Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e0ac1b7-1898-3bf5-9987-3a9a1cfcd455.roa
File:                     3e0ac1b7-1898-3bf5-9987-3a9a1cfcd455.roa (raw, json)
Hash identifier:          X8GpzWCOpe07rWX7Zv0iHvnV56FApNiXsjXH+9slD2E=
Subject key identifier:   11:B0:7F:88:66:34:1E:22:75:92:06:4D:0A:63:C0:F9:F0:3B:45:1E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF71772E71EDEB36709081780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e0ac1b7-1898-3bf5-9987-3a9a1cfcd455.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3360
IP address blocks:        130.174.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:72:e7:1e:de:b3:67:09:08:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=1bca4421-2806-42d5-b808-f9f05bd31580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:19:61:ef:bf:2f:9b:85:b4:dd:44:2b:86:
                    95:da:aa:9e:e3:ed:4b:0a:ad:f1:eb:4c:2b:e4:07:
                    30:83:c1:60:c9:fe:aa:6d:23:72:b5:d6:8b:94:74:
                    3f:f6:2b:9f:05:97:96:f2:5f:5d:fe:5a:a6:a6:c1:
                    9a:94:b9:06:42:b7:45:be:e1:0f:04:79:1c:b8:d8:
                    c5:ee:a2:76:d7:0e:c6:ea:1f:1e:15:f5:29:8f:da:
                    a1:44:49:96:8f:b5:f9:26:5c:ec:a4:76:9a:75:96:
                    32:b9:9f:da:f7:38:a0:4d:c9:9f:a1:1e:ea:d7:0d:
                    6c:b5:f9:e9:0c:6b:d2:2f:7e:73:9e:65:17:df:55:
                    07:20:16:68:ac:35:86:b0:a9:07:de:e4:3e:d4:f1:
                    98:e1:a8:b1:5f:33:b2:f5:22:2a:0c:b6:bf:3a:54:
                    ab:92:4b:d0:af:24:3a:d9:9b:3e:2f:f2:4d:55:a2:
                    4d:08:5f:21:b0:0c:82:7e:63:20:19:79:cb:7b:fa:
                    f4:70:84:be:bb:26:0c:9a:a0:b3:55:16:6b:67:a4:
                    ed:2a:bc:21:cb:d3:d5:8a:47:9c:1d:32:b3:96:bc:
                    85:ec:20:6c:5b:a0:bd:89:3c:8b:9b:d7:0e:19:50:
                    5c:3e:f8:2e:27:0e:d3:a9:42:e8:51:2f:b4:95:b2:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B0:7F:88:66:34:1E:22:75:92:06:4D:0A:63:C0:F9:F0:3B:45:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e0ac1b7-1898-3bf5-9987-3a9a1cfcd455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:36:7a:fd:db:82:f1:40:b0:d8:c7:fe:57:9b:e3:be:47:86:
         c7:9f:a5:01:a0:06:ea:6c:7e:86:42:35:b7:04:f7:88:1b:10:
         89:f4:74:eb:45:46:34:06:89:75:a2:ba:8b:20:3b:1e:dc:4c:
         26:8c:42:07:e9:f5:46:54:7c:ea:72:cb:67:cc:0c:b4:2e:ff:
         73:cf:a6:b4:08:95:a8:33:6c:f8:d4:dc:25:3a:4e:1b:e2:56:
         f9:33:36:f3:82:49:21:3e:ec:8c:c4:34:d9:a6:03:97:9d:ed:
         39:e3:a9:3c:0a:60:85:34:8a:a9:3a:05:df:ed:d2:ec:aa:56:
         2a:a0:21:3e:f7:84:37:1a:75:ea:83:88:bd:37:8e:64:f6:46:
         ee:45:a0:30:2e:15:6d:ac:80:17:ff:aa:ac:f0:b7:6b:4c:7c:
         01:df:e5:58:b8:f5:28:f1:8a:f0:52:d0:8b:b1:3e:8d:e3:b4:
         4f:65:cd:3e:1d:1d:98:37:c6:9a:b7:78:b2:1a:3a:f5:bb:d3:
         48:d9:f0:cf:16:ec:5a:62:d4:50:1f:de:ca:06:39:6c:79:02:
         d8:a0:86:58:fe:49:22:88:88:7c:05:c9:8d:fa:91:38:79:0f:
         a0:13:2c:d0:8f:37:73:83:28:ee:1d:b1:09:74:fd:ef:5d:f2:
         5a:1f:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:51:28 2026 by rpki-client