Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2390d1fa-6ca6-307f-ab85-2ef7ca72c4b0.roa
File:                     2390d1fa-6ca6-307f-ab85-2ef7ca72c4b0.roa (raw, json)
Hash identifier:          h5g02pE6d+xQXXU0SB4CJsVpFvFWJ1iyF1vnXmTTVJQ=
Subject key identifier:   FD:3B:1F:EB:F0:A4:25:B2:24:59:14:BD:E8:D9:8E:9B:2B:82:2B:4E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D1E59BD6273CCD52B4280
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2390d1fa-6ca6-307f-ab85-2ef7ca72c4b0.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     203
IP address blocks:        130.174.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:1e:59:bd:62:73:cc:d5:2b:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=af8eaf7d-3436-4247-8135-eeaf6e2e993f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:c7:b9:78:63:a9:0b:37:68:41:35:2d:37:
                    2b:4d:02:89:84:08:91:e0:a1:da:a2:81:2d:eb:58:
                    c0:1d:be:cd:3e:ca:98:3d:27:02:6c:37:df:5a:01:
                    c9:7e:6a:f7:16:3f:5a:25:99:eb:18:05:f2:a4:99:
                    44:6b:74:cb:38:3e:c8:b9:50:12:d1:d0:a2:7e:5d:
                    3f:14:00:1b:2e:93:c5:7a:4a:a4:ea:8e:87:27:44:
                    a9:8f:a1:f8:77:cd:16:68:b5:ba:a1:52:5a:22:6a:
                    74:d5:1b:ec:d9:a9:59:c5:69:cc:24:2d:38:87:df:
                    e1:49:3b:51:cf:1f:a4:02:f7:92:6a:ab:0c:37:0f:
                    ee:ad:1a:3e:26:57:a5:22:a8:6d:8b:d6:62:ad:f5:
                    a3:7c:21:f1:9f:1f:38:4a:1b:6d:b6:78:a5:ff:e1:
                    fa:2f:14:bc:44:e2:04:bf:7a:80:da:7c:86:dd:03:
                    49:d0:bb:8f:10:cf:25:ec:a9:90:63:99:59:1c:3a:
                    ed:d5:02:dd:e3:f7:9e:6e:64:6f:ec:01:16:22:a1:
                    a6:63:4d:8b:b9:36:d3:de:9b:80:6b:14:5d:f2:85:
                    25:c5:e2:f8:c6:55:a6:e9:21:ad:0e:a0:3d:2c:17:
                    95:46:26:4b:17:c7:94:fa:29:44:d5:d9:49:76:f0:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3B:1F:EB:F0:A4:25:B2:24:59:14:BD:E8:D9:8E:9B:2B:82:2B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2390d1fa-6ca6-307f-ab85-2ef7ca72c4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:49:e7:a4:68:03:14:6d:21:e8:b5:da:94:95:b3:cc:f3:
         01:ce:d6:7a:8c:e4:16:4a:ea:f6:03:75:a4:73:87:94:b1:1c:
         9d:ce:90:23:25:4d:0e:c8:70:e6:c9:e5:ec:ea:b8:b7:50:8e:
         d1:d4:e4:79:92:42:36:73:83:7e:c0:5c:1b:21:1c:16:52:26:
         2a:49:06:4e:1d:e7:f5:3d:82:55:ab:a1:84:39:07:12:df:91:
         73:ae:f7:67:14:8b:2c:40:33:68:69:2f:fb:d7:f3:aa:21:b0:
         1b:57:13:55:be:f5:d6:aa:1f:19:a7:58:36:05:bd:d5:00:56:
         e9:51:47:6a:cd:5a:1a:1e:82:03:d0:9d:13:63:7f:99:7e:42:
         cc:82:2b:86:29:da:a9:fa:ef:c2:af:25:53:9a:76:5f:6e:88:
         1a:87:f2:3c:2b:ce:27:04:c7:ed:e0:d0:10:73:1d:4c:0f:c3:
         d3:a0:67:09:b7:40:be:18:34:ef:07:52:a3:e6:0a:92:64:13:
         f7:82:de:e8:3a:50:4d:4f:bf:6b:e5:c7:92:0c:98:35:06:6c:
         86:51:8a:51:ab:f4:42:84:b7:25:3d:f6:55:b9:9f:30:3d:0c:
         ce:0e:90:e2:3e:16:5a:98:39:1c:06:33:a1:0f:46:2b:82:77:
         91:e9:70:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XR5ZvWJzzNUrQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
YWY4ZWFmN2QtMzQzNi00MjQ3LTgxMzUtZWVhZjZlMmU5OTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMLHuXhjqQs3aEE1LTcrTQKJhAiR4KHaooEt
61jAHb7NPsqYPScCbDffWgHJfmr3Fj9aJZnrGAXypJlEa3TLOD7IuVAS0dCifl0/
FAAbLpPFekqk6o6HJ0Spj6H4d80WaLW6oVJaImp01Rvs2alZxWnMJC04h9/hSTtR
zx+kAveSaqsMNw/urRo+JlelIqhti9ZirfWjfCHxnx84Shtttnil/+H6LxS8ROIE
v3qA2nyG3QNJ0LuPEM8l7KmQY5lZHDrt1QLd4/eebmRv7AEWIqGmY02LuTbT3puA
axRd8oUlxeL4xlWm6SGtDqA9LBeVRiZLF8eU+ilE1dlJdvBCBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP07H+vwpCWyJFkUvejZjpsrgitOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjM5MGQxZmEtNmNhNi0z
MDdmLWFiODUtMmVmN2NhNzJjNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5JSeekaAMUbSHotdqUlbPM8wHO1nqM5BZK6vYDdaRzh5SxHJ3OkCMl
TQ7IcObJ5ezquLdQjtHU5HmSQjZzg37AXBshHBZSJipJBk4d5/U9glWroYQ5BxLf
kXOu92cUiyxAM2hpL/vX86ohsBtXE1W+9daqHxmnWDYFvdUAVulRR2rNWhoeggPQ
nRNjf5l+QsyCK4Yp2qn678KvJVOadl9uiBqH8jwrzicEx+3g0BBzHUwPw9OgZwm3
QL4YNO8HUqPmCpJkE/eC3ug6UE1Pv2vlx5IMmDUGbIZRilGr9EKEtyU99lW5nzA9
DM4OkOI+FlqYORwGM6EPRiuCd5HpcPQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:45:41 2025 by rpki-client