:90:b1:aa:9a:a6:b1:4b:85:38:ec:f8:72:8d:38:76:
         7c:99:55:9b:62:d2:2c:e4:89:7a:91:4e:13:f7:b3:b1:f5:0f:
         d1:fc:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:49:56 2025 by rpki-client