Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/669b3d01-08d3-3099-95f5-63f28012aaff.roa
File:                     669b3d01-08d3-3099-95f5-63f28012aaff.roa (raw, json)
Hash identifier:          dYn0T1de0eF0TQ0C09eHnhseR8Ue7ZO7tkFU56SNC2U=
Subject key identifier:   10:A4:93:06:DB:11:9D:69:FB:D2:76:10:88:F0:B8:DA:FA:6E:70:9B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D531CBF65EF8762B159580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/669b3d01-08d3-3099-95f5-63f28012aaff.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     202
IP address blocks:        130.174.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:31:cb:f6:5e:f8:76:2b:15:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=ab57a43e-fa88-49d4-83c3-dd94c50fdc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:15:8a:88:a2:3f:c5:41:6a:d5:29:2f:53:
                    33:ef:1e:ec:ed:d4:78:ab:3a:48:2f:1d:bd:96:ba:
                    7d:65:f1:49:84:df:c0:78:de:75:ae:e8:42:c0:fd:
                    2c:27:98:f0:ce:12:7c:21:56:18:d8:0f:62:8b:58:
                    74:45:e6:3a:94:e9:ef:67:88:66:d0:57:a6:1f:c6:
                    e6:c1:63:e9:84:57:b7:fd:f1:55:df:e3:1f:c1:80:
                    70:a2:27:40:ba:75:e4:62:a0:01:5f:b9:89:cb:72:
                    25:4e:5c:97:cd:eb:89:45:d1:52:38:73:b9:80:10:
                    91:94:4a:2f:70:18:6f:07:d3:b2:fa:33:e6:ad:60:
                    78:71:65:31:3e:ef:fd:ba:91:9a:7e:7d:cc:8f:ff:
                    14:0d:8f:55:f2:49:78:ef:45:cc:dd:c2:11:32:34:
                    a7:db:fc:cc:22:2b:de:86:85:41:51:66:41:66:80:
                    25:66:a6:ff:7c:cf:ec:88:e4:6e:bf:6a:5e:90:7f:
                    2c:59:2f:d5:f6:b3:b4:a8:54:46:17:7f:23:c0:30:
                    56:ff:bb:54:04:ed:2a:9f:d1:d9:3a:20:f6:9e:76:
                    3a:21:33:d0:03:3b:10:ed:3b:7a:ad:39:05:d8:d9:
                    92:4f:3b:4d:2e:f0:c1:14:55:ac:10:a6:09:46:23:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A4:93:06:DB:11:9D:69:FB:D2:76:10:88:F0:B8:DA:FA:6E:70:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/669b3d01-08d3-3099-95f5-63f28012aaff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:72:d0:7b:30:fc:3c:fc:77:7e:6f:a9:13:ae:12:c9:1d:79:
         33:6a:e2:f3:9f:9d:52:60:da:fb:30:c6:4f:cd:51:23:04:d9:
         46:64:dc:6c:86:63:ee:ed:ba:6c:55:9b:e5:52:ba:d6:9a:50:
         eb:a2:84:56:6d:58:5b:c1:8a:33:1c:dd:d8:31:df:67:31:c1:
         95:4b:99:11:a7:d8:10:9d:6e:52:11:d4:25:43:bb:d2:a5:21:
         82:22:a7:f7:15:3a:19:a9:72:9a:87:67:be:d8:87:f1:cc:45:
         f9:c3:38:95:78:05:e3:d1:f4:a0:04:0a:83:bc:06:e8:24:a0:
         b2:f9:a7:07:89:0b:d3:52:ad:6c:24:82:b7:f0:8b:29:19:1d:
         c2:f2:68:24:71:9a:df:ed:5a:17:b5:b0:b2:0d:85:4e:ee:4e:
         09:e4:7b:8a:28:20:e7:96:b0:57:d3:cb:75:4d:f6:ef:5b:47:
         f4:79:dc:b9:a0:a8:c0:c1:39:f4:ce:99:95:68:f6:26:f1:cf:
         c3:f4:1c:04:80:1f:eb:50:ce:da:ac:29:f4:26:21:6a:50:ee:
         91:92:91:2c:61:43:80:76:6e:f0:61:6a:9b:0d:80:f2:f5:92:
         e3:a5:c5:50:17:08:b5:34:bb:af:9b:ec:03:33:00:d8:34:a3:
         91:93:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:32 2026 by rpki-client