Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65549f97-882c-35d2-87a6-0343b9242a89.roa
File:                     65549f97-882c-35d2-87a6-0343b9242a89.roa (raw, json)
Hash identifier:          Q2KavM/8x8VihP8CPiRcW1R25GIetISHCX8TK2ChL0c=
Subject key identifier:   37:14:B4:1D:18:34:C9:C8:11:C1:02:29:ED:28:DF:7F:3F:24:EF:98
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7B8A3649765E07B6B5800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65549f97-882c-35d2-87a6-0343b9242a89.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     3360
IP address blocks:        130.174.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b8:a3:64:97:65:e0:7b:6b:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=3e4297f5-36a9-41ce-88dd-c27bc8159bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:b6:d4:63:a7:44:70:c6:85:7d:1e:0e:44:
                    b9:eb:e5:39:77:70:fc:b7:7d:50:a4:ea:90:55:b6:
                    7b:27:81:2d:09:7a:c1:14:6a:10:10:25:11:66:0c:
                    0d:4c:fe:37:b9:6b:7b:9d:62:ee:d8:90:9e:ef:ba:
                    13:e4:c1:23:6b:0f:de:1a:5f:a0:27:5f:46:04:4e:
                    85:fd:06:a2:a3:9d:5d:22:72:3d:a1:5b:c7:8a:6d:
                    b7:1e:88:e2:77:dd:5d:7c:41:d5:30:b8:cd:90:71:
                    42:55:ef:4b:32:09:dc:61:41:e6:96:69:ea:6e:73:
                    03:2e:c5:a8:af:bc:8a:3f:5b:28:8e:af:3a:58:a0:
                    e9:05:1f:df:81:d5:c3:e1:9a:04:b9:24:00:40:05:
                    f7:4f:c0:e5:43:01:d2:2b:c4:58:21:3b:b7:2a:e6:
                    77:12:31:24:02:f2:46:58:d3:c7:17:51:56:65:0c:
                    36:38:13:08:2c:9d:ba:89:e4:35:66:5f:d5:10:db:
                    01:2b:8c:0e:57:d8:78:01:cc:72:ea:67:58:00:8a:
                    ab:1a:d3:9c:ad:21:62:c1:f1:ac:8d:7e:84:14:d8:
                    03:e6:56:27:b1:97:fb:4a:7d:e9:ef:18:76:7b:41:
                    f2:c3:b4:01:5d:84:72:15:f5:ae:71:4d:a7:f8:2c:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:14:B4:1D:18:34:C9:C8:11:C1:02:29:ED:28:DF:7F:3F:24:EF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65549f97-882c-35d2-87a6-0343b9242a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:02:ef:01:67:e8:14:b0:2f:c7:e7:f8:11:75:ca:54:6f:
         ed:d3:f3:34:40:84:7b:37:25:d4:4f:30:ae:8a:36:93:57:ca:
         c0:b4:14:91:e0:e1:d1:ff:70:70:12:ae:fe:fd:25:37:b4:d1:
         b2:92:53:a2:76:d5:3b:c3:8f:c7:e2:7a:b9:b4:ea:23:6f:8c:
         e4:86:0c:30:aa:0d:05:71:c7:ad:ae:cd:f1:b3:83:31:4d:8e:
         9e:9e:3c:e0:86:94:ef:b5:f2:fc:60:fb:03:00:02:ab:67:98:
         1e:44:89:4e:55:5a:dd:73:4a:56:56:4f:25:8f:e6:99:f5:a8:
         5c:9d:df:5e:ef:dd:ff:39:66:83:7b:e3:d2:21:ff:d3:d1:48:
         b5:cc:31:91:eb:77:84:7d:69:88:ae:7f:0d:f5:3a:31:1c:7b:
         1a:97:29:80:d4:9c:f9:9e:9a:c7:dd:bf:67:05:6d:e2:b1:b8:
         67:2b:66:4a:b5:36:01:1f:25:c0:75:be:56:53:fb:0c:c0:42:
         02:4e:a3:01:f5:6a:0d:2d:0f:3d:88:17:29:f2:6b:ba:3d:f4:
         d3:b3:e9:58:8c:80:8c:74:97:16:64:5b:12:9d:2d:f5:19:ee:
         9e:78:59:b3:a0:66:18:35:66:ef:05:0c:47:05:c5:10:c9:18:
         8c:00:fc:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97ijZJdl4HtrWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
M2U0Mjk3ZjUtMzZhOS00MWNlLTg4ZGQtYzI3YmM4MTU5YmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy221GOnRHDGhX0eDkS56+U5d3D8t31QpOqQ
VbZ7J4EtCXrBFGoQECURZgwNTP43uWt7nWLu2JCe77oT5MEjaw/eGl+gJ19GBE6F
/Qaio51dInI9oVvHim23Hojid91dfEHVMLjNkHFCVe9LMgncYUHmlmnqbnMDLsWo
r7yKP1sojq86WKDpBR/fgdXD4ZoEuSQAQAX3T8DlQwHSK8RYITu3KuZ3EjEkAvJG
WNPHF1FWZQw2OBMILJ26ieQ1Zl/VENsBK4wOV9h4Acxy6mdYAIqrGtOcrSFiwfGs
jX6EFNgD5lYnsZf7Sn3p7xh2e0Hyw7QBXYRyFfWucU2n+CyRAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcUtB0YNMnIEcECKe0o338/JO+YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjU1NDlmOTctODgyYy0z
NWQyLTg3YTYtMDM0M2I5MjQyYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIaAu8BZ+gUsC/H5/gRdcpUb+3T8zRAhHs3JdRPMK6KNpNXysC0FJHg
4dH/cHASrv79JTe00bKSU6J21TvDj8fierm06iNvjOSGDDCqDQVxx62uzfGzgzFN
jp6ePOCGlO+18vxg+wMAAqtnmB5EiU5VWt1zSlZWTyWP5pn1qFyd317v3f85ZoN7
49Ih/9PRSLXMMZHrd4R9aYiufw31OjEcexqXKYDUnPmemsfdv2cFbeKxuGcrZkq1
NgEfJcB1vlZT+wzAQgJOowH1ag0tDz2IFynya7o99NOz6ViMgIx0lxZkWxKdLfUZ
7p54WbOgZhg1Zu8FDEcFxRDJGIwA/A8=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:43:43 2025 by rpki-client