Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b1ddedf-1c7f-375e-be65-a1293f29f2df.roa
File:                     4b1ddedf-1c7f-375e-be65-a1293f29f2df.roa (raw, json)
Hash identifier:          8T3wGhqvqbQkScCECiWKH19L6BCflkLPKdXuE1URhsM=
Subject key identifier:   6A:C7:58:DA:07:9B:8E:3A:AE:80:EC:A8:1D:38:9F:F9:42:14:C1:13
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CC77AB81C74C6FCD67B20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b1ddedf-1c7f-375e-be65-a1293f29f2df.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     3360
IP address blocks:        130.174.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:c7:7a:b8:1c:74:c6:fc:d6:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=2cf4852c-6a8e-47d3-be0c-1ec83c95a37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e1:63:c7:d0:66:d1:6d:eb:f0:a2:05:14:db:
                    65:c9:50:86:c3:48:1a:21:7d:c9:50:3e:00:95:c9:
                    88:a9:22:97:3d:6e:40:75:a0:eb:f7:23:f9:84:5d:
                    e1:5d:5c:c3:b3:b7:cc:25:71:38:a9:5b:f6:b0:0e:
                    b3:9d:b9:06:0d:c7:3c:c4:3c:f9:0f:e2:8f:8c:87:
                    5d:fe:7f:6d:bf:36:47:94:3d:a3:66:a1:1b:93:5d:
                    df:19:0b:2c:fc:b2:59:13:a8:e2:95:f2:59:ea:0e:
                    7b:04:7a:98:92:a9:3c:1d:d0:d6:ee:39:1f:40:29:
                    1e:e2:b3:e1:b7:19:00:63:76:12:f3:d4:f3:69:ae:
                    82:34:68:e4:ce:8a:41:53:37:a3:02:70:78:ff:63:
                    99:9c:17:f8:97:d7:67:02:95:ee:45:38:3a:6e:37:
                    fb:ce:7b:10:7d:51:87:62:ba:7a:fc:16:75:a8:e5:
                    ef:5f:ce:54:7c:5a:8d:ba:6c:aa:d2:d3:44:c9:b5:
                    d2:4b:62:fd:c3:4e:3d:11:44:f9:38:08:01:56:7f:
                    55:78:9e:f5:3f:ea:00:a9:02:15:ee:1a:0b:e3:76:
                    d0:0f:37:23:ef:79:1a:09:de:32:63:aa:46:3a:9f:
                    06:33:c2:e9:a3:04:f6:19:32:ba:69:4f:07:e5:f3:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C7:58:DA:07:9B:8E:3A:AE:80:EC:A8:1D:38:9F:F9:42:14:C1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b1ddedf-1c7f-375e-be65-a1293f29f2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2a:db:3b:fb:0f:b1:e9:04:a7:e6:98:eb:0e:b7:c0:6a:47:
         6b:bb:df:4c:83:6b:13:e6:bf:73:d7:36:f8:f5:b0:bf:c3:39:
         a6:db:73:f5:fe:0b:4c:00:1e:16:dc:a3:7f:41:fe:ce:e9:5e:
         75:a3:51:6d:e4:a4:cd:85:8f:1a:9d:ec:c2:f4:29:a2:7c:c3:
         92:0f:d5:37:74:df:72:d3:00:83:65:2b:aa:7f:75:c1:24:4a:
         e5:57:1d:57:be:5d:a0:3e:6b:0e:ac:81:c0:86:d2:70:48:e2:
         6c:be:88:d5:34:7b:ef:4a:cf:a9:9e:38:aa:9a:34:bf:37:f7:
         98:a7:4c:35:f8:5a:ee:02:26:e8:cd:7f:f0:4a:ed:26:82:be:
         bd:4e:c8:60:55:30:83:fc:39:60:b8:5c:6f:bb:a3:ff:b1:b8:
         28:8d:a6:ba:ab:07:19:2b:c4:3d:40:e8:bd:1b:b1:12:24:55:
         7b:e1:31:a9:a8:78:a4:78:9f:69:e7:6c:fe:7e:11:6b:4e:fa:
         77:21:93:71:50:0d:77:b4:08:c1:d7:6e:de:5e:7b:d0:13:49:
         0e:42:b4:c7:91:de:4c:4e:4f:ee:ae:6e:69:0a:33:dc:fa:ef:
         45:b9:b3:3e:a6:2f:aa:b5:e7:58:32:69:0f:52:40:e4:68:43:
         02:27:1e:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMd6uBx0xvzWeyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
MmNmNDg1MmMtNmE4ZS00N2QzLWJlMGMtMWVjODNjOTVhMzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheFjx9Bm0W3r8KIFFNtlyVCGw0gaIX3JUD4A
lcmIqSKXPW5AdaDr9yP5hF3hXVzDs7fMJXE4qVv2sA6znbkGDcc8xDz5D+KPjIdd
/n9tvzZHlD2jZqEbk13fGQss/LJZE6jilfJZ6g57BHqYkqk8HdDW7jkfQCke4rPh
txkAY3YS89Tzaa6CNGjkzopBUzejAnB4/2OZnBf4l9dnApXuRTg6bjf7znsQfVGH
Yrp6/BZ1qOXvX85UfFqNumyq0tNEybXSS2L9w049EUT5OAgBVn9VeJ71P+oAqQIV
7hoL43bQDzcj73kaCd4yY6pGOp8GM8LpowT2GTK6aU8H5fN6LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrHWNoHm446roDsqB04n/lCFMETMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGIxZGRlZGYtMWM3Zi0z
NzVlLWJlNjUtYTEyOTNmMjlmMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcq2zv7D7HpBKfmmOsOt8BqR2u730yDaxPmv3PXNvj1sL/DOabbc/X+
C0wAHhbco39B/s7pXnWjUW3kpM2Fjxqd7ML0KaJ8w5IP1Td033LTAINlK6p/dcEk
SuVXHVe+XaA+aw6sgcCG0nBI4my+iNU0e+9Kz6meOKqaNL8395inTDX4Wu4CJujN
f/BK7SaCvr1OyGBVMIP8OWC4XG+7o/+xuCiNprqrBxkrxD1A6L0bsRIkVXvhMamo
eKR4n2nnbP5+EWtO+nchk3FQDXe0CMHXbt5ee9ATSQ5CtMeR3kxOT+6ubmkKM9z6
70W5sz6mL6q151gyaQ9SQORoQwInHpw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:03:01 2026 by rpki-client