Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5671b96e-0aca-32e0-84ac-30d2639538f9.roa
File:                     5671b96e-0aca-32e0-84ac-30d2639538f9.roa (raw, json)
Hash identifier:          vS3OOi8HAPKrHRog4SWRLE3sl+45YY5HdbD42wzBP4U=
Subject key identifier:   91:4C:FD:0A:D4:87:AF:D5:CD:EB:51:5F:75:01:6F:F3:9E:BE:4C:4F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7B88ECCA0576BDCF663C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5671b96e-0aca-32e0-84ac-30d2639538f9.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     3356
IP address blocks:        130.174.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b8:8e:cc:a0:57:6b:dc:f6:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=c8eab065-fdca-486d-b819-8e9f1be1b83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:89:c4:6d:e8:44:0c:eb:f6:b2:a8:da:c2:
                    38:2e:c4:f0:56:3e:51:c4:3f:4e:de:01:0d:b9:82:
                    16:67:96:0b:7c:b4:7b:d0:20:f0:6e:f6:b5:31:24:
                    93:51:43:dc:e6:3d:5e:77:23:f9:0f:72:2b:b3:bc:
                    bd:4e:39:55:65:00:7b:13:dc:12:0f:a7:7d:aa:3b:
                    7f:79:4d:0b:a2:c0:e8:a7:60:80:3f:81:95:02:fc:
                    f2:f3:55:34:72:74:66:38:24:4f:a2:43:b5:b6:ae:
                    7d:4d:43:b8:62:34:d1:d4:52:d7:2e:32:27:fd:4c:
                    e4:42:8c:86:eb:c3:73:71:ae:a9:79:fb:91:2b:b0:
                    c6:84:76:fd:96:f0:f5:91:41:af:fe:a3:95:3f:b2:
                    fd:c4:5c:73:4a:c2:05:65:90:72:d8:1c:03:f3:29:
                    36:d4:c4:72:4b:d6:10:b7:f4:5b:ec:4c:e4:96:c5:
                    7f:e0:d4:5a:e7:01:9d:8a:89:a6:49:1e:55:9b:40:
                    b3:65:12:dc:db:42:0a:a2:26:8d:77:92:d5:62:ba:
                    1c:78:a5:97:86:47:8f:54:4b:78:85:44:0e:b0:17:
                    75:79:9d:fa:ef:8b:2d:26:b1:90:a7:1e:93:84:d7:
                    ab:ed:5d:5a:56:2c:ff:bb:0b:e6:cf:13:a9:1c:c5:
                    9e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4C:FD:0A:D4:87:AF:D5:CD:EB:51:5F:75:01:6F:F3:9E:BE:4C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5671b96e-0aca-32e0-84ac-30d2639538f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:23:9a:d0:66:eb:47:00:6a:33:dd:88:a5:02:a3:f2:d5:6f:
         a5:2d:84:34:86:73:cd:ec:7d:bc:a9:88:58:4c:e4:b9:32:f7:
         5c:05:80:04:b3:45:55:95:37:d6:76:ab:bc:f5:8d:c1:96:1e:
         38:c8:58:07:93:41:60:79:b0:f9:06:67:64:2a:f7:b7:9a:24:
         d0:0b:a1:39:95:9d:ae:0a:fb:ef:4f:d6:e0:d5:f7:f0:0e:35:
         24:74:f3:0e:c9:35:bf:2e:dd:60:88:98:83:e7:8b:0c:87:a7:
         ec:6d:fa:aa:a0:da:75:81:b4:38:1b:2f:17:45:f7:8f:43:8f:
         63:d5:ea:26:e8:2f:f2:c2:11:b8:00:e6:59:49:62:ce:65:00:
         4b:48:91:1a:55:0f:51:5b:7d:c5:f6:b9:00:02:ed:32:d6:d0:
         09:36:9a:e7:06:1f:ca:14:07:af:24:3e:83:fa:ba:11:d9:c3:
         e0:05:b4:36:98:07:57:ac:ee:fc:7f:c6:9d:e2:8b:df:b9:7e:
         12:54:78:91:e1:7d:6d:05:5c:34:ad:e4:30:51:35:26:48:ec:
         71:b9:5b:e5:43:b4:b9:2c:09:2c:76:60:62:27:65:0e:32:93:
         50:37:3b:66:d6:f5:b9:36:d9:f2:c6:98:c4:ab:31:6d:76:e2:
         73:f1:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:17:41 2025 by rpki-client