Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65549f97-882c-35d2-87a6-0343b9242a89.roa
File:                     65549f97-882c-35d2-87a6-0343b9242a89.roa (raw, json)
Hash identifier:          W8FDvfdAf84/r5k2BSGFGzhmbkPAJoBrro0edx9QZPQ=
Subject key identifier:   70:28:8F:88:9C:A6:74:49:4F:D6:63:43:49:60:96:45:71:3F:FC:5E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F9A686ED3F75CE7DEEB3AA1C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65549f97-882c-35d2-87a6-0343b9242a89.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     3360
IP address blocks:        130.174.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:6e:d3:f7:5c:e7:de:eb:3a:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=6fa6cece-7945-4638-b2bb-df2663b72421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:06:0f:42:3f:7d:e0:c0:8f:75:20:0f:d3:bd:
                    59:b0:54:01:dc:d4:09:b3:25:29:99:fb:8c:df:ff:
                    88:ba:de:37:ac:03:bb:d3:7e:74:21:4f:23:bf:6a:
                    09:1a:b0:24:d1:09:0c:d0:7c:fe:c2:f2:fc:be:e1:
                    3a:e6:d1:3c:0b:95:f6:fb:fe:66:bd:ea:ca:de:5a:
                    96:98:66:de:df:ac:35:dd:7f:2f:e0:40:3c:b0:a7:
                    5e:14:32:e6:b4:e9:4d:08:35:29:74:b6:f8:9c:2c:
                    29:92:78:be:74:76:07:aa:c0:bc:f7:75:20:a0:58:
                    92:94:a8:24:37:16:90:06:3e:87:55:ae:17:1b:b2:
                    56:88:cc:78:c9:9d:81:4e:4b:a0:5d:20:4a:69:60:
                    c3:37:9d:91:e8:b0:fb:1f:58:2e:56:08:14:ae:99:
                    c8:d7:41:ee:c4:5b:23:3f:b8:42:57:75:2a:a0:37:
                    81:f4:f5:81:13:e5:f0:e8:80:f4:41:09:f8:01:6d:
                    66:a4:40:90:4c:c4:ce:e6:67:98:53:55:12:ea:1c:
                    7c:fe:4e:7c:2b:d5:62:34:46:06:5c:59:29:3e:d7:
                    52:09:a4:38:56:88:72:5e:0f:68:f0:67:58:a8:56:
                    60:9d:f1:3a:f0:3a:08:56:b7:bd:29:4a:41:0e:1d:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:28:8F:88:9C:A6:74:49:4F:D6:63:43:49:60:96:45:71:3F:FC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65549f97-882c-35d2-87a6-0343b9242a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:9d:66:e6:d2:f2:68:8c:c1:8f:08:54:88:34:b5:c4:f8:
         e7:a2:76:64:28:99:38:15:c4:e3:b1:be:bc:60:39:b3:8e:42:
         32:c0:f4:b2:4d:87:bf:fc:5b:2a:44:06:2d:46:60:8a:7d:42:
         27:40:54:47:dd:9d:2e:5a:14:a6:b0:d9:19:e5:e7:d7:b9:5c:
         f1:33:8a:81:f0:75:9e:1b:c1:d3:90:d1:cc:31:3d:e6:9e:55:
         11:23:23:e6:3d:58:90:da:a1:e0:c4:ca:4a:2a:a6:f3:4e:48:
         f4:8e:41:13:49:8b:28:5c:9d:3c:44:a6:d7:7e:18:5c:29:43:
         61:d5:2f:3a:e3:8e:6b:96:08:9f:a5:9c:17:f2:db:32:03:41:
         7f:f8:95:0e:fd:09:52:12:c7:1a:4b:13:06:37:a0:ba:af:fa:
         e9:7f:d3:d8:28:5b:b9:aa:12:80:e6:10:f9:b7:1c:9e:e1:19:
         c1:13:2e:6e:89:89:a4:ab:21:d6:30:c5:6b:d0:41:09:92:85:
         c0:da:ac:1c:1e:58:de:6a:44:73:01:f3:0d:45:30:48:e6:f2:
         2b:7a:4d:d1:74:96:f3:d4:cf:92:07:fd:ac:12:20:65:77:0b:
         73:b9:4d:13:9c:8e:eb:63:05:bd:85:17:de:b4:59:6f:50:91:
         f9:f5:67:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaG7T91zn3us6ocAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NmZhNmNlY2UtNzk0NS00NjM4LWIyYmItZGYyNjYzYjcyNDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAYPQj994MCPdSAP071ZsFQB3NQJsyUpmfuM
3/+Iut43rAO70350IU8jv2oJGrAk0QkM0Hz+wvL8vuE65tE8C5X2+/5mverK3lqW
mGbe36w13X8v4EA8sKdeFDLmtOlNCDUpdLb4nCwpkni+dHYHqsC893UgoFiSlKgk
NxaQBj6HVa4XG7JWiMx4yZ2BTkugXSBKaWDDN52R6LD7H1guVggUrpnI10HuxFsj
P7hCV3UqoDeB9PWBE+Xw6ID0QQn4AW1mpECQTMTO5meYU1US6hx8/k58K9ViNEYG
XFkpPtdSCaQ4VohyXg9o8GdYqFZgnfE68DoIVre9KUpBDh388QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAoj4icpnRJT9ZjQ0lglkVxP/xeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjU1NDlmOTctODgyYy0z
NWQyLTg3YTYtMDM0M2I5MjQyYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5dnWbm0vJojMGPCFSINLXE+OeidmQomTgVxOOxvrxgObOOQjLA9LJN
h7/8WypEBi1GYIp9QidAVEfdnS5aFKaw2Rnl59e5XPEzioHwdZ4bwdOQ0cwxPeae
VREjI+Y9WJDaoeDEykoqpvNOSPSOQRNJiyhcnTxEptd+GFwpQ2HVLzrjjmuWCJ+l
nBfy2zIDQX/4lQ79CVISxxpLEwY3oLqv+ul/09goW7mqEoDmEPm3HJ7hGcETLm6J
iaSrIdYwxWvQQQmShcDarBweWN5qRHMB8w1FMEjm8it6TdF0lvPUz5IH/awSIGV3
C3O5TROcjutjBb2FF960WW9Qkfn1Zyc=
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:47:23 2026 by rpki-client