Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5eaa3cf8-4ddc-3d34-b1bb-c049f85d60c3.roa
File:                     5eaa3cf8-4ddc-3d34-b1bb-c049f85d60c3.roa (raw, json)
Hash identifier:          vRWvsahTJyDTMUoJlor08NcAzQeeNR1WUpkRewZ4gws=
Subject key identifier:   A0:43:02:6C:78:C8:6C:59:39:2F:36:F9:59:18:58:AE:86:E6:14:54
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7CAE3376AC0E1ABA6E440
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5eaa3cf8-4ddc-3d34-b1bb-c049f85d60c3.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     203
IP address blocks:        130.174.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ca:e3:37:6a:c0:e1:ab:a6:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=23a9d490-6738-4f64-9c3f-217de754cc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:43:8a:44:ce:77:6f:f7:c0:d1:48:a4:e2:
                    30:4b:87:cc:ac:4c:01:27:04:fd:2e:5c:72:f7:d9:
                    57:2f:b6:e4:22:7c:bc:77:c1:ee:2b:2f:c3:03:84:
                    bb:d7:5b:99:71:8d:a1:26:11:2f:1e:2f:95:1d:15:
                    84:c8:46:96:bc:cd:15:7e:47:c4:23:c1:f5:03:12:
                    62:5f:ad:a6:c1:5b:e5:06:43:76:72:d2:a5:9d:6f:
                    06:aa:0b:5a:db:ea:25:f1:e2:36:58:e6:81:b4:15:
                    b7:eb:be:23:df:ef:82:d9:f7:15:7a:31:43:c3:3b:
                    54:93:84:61:a9:24:9a:08:66:87:ef:27:23:1a:5f:
                    27:76:01:d1:8f:84:f2:c1:48:7a:30:94:eb:84:ed:
                    eb:e7:be:ed:42:ca:43:81:50:08:f3:76:38:dd:a2:
                    02:de:29:75:db:62:36:73:68:1a:1e:6b:29:93:a8:
                    78:29:49:8d:7c:de:5b:7b:2f:c5:8b:73:4f:a3:07:
                    51:fd:70:e3:ad:85:13:75:97:ba:01:03:58:bd:e9:
                    ab:a8:5c:3f:e6:e7:ae:3f:1b:9b:96:b7:15:86:81:
                    1a:18:2b:c3:d3:d9:c9:dd:bb:42:a0:60:12:55:3f:
                    1a:8b:2a:34:b6:b4:5a:4e:b3:ca:9d:5c:bf:07:26:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:43:02:6C:78:C8:6C:59:39:2F:36:F9:59:18:58:AE:86:E6:14:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5eaa3cf8-4ddc-3d34-b1bb-c049f85d60c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:68:3f:10:a6:26:60:52:01:73:94:07:71:10:3d:de:b7:
         f0:65:7f:69:15:0d:49:10:37:40:53:22:0c:af:86:3a:5f:51:
         e1:2f:09:49:03:7f:2b:7c:43:21:52:0b:7e:ea:6a:4d:2a:fa:
         e3:30:91:1e:60:2a:26:63:56:71:ff:e1:54:4e:6a:52:44:af:
         4a:bb:59:b6:3f:0e:37:f5:bc:cd:05:a1:84:ae:4c:24:5e:90:
         23:b0:b7:0e:ed:ac:2a:9c:8c:9a:36:50:e5:88:e9:53:df:8c:
         d2:ee:b4:fd:fa:07:41:9d:6a:2d:62:d2:83:7e:b2:56:6d:30:
         93:d3:74:04:e7:59:36:71:a1:f8:06:31:7c:76:46:c3:9b:34:
         e0:f3:99:ea:21:24:d9:1d:d6:a6:28:32:af:ac:cd:13:ce:fc:
         cb:33:c4:19:a4:04:f9:0e:17:71:20:bd:cd:f8:b7:53:e7:dd:
         ee:24:ba:c4:96:45:13:2a:80:a9:56:8b:81:ce:b6:f9:e6:ca:
         86:d6:1b:86:18:9b:b1:82:90:b4:c8:11:0d:43:cd:84:f6:ad:
         95:d3:18:6c:23:22:05:08:0e:b8:17:ec:38:9a:a6:db:0a:10:
         0b:a7:77:d1:d4:9c:1a:11:a9:88:dc:5f:1b:23:22:a0:5d:a5:
         d7:49:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:53:24 2025 by rpki-client