Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5eaa3cf8-4ddc-3d34-b1bb-c049f85d60c3.roa
File:                     5eaa3cf8-4ddc-3d34-b1bb-c049f85d60c3.roa (raw, json)
Hash identifier:          2KwNUbG/7hqqv3A8p92n2UXXMq55exrTwrBAe+4q8WA=
Subject key identifier:   B9:F5:D3:56:3D:17:E3:95:33:CA:93:48:E4:A8:CD:AE:E4:F1:11:18
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FD632B6FD8F7E02FD6800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5eaa3cf8-4ddc-3d34-b1bb-c049f85d60c3.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     203
IP address blocks:        130.174.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d6:32:b6:fd:8f:7e:02:fd:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=78f472f2-f02e-4ffe-8b9e-0b8b72cd93ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:cd:2a:61:d2:45:35:30:55:a8:62:fe:63:
                    ed:4c:c2:f6:e8:5e:b2:d7:4d:e4:bd:a2:cb:c5:7f:
                    0f:11:af:3b:e7:43:41:d5:b0:2d:45:30:58:c9:e0:
                    f0:63:cf:43:f8:8b:f2:09:64:b2:61:10:08:d2:a5:
                    c0:b5:d7:b3:9a:ad:9f:0e:c8:6d:64:af:d9:15:5b:
                    c9:50:c5:4f:3b:1d:1b:2e:02:c7:e3:ed:34:1c:d9:
                    66:f2:5f:9d:0f:14:3a:93:c5:5c:50:bf:c8:81:4f:
                    ef:82:4f:12:fd:66:7d:ea:29:a3:86:be:12:64:ff:
                    5e:d6:07:62:8a:6d:20:8c:a9:fb:4a:0c:83:cb:73:
                    24:97:0e:57:50:8c:30:fb:89:9c:71:7f:d0:4b:bb:
                    ad:04:f9:ac:55:57:28:f1:96:a8:c0:d3:65:10:6e:
                    9e:b0:17:4c:df:88:27:17:88:e8:2d:17:96:fa:fc:
                    e7:36:01:06:f8:93:4a:ec:e7:07:e5:49:7c:54:bc:
                    ae:5a:e2:97:95:16:f2:6f:99:59:85:df:21:ef:6d:
                    0e:77:60:bb:fa:e9:8e:4d:12:a5:d1:ea:b4:c4:b6:
                    d8:bd:5a:ff:a8:ae:03:93:15:64:99:c2:74:55:6e:
                    15:84:bd:7e:b0:4b:ee:17:54:0a:02:de:93:55:50:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:D3:56:3D:17:E3:95:33:CA:93:48:E4:A8:CD:AE:E4:F1:11:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5eaa3cf8-4ddc-3d34-b1bb-c049f85d60c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:78:02:17:bd:a2:89:c6:8b:1c:9f:f1:26:4d:04:78:4f:4b:
         0c:2c:0c:22:8c:b7:47:1b:0b:1a:ae:8b:ac:39:ff:a4:fc:68:
         6c:17:e7:d2:e3:4f:09:43:2e:c4:e5:7e:ed:39:cf:49:d5:0c:
         f4:5a:2b:02:36:71:6b:2f:50:55:5a:22:7a:98:35:3b:d6:63:
         2a:bb:c6:e5:40:d6:42:52:f7:6d:10:8c:eb:34:c8:11:d1:a8:
         40:06:67:74:5f:5e:df:03:56:1d:22:e2:1a:45:4f:a7:44:78:
         64:6c:2f:dd:82:03:67:6d:87:0d:58:1b:b0:fd:ea:a2:ad:43:
         aa:a4:94:8d:4d:05:46:ae:c5:79:90:73:ed:1f:bb:98:64:1f:
         2f:f3:de:5f:3d:74:5f:d7:a3:46:60:d1:39:d1:c0:98:b6:d1:
         9b:2d:20:9f:0e:f1:96:16:b5:1d:0c:12:2b:ea:1c:8c:9f:09:
         7a:38:32:ff:28:fb:b5:1d:49:59:c5:ea:a9:28:64:2d:38:09:
         69:35:1e:6f:0f:3f:b8:d3:fc:3f:f0:42:11:5a:5f:0b:4e:14:
         da:69:de:39:5d:bd:87:f8:4b:a5:5e:c6:72:3a:91:d4:d2:b3:
         3d:48:e6:64:44:54:7c:b9:5b:4e:80:a4:82:15:01:a5:80:b7:
         f8:19:4a:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9Yytv2PfgL9aAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
NzhmNDcyZjItZjAyZS00ZmZlLThiOWUtMGI4YjcyY2Q5M2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouXNKmHSRTUwVahi/mPtTML26F6y103kvaLL
xX8PEa8750NB1bAtRTBYyeDwY89D+IvyCWSyYRAI0qXAtdezmq2fDshtZK/ZFVvJ
UMVPOx0bLgLH4+00HNlm8l+dDxQ6k8VcUL/IgU/vgk8S/WZ96imjhr4SZP9e1gdi
im0gjKn7SgyDy3Mklw5XUIww+4mccX/QS7utBPmsVVco8ZaowNNlEG6esBdM34gn
F4joLReW+vznNgEG+JNK7OcH5Ul8VLyuWuKXlRbyb5lZhd8h720Od2C7+umOTRKl
0eq0xLbYvVr/qK4DkxVkmcJ0VW4VhL1+sEvuF1QKAt6TVVDLJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLn101Y9F+OVM8qTSOSoza7k8REYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWVhYTNjZjgtNGRkYy0z
ZDM0LWIxYmItYzA0OWY4NWQ2MGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJN4Ahe9oonGixyf8SZNBHhPSwwsDCKMt0cbCxqui6w5/6T8aGwX59Lj
TwlDLsTlfu05z0nVDPRaKwI2cWsvUFVaInqYNTvWYyq7xuVA1kJS920QjOs0yBHR
qEAGZ3RfXt8DVh0i4hpFT6dEeGRsL92CA2dthw1YG7D96qKtQ6qklI1NBUauxXmQ
c+0fu5hkHy/z3l89dF/Xo0Zg0TnRwJi20ZstIJ8O8ZYWtR0MEivqHIyfCXo4Mv8o
+7UdSVnF6qkoZC04CWk1Hm8PP7jT/D/wQhFaXwtOFNpp3jldvYf4S6VexnI6kdTS
sz1I5mREVHy5W06ApIIVAaWAt/gZSt4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:24 2026 by rpki-client