Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/732b7ba9-e1ea-3550-9cb0-a2f4a2978d42.roa
File:                     732b7ba9-e1ea-3550-9cb0-a2f4a2978d42.roa (raw, json)
Hash identifier:          vBU3mCZLWHxFW0yOUpwHhEN7WG1V905rKN37u9SlR+Q=
Subject key identifier:   2A:4D:63:0B:61:C5:AE:69:CF:00:E5:BE:D1:D3:7E:AD:3B:65:B3:6E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7C5F39AC535B0D5416980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/732b7ba9-e1ea-3550-9cb0-a2f4a2978d42.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     3360
IP address blocks:        130.174.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:c5:f3:9a:c5:35:b0:d5:41:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=a617520a-b32d-4fd0-a91c-c3e06bc127db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:eb:38:a9:d8:31:87:c1:6c:fe:e4:17:db:bd:
                    54:bc:89:9e:22:51:1a:6d:52:a8:df:76:50:12:2b:
                    0e:ab:44:cd:74:5b:64:1a:28:1f:3b:eb:47:14:c0:
                    f0:3f:41:ef:3e:b4:73:8f:fd:a6:b6:a8:f8:0b:3f:
                    5e:68:15:42:68:22:b4:5b:c6:2c:17:e1:ab:52:eb:
                    cb:3a:5a:45:29:51:30:ba:9e:49:6b:61:eb:e1:b3:
                    e0:0e:f4:be:25:f8:53:2b:92:e5:a9:14:1c:fb:65:
                    15:b1:9d:b3:63:0c:12:ae:ba:d9:c9:e8:57:d7:bd:
                    0d:cb:84:6f:48:e8:f7:cc:fc:d3:c1:9f:27:7e:6d:
                    2b:9a:5a:bd:e5:d5:7a:68:6f:19:50:e9:69:f2:f9:
                    9f:77:89:53:e1:bb:1c:4b:bb:83:1e:06:46:87:22:
                    9e:9b:cf:b7:85:04:b9:5f:48:4a:08:1a:5d:d0:ca:
                    84:c8:e2:07:8a:ff:89:87:77:c6:a7:86:3f:4b:35:
                    e8:b6:41:9c:12:3b:bf:1e:77:c7:28:b3:73:19:fd:
                    de:1b:43:3b:5f:cc:49:56:a1:36:51:a3:27:91:e3:
                    0f:ea:ca:54:72:60:9e:07:5b:5c:c5:c8:c4:79:fd:
                    d0:4d:0f:8b:22:f0:fb:22:38:e5:bd:fb:f9:bd:16:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:63:0B:61:C5:AE:69:CF:00:E5:BE:D1:D3:7E:AD:3B:65:B3:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/732b7ba9-e1ea-3550-9cb0-a2f4a2978d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:77:65:79:e9:5c:3c:10:96:ef:71:75:32:27:26:d8:d6:9b:
         eb:9e:03:23:f5:c5:f6:4c:8b:bd:d6:2e:b8:0a:55:e9:f6:7c:
         a0:f4:a6:93:0d:4b:19:d4:2d:33:72:95:3a:b7:58:ba:c0:42:
         80:6b:44:be:69:09:6b:6b:3c:d3:6e:51:40:13:2a:2e:50:b7:
         e1:1b:4f:7c:ea:f1:df:43:98:49:77:ed:87:50:4c:90:01:15:
         8d:9a:1a:9b:d6:42:d9:56:6d:a4:f3:09:f2:c1:2d:e3:b2:82:
         ce:42:a0:f0:e5:a9:51:6e:78:8f:2f:21:04:6c:1b:cc:1d:4f:
         47:45:4d:2b:25:8e:c7:67:3a:3c:b2:7c:ac:81:70:61:e9:a6:
         8d:8c:48:a2:82:40:ed:81:ce:44:7a:b6:27:cb:02:28:6e:9d:
         ff:64:f5:9f:29:3c:f6:0a:5f:12:4e:2c:c9:ba:49:b0:8d:49:
         35:4f:c5:2b:1d:06:27:5e:67:09:bc:74:34:a4:1e:e0:75:82:
         a1:3c:ca:2e:92:47:67:f2:12:01:65:77:5e:77:00:0f:dd:e2:
         84:2d:05:02:07:a7:35:5b:9c:c8:30:ca:a0:5a:87:18:c9:8b:
         22:bb:b6:f3:8f:fe:9d:74:20:04:9b:05:5c:89:96:da:de:9e:
         05:bb:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:28:16 2025 by rpki-client