Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52c1eb93-0d0c-3b2b-a0bb-fc19c70e2afd.roa
File:                     52c1eb93-0d0c-3b2b-a0bb-fc19c70e2afd.roa (raw, json)
Hash identifier:          o5lLEDZEax35Y5t9rfAzqAHT1/qo9EVLgerxYt8eaLU=
Subject key identifier:   93:4D:CB:FF:8B:88:11:4B:51:FB:94:CE:C1:20:BA:11:D7:DA:DF:4F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D531E4E77BE3733A0ABD80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52c1eb93-0d0c-3b2b-a0bb-fc19c70e2afd.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     203
IP address blocks:        130.174.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:31:e4:e7:7b:e3:73:3a:0a:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=d186b997-8720-4467-a3c8-5d9854bf1a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:a3:52:15:3e:36:80:14:4e:83:bd:72:ed:
                    c3:c4:bc:fc:aa:09:54:e1:1c:d7:9a:d8:36:c1:e4:
                    3d:12:04:a0:88:90:64:20:d7:58:76:c8:c1:66:d4:
                    bc:20:fc:76:e2:5f:ed:98:c3:09:78:9b:fd:81:f9:
                    88:7b:9b:01:9f:73:f0:d8:84:35:05:ef:3c:44:8b:
                    30:24:41:c5:67:e3:05:45:ee:65:80:e3:8b:58:76:
                    bd:24:17:5a:6d:da:43:dc:3d:db:2a:d6:0a:2e:46:
                    f4:78:44:c7:04:35:40:13:46:41:1d:8a:e1:c3:13:
                    5d:34:ed:a9:72:cb:78:18:60:d0:99:db:b6:d6:ab:
                    64:0c:98:cf:4e:19:61:51:52:91:7d:34:4e:70:2f:
                    23:27:21:01:48:04:9d:fe:ba:a9:e1:a8:03:ee:d2:
                    4f:09:50:95:b6:dd:1f:4a:7c:24:1a:5a:69:27:bb:
                    2d:72:8b:bd:b8:fd:dd:72:d9:7e:fb:cf:32:97:87:
                    b3:5f:89:da:a7:2d:3b:65:92:eb:9d:00:14:8e:f2:
                    32:bd:5a:35:fb:d1:64:8e:3a:39:b5:41:a6:63:63:
                    14:42:f2:08:8f:94:e5:f2:73:a8:8a:97:c1:70:36:
                    ee:4d:04:1b:bd:08:5d:b0:f1:fb:1f:4f:fb:a3:c2:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4D:CB:FF:8B:88:11:4B:51:FB:94:CE:C1:20:BA:11:D7:DA:DF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52c1eb93-0d0c-3b2b-a0bb-fc19c70e2afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:22:fd:f3:84:60:84:e0:38:59:0c:25:5d:19:7c:db:60:
         16:9b:62:89:22:6b:c2:61:6a:07:5e:49:32:27:6e:d1:07:84:
         e0:94:c1:9c:74:ab:6f:cc:1c:2d:23:99:e3:a4:e5:ca:17:24:
         80:02:c3:fb:8f:28:be:21:d2:aa:06:6d:e3:0d:c4:7c:a1:23:
         36:a7:70:69:5f:30:b8:0c:bb:18:67:aa:75:c2:f4:ee:d5:0d:
         3d:64:b9:c3:67:42:f3:03:ff:d7:8f:e0:85:7f:44:5b:0c:b8:
         9a:7a:87:f5:39:53:1b:1e:52:da:c0:c7:23:5f:24:75:8b:7e:
         13:12:65:1b:48:4e:54:e9:33:05:69:64:fd:df:3b:4d:01:16:
         8e:07:e0:e9:4f:a3:f3:14:e7:77:24:19:df:30:b4:43:c0:e8:
         60:f7:dd:e7:e4:ee:08:f2:62:28:fc:47:21:7b:3e:2d:0d:66:
         ff:bd:c5:8d:21:9e:a3:4c:5d:e3:67:85:a7:81:0c:b4:4c:f5:
         f0:86:f2:cd:7e:94:31:4b:1d:98:6d:87:00:ad:44:2f:b8:19:
         67:c9:ae:e5:54:0f:2d:7e:61:ff:2f:f6:7b:9a:ec:59:27:b6:
         83:d5:7a:61:48:fd:4c:71:33:5e:a1:71:ea:f2:eb:b1:e3:a9:
         f5:05:0c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:41 2026 by rpki-client