Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73996cf4-cb82-30da-9b0b-d2db0630d74d.roa
File:                     73996cf4-cb82-30da-9b0b-d2db0630d74d.roa (raw, json)
Hash identifier:          gyNvsgq/WJkQoLrXF5G0yXAHsPmaIobIV0+9s3bc0cY=
Subject key identifier:   E8:74:2E:E4:40:67:6C:57:4D:73:43:77:14:74:49:EA:60:78:5D:3F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D1EB3B882E99E3F6E10C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73996cf4-cb82-30da-9b0b-d2db0630d74d.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     3360
IP address blocks:        130.174.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:1e:b3:b8:82:e9:9e:3f:6e:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=e7e41c17-3a53-43e0-872d-64cf4ca527b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:11:04:e0:82:1d:84:b2:3c:6b:34:92:a6:8d:
                    8e:60:34:d3:02:4c:c1:17:fe:ed:54:eb:de:90:75:
                    8f:8f:a8:d0:dc:8b:2c:dc:35:db:cc:89:4e:f8:46:
                    ee:75:d0:06:55:f6:96:cc:7d:55:ce:57:88:1a:c7:
                    14:bd:4a:50:09:e4:40:d2:a4:8a:46:c0:89:a7:96:
                    1c:e5:a3:c2:ca:51:20:4a:fd:db:d9:d0:7d:fa:ff:
                    6d:96:f5:aa:17:62:39:5a:d6:c0:6d:77:7d:ad:fb:
                    e9:f5:ae:c9:28:78:8d:e2:02:2d:1b:bf:1c:a8:10:
                    2d:9e:85:17:9a:70:5b:1a:75:83:bc:1d:8b:a5:73:
                    a5:94:f1:37:e2:08:5a:c7:ca:ca:d2:5e:9a:c2:76:
                    e0:c7:2d:bc:d6:fc:03:4e:f1:9b:cd:cd:af:9c:f9:
                    29:87:30:2c:81:38:1d:73:16:09:2a:a7:61:ac:69:
                    9a:77:4b:97:ae:86:bb:8d:12:4a:87:f2:f6:75:59:
                    e5:49:05:e1:bb:34:c5:1d:e4:5c:c8:35:3c:47:c7:
                    b1:2e:bf:5b:1d:25:2d:98:75:a4:f0:33:bf:7e:44:
                    35:99:9e:69:10:a9:28:71:69:fc:7e:75:bd:d2:c4:
                    da:b9:c8:d1:e9:64:0e:56:40:c6:af:b0:23:3c:37:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:2E:E4:40:67:6C:57:4D:73:43:77:14:74:49:EA:60:78:5D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73996cf4-cb82-30da-9b0b-d2db0630d74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:17:a5:0e:a8:a4:af:0d:30:29:65:e1:93:20:7a:27:74:
         b7:1f:85:90:b6:ce:f2:11:99:ce:0c:7f:7c:17:3b:01:3d:1a:
         64:48:5f:b8:8f:f2:6f:57:82:da:83:07:47:c7:38:52:9e:ee:
         46:00:c3:a1:7a:4f:14:bd:8a:1c:34:5b:2f:bc:28:48:e8:75:
         44:54:66:7a:59:af:7f:b5:c3:cf:d3:ad:b8:bc:8c:24:e3:be:
         80:0b:93:5c:b9:70:6c:c7:90:59:de:41:dc:03:d5:9b:a0:f9:
         29:64:87:bd:a0:5a:4e:ea:35:f6:43:c0:f3:8d:3f:e3:83:f6:
         3b:fa:9f:4f:96:97:2a:74:73:c5:7a:35:50:9b:9f:ee:18:b8:
         07:1d:1a:3d:93:98:be:aa:33:0b:9b:d0:cb:36:9f:c3:f7:6b:
         8c:8f:3e:f6:dc:a2:54:21:42:33:24:cc:1d:d1:bd:e1:45:31:
         df:e1:11:04:37:fd:0a:7e:91:e4:03:34:f5:6a:69:e5:08:c0:
         3c:63:a3:d2:df:16:01:ab:5d:6f:26:1e:86:4d:67:41:d3:18:
         d9:f1:8d:08:29:26:c5:ad:db:0c:b8:9b:63:aa:d3:d1:fc:db:
         f9:9b:cc:a5:9b:8b:23:d7:95:1f:f9:f4:a0:5e:82:47:fb:54:
         c6:8d:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:26:32 2025 by rpki-client