Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/240a756d-15ef-3201-ba96-5058d98a422c.roa
File:                     240a756d-15ef-3201-ba96-5058d98a422c.roa (raw, json)
Hash identifier:          o0NnxZ8DvHr2+PCsLCnrZNUb7E9jENi/VcAjTdZlVwE=
Subject key identifier:   88:5A:C0:07:1D:45:1F:D7:E0:A9:CB:7A:6F:70:C3:48:E9:34:C6:5D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D2248ED8009796E4A3738
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/240a756d-15ef-3201-ba96-5058d98a422c.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     3360
IP address blocks:        130.174.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:22:48:ed:80:09:79:6e:4a:37:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=32132c17-5620-4287-99f7-63d2d41a3fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:f4:9c:e7:1f:4c:62:15:ab:1e:63:47:4e:
                    4d:ec:cd:11:9b:18:30:ac:b5:e6:3c:27:47:23:d8:
                    24:5a:8f:e4:6c:3e:5b:25:9d:a4:9d:1a:a6:4e:d4:
                    f3:a7:ff:d0:fc:4d:e2:8d:d6:31:94:bb:bb:ba:f5:
                    2e:4f:6b:e6:23:e6:36:9f:b0:9c:18:89:70:e3:0c:
                    1e:84:70:64:74:b5:8e:9f:97:74:fd:f4:e5:5d:3b:
                    e4:0b:d3:2b:7d:8f:8c:a0:13:a8:57:6f:2f:9e:a8:
                    9f:a5:71:d8:17:f5:97:be:93:b1:40:b0:52:29:33:
                    01:67:b2:6d:dc:b3:a5:a1:c8:8f:00:dd:d4:50:09:
                    fa:49:22:63:f6:24:00:5b:2c:a3:46:68:7c:79:a7:
                    0b:9b:bd:7c:10:d5:77:b1:1c:39:13:53:11:38:fc:
                    55:e1:86:34:06:9a:31:71:d5:3d:91:ba:8c:51:63:
                    54:ed:92:2a:ec:3b:29:63:9a:6d:8d:bd:9d:cf:8a:
                    66:87:e2:8e:3b:52:f8:26:22:7e:ae:f3:40:9e:31:
                    98:66:7b:df:12:87:53:ca:45:a1:54:7d:30:cc:87:
                    c6:80:15:2c:32:01:dd:23:92:1f:62:9e:8d:b8:38:
                    51:e7:99:a7:6f:c6:5b:cd:15:d9:79:d7:4d:a0:d0:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5A:C0:07:1D:45:1F:D7:E0:A9:CB:7A:6F:70:C3:48:E9:34:C6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/240a756d-15ef-3201-ba96-5058d98a422c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:06:cb:19:55:57:f0:a2:8d:5f:b7:05:68:34:7a:c5:23:5e:
         4c:64:53:75:41:0e:8e:ad:0d:2e:58:e4:00:1b:c1:0a:89:2e:
         5c:87:bf:a7:75:18:6d:96:5a:64:b2:53:5b:cc:07:1a:ee:51:
         10:2c:72:d8:ea:9b:c3:4b:2c:62:c5:15:e3:ec:af:c0:5b:1a:
         fa:00:39:44:a1:e3:16:60:1d:a1:44:c6:56:5a:0d:4c:47:b3:
         5d:93:e9:35:ad:6e:02:3b:b8:3a:75:0e:c0:7d:5e:4d:88:87:
         9a:5f:6b:3b:27:cc:5f:f5:35:52:0e:c0:18:de:d8:a2:c4:3c:
         5a:88:dd:98:48:db:3d:99:3d:d5:ff:25:cb:ed:de:76:d5:ed:
         0e:31:c4:a8:da:f6:d2:c9:ca:5a:b8:46:b1:f2:9a:2a:b3:d7:
         ac:e4:b8:77:61:7c:38:22:1e:26:17:a8:18:e2:fe:f2:9d:37:
         68:99:03:6d:13:77:15:9d:1f:95:72:90:64:32:e6:a3:91:69:
         be:bf:28:23:3a:0e:dd:eb:5b:79:19:a4:e6:d0:83:df:42:19:
         71:4c:20:69:9f:74:07:8d:8f:b5:16:fe:0c:6b:b9:7b:8c:fd:
         42:1f:07:d1:1f:c2:23:82:e5:89:94:89:ce:dc:0f:0e:ad:35:
         25:52:e9:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSJI7YAJeW5KNzgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
MzIxMzJjMTctNTYyMC00Mjg3LTk5ZjctNjNkMmQ0MWEzZmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8n0nOcfTGIVqx5jR05N7M0RmxgwrLXmPCdH
I9gkWo/kbD5bJZ2knRqmTtTzp//Q/E3ijdYxlLu7uvUuT2vmI+Y2n7CcGIlw4wwe
hHBkdLWOn5d0/fTlXTvkC9MrfY+MoBOoV28vnqifpXHYF/WXvpOxQLBSKTMBZ7Jt
3LOlociPAN3UUAn6SSJj9iQAWyyjRmh8eacLm718ENV3sRw5E1MROPxV4YY0Bpox
cdU9kbqMUWNU7ZIq7DspY5ptjb2dz4pmh+KOO1L4JiJ+rvNAnjGYZnvfEodTykWh
VH0wzIfGgBUsMgHdI5IfYp6NuDhR55mnb8ZbzRXZeddNoNAmZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhawAcdRR/X4KnLem9ww0jpNMZdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQwYTc1NmQtMTVlZi0z
MjAxLWJhOTYtNTA1OGQ5OGE0MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQGyxlVV/CijV+3BWg0esUjXkxkU3VBDo6tDS5Y5AAbwQqJLlyHv6d1
GG2WWmSyU1vMBxruURAsctjqm8NLLGLFFePsr8BbGvoAOUSh4xZgHaFExlZaDUxH
s12T6TWtbgI7uDp1DsB9Xk2Ih5pfazsnzF/1NVIOwBje2KLEPFqI3ZhI2z2ZPdX/
Jcvt3nbV7Q4xxKja9tLJylq4RrHymiqz16zkuHdhfDgiHiYXqBji/vKdN2iZA20T
dxWdH5VykGQy5qORab6/KCM6Dt3rW3kZpObQg99CGXFMIGmfdAeNj7UW/gxruXuM
/UIfB9EfwiOC5YmUic7cDw6tNSVS6Rk=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:43:36 2025 by rpki-client