Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36083307-0c70-3c8e-91d7-1c172780490b.roa
File:                     36083307-0c70-3c8e-91d7-1c172780490b.roa (raw, json)
Hash identifier:          Le0D0JH2KCHX9V8vIW3mU+2gFRQwve/WXbRM+fMnzGI=
Subject key identifier:   E4:BB:C6:29:8A:16:73:84:E5:77:9A:42:83:2D:CD:8F:90:DC:E9:9C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D1FE7A7CB8541F65C3D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36083307-0c70-3c8e-91d7-1c172780490b.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     3360
IP address blocks:        130.174.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:1f:e7:a7:cb:85:41:f6:5c:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=5562e734-5d22-48b3-a621-f655539c36e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:7f:07:c2:98:2a:8d:b0:72:5d:44:08:38:
                    22:ba:ba:b1:ad:e2:60:fd:ed:7c:58:94:fa:bf:7a:
                    af:7e:b8:94:ca:13:41:24:0c:cb:5c:e5:e4:e3:ce:
                    20:52:d1:53:e9:14:49:33:eb:64:e0:2e:fa:b4:5b:
                    1a:15:92:fe:aa:c6:ca:d5:f0:fb:37:b8:1e:4a:ec:
                    b9:c3:21:cd:1d:3d:bd:71:32:c7:c6:2e:53:bd:ed:
                    d0:7d:11:aa:81:c2:a5:d6:11:a0:eb:76:a9:41:69:
                    d1:4b:6f:05:8c:84:bb:d6:ec:f0:00:59:cb:9d:32:
                    3b:28:e0:ca:7d:fb:9f:67:70:e3:39:63:56:af:63:
                    a2:16:f8:c4:b9:b0:54:1d:94:da:33:bd:61:93:2a:
                    40:0b:72:18:f6:8e:ff:c9:0a:31:2e:11:a7:03:b0:
                    3c:6e:95:db:25:e0:f7:26:f5:d6:4e:bf:4e:e4:08:
                    14:17:af:97:1c:26:9d:00:19:7c:30:b4:ce:6e:ec:
                    8a:36:ed:8a:75:16:f9:a5:86:8c:31:ab:bd:f1:f4:
                    13:ac:a8:83:82:73:7f:b4:1a:89:71:a5:f7:66:97:
                    ce:b5:79:90:dc:4f:f2:67:fc:a6:47:4e:fd:84:30:
                    04:27:bf:5e:bc:fb:df:23:90:80:21:ef:87:b9:8b:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BB:C6:29:8A:16:73:84:E5:77:9A:42:83:2D:CD:8F:90:DC:E9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36083307-0c70-3c8e-91d7-1c172780490b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:10:1f:62:02:56:7c:61:ff:b0:20:1d:6a:84:f7:f1:63:29:
         f3:d7:93:34:cc:e7:c9:44:6f:59:43:91:7a:39:e9:c9:f5:17:
         b2:97:30:07:4b:ff:6a:b9:cd:10:c3:5e:98:11:e2:1f:09:55:
         29:16:58:ee:e9:6c:18:28:dc:18:db:52:a1:8f:30:4e:b4:9c:
         3f:57:84:c4:3f:05:33:7a:d5:49:a5:3a:ac:23:c2:aa:7c:d1:
         56:81:be:fe:27:ea:8c:f7:95:fd:16:33:7d:d6:3e:6d:e6:f4:
         09:1a:41:b5:3a:a8:2a:bb:a4:40:25:1f:49:28:9a:6b:e4:f9:
         ca:72:25:20:cf:b3:3f:5f:a0:28:62:13:5a:b8:49:ff:6f:95:
         59:f9:a4:ed:a9:81:07:eb:a5:b9:9b:30:fb:52:d3:25:22:66:
         3c:ba:ba:bb:35:4a:07:e7:21:31:8a:ab:b1:75:e1:7b:f7:c2:
         50:0e:39:f9:37:42:f4:6e:44:d4:57:02:24:aa:0f:ae:af:67:
         fa:2b:d9:bd:21:35:a8:f7:34:d1:54:c7:aa:f0:9e:50:ad:89:
         49:08:c7:2b:2c:1d:dc:76:2c:2d:b6:23:0a:d1:2e:ec:c2:cb:
         24:79:82:8e:98:8a:80:c3:70:3a:04:0f:47:e1:f9:ee:9d:2c:
         7c:23:c4:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XR/np8uFQfZcPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
NTU2MmU3MzQtNWQyMi00OGIzLWE2MjEtZjY1NTUzOWMzNmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDp/B8KYKo2wcl1ECDgiurqxreJg/e18WJT6
v3qvfriUyhNBJAzLXOXk484gUtFT6RRJM+tk4C76tFsaFZL+qsbK1fD7N7geSuy5
wyHNHT29cTLHxi5Tve3QfRGqgcKl1hGg63apQWnRS28FjIS71uzwAFnLnTI7KODK
ffufZ3DjOWNWr2OiFvjEubBUHZTaM71hkypAC3IY9o7/yQoxLhGnA7A8bpXbJeD3
JvXWTr9O5AgUF6+XHCadABl8MLTObuyKNu2KdRb5pYaMMau98fQTrKiDgnN/tBqJ
caX3ZpfOtXmQ3E/yZ/ymR079hDAEJ79evPvfI5CAIe+HuYsL6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOS7ximKFnOE5XeaQoMtzY+Q3OmcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzYwODMzMDctMGM3MC0z
YzhlLTkxZDctMWMxNzI3ODA0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQQH2ICVnxh/7AgHWqE9/FjKfPXkzTM58lEb1lDkXo56cn1F7KXMAdL
/2q5zRDDXpgR4h8JVSkWWO7pbBgo3BjbUqGPME60nD9XhMQ/BTN61UmlOqwjwqp8
0VaBvv4n6oz3lf0WM33WPm3m9AkaQbU6qCq7pEAlH0kommvk+cpyJSDPsz9foChi
E1q4Sf9vlVn5pO2pgQfrpbmbMPtS0yUiZjy6urs1SgfnITGKq7F14Xv3wlAOOfk3
QvRuRNRXAiSqD66vZ/or2b0hNaj3NNFUx6rwnlCtiUkIxyssHdx2LC22IwrRLuzC
yyR5go6YioDDcDoED0fh+e6dLHwjxDM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:27 2025 by rpki-client