Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6994f802-5219-3843-a48c-da154e62c878.roa
File:                     6994f802-5219-3843-a48c-da154e62c878.roa (raw, json)
Hash identifier:          n8qkDnV1vVKjCYFxyYeS10OjZA+Bg4dkMv/kLtBSnNs=
Subject key identifier:   A2:A7:E6:F6:7B:0E:F4:2D:57:8F:99:C1:F8:16:B5:C2:A8:2A:C9:95
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FCA50F6695DDE9EF20DC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6994f802-5219-3843-a48c-da154e62c878.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     202
IP address blocks:        130.174.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ca:50:f6:69:5d:de:9e:f2:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=38621364-5c1c-4e99-8a67-f051d950b1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:91:52:11:6d:2c:db:85:18:12:1a:b1:5a:
                    f8:56:7e:8d:87:70:59:5f:50:40:84:a5:c0:2c:37:
                    86:8c:43:04:ec:f8:79:cd:46:1e:09:2e:f8:f1:91:
                    31:83:fc:0f:b0:81:6e:f7:9e:bf:b7:5c:ef:73:5b:
                    5d:18:05:e1:d3:00:f6:4e:80:19:93:04:c5:28:5d:
                    a7:bb:3e:25:e2:6c:5d:e6:ce:f7:b1:e3:f2:59:ac:
                    ce:14:4c:cd:36:38:2e:b9:22:d0:20:5b:3b:ba:a1:
                    0c:af:09:95:f6:97:86:aa:79:be:44:22:4c:84:40:
                    50:22:4c:9b:e3:1f:74:2e:0d:c0:b9:dd:23:e3:24:
                    a0:4e:de:da:69:cb:85:30:52:4c:10:e1:66:77:4f:
                    8d:70:07:1a:0b:88:a4:34:fd:68:0b:5a:e2:a3:97:
                    30:db:93:b9:06:b6:34:26:33:29:9a:76:fd:50:87:
                    40:d1:87:1b:78:1f:d0:1d:53:b4:52:a7:8c:76:45:
                    cf:ac:11:03:ba:77:7a:15:8f:a1:f8:52:2d:70:6b:
                    86:1a:c6:a6:72:53:fb:4d:cd:f9:7d:7e:50:ef:16:
                    19:43:fc:52:77:d8:16:c2:5d:44:40:13:d4:d1:ad:
                    de:a5:81:62:01:87:8d:01:2d:8f:56:47:92:72:68:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A7:E6:F6:7B:0E:F4:2D:57:8F:99:C1:F8:16:B5:C2:A8:2A:C9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6994f802-5219-3843-a48c-da154e62c878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:db:c6:45:e5:78:b1:35:e6:c2:12:fb:93:a5:03:02:21:e2:
         c8:2a:12:c2:a1:79:b0:bd:08:61:d5:bd:a1:46:c5:c5:7c:d2:
         75:68:66:e3:a2:f6:cd:6f:2c:2d:1f:97:ff:df:27:e0:63:69:
         3b:09:67:a3:41:bf:27:0c:d8:2a:9d:1a:df:e8:67:f9:0a:5c:
         d2:a5:bd:2b:04:d5:15:ed:70:86:39:c8:b4:22:09:92:d5:88:
         1a:e7:62:e3:27:2a:43:b0:44:d5:33:18:fa:0a:dc:d2:4d:fb:
         25:50:2c:6a:61:4c:cb:80:16:2b:68:12:e0:51:3d:10:93:bc:
         da:f9:85:fb:d2:c8:fc:1a:79:56:c3:41:c2:cc:41:c9:1c:13:
         df:e1:8d:35:30:85:c2:7d:f1:4b:c1:61:ed:02:f6:33:f4:b2:
         10:83:d4:d0:e7:62:32:50:a8:7b:4e:71:9b:80:cd:d8:10:c8:
         e0:b1:62:16:46:2e:24:31:15:a6:d7:a7:9f:40:49:04:23:0a:
         34:b6:ed:28:cc:e6:41:b2:92:0d:bc:7e:96:85:9d:76:6e:e5:
         e1:63:f6:40:8c:5a:66:f1:9d:01:1b:23:33:64:75:4a:70:e5:
         0c:84:74:a3:de:7d:9f:c6:8c:61:28:2d:ef:85:1c:e2:fa:08:
         05:f1:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:58 2026 by rpki-client