Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7b475fed-6762-389f-be9f-e047b9b1bd36.roa
File:                     7b475fed-6762-389f-be9f-e047b9b1bd36.roa (raw, json)
Hash identifier:          iO7mfAE3h09LwzDG6GEXUzacnkMVb6t02xRUWEWDsLc=
Subject key identifier:   6B:CF:13:59:1C:5F:BB:F9:1D:14:EE:4F:F6:A1:80:A9:71:8D:32:7A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D21B69785368E4DD39680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7b475fed-6762-389f-be9f-e047b9b1bd36.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     202
IP address blocks:        130.174.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:21:b6:97:85:36:8e:4d:d3:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=ddb4e30f-3ba5-45fb-b35e-7b38e0c4a3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:06:77:b0:db:63:d6:4e:fb:d3:83:fc:a9:
                    24:9f:d7:c4:ff:89:ec:90:36:f8:ea:33:92:12:3d:
                    9e:87:2e:00:8d:77:37:66:1d:6f:53:a1:99:3a:1b:
                    c2:38:db:6b:45:77:6a:4a:d8:b8:74:6f:a5:30:42:
                    ff:c1:a8:ea:18:b4:0f:b8:2a:ff:f7:53:d7:4f:54:
                    b1:1a:45:1a:95:da:bc:3e:b1:64:12:3b:18:d5:10:
                    64:b6:81:23:c4:a1:0d:66:f0:f5:f7:7c:ef:ff:57:
                    6d:1b:65:d9:03:6d:ef:ce:70:1a:24:4d:71:03:38:
                    77:ee:0e:aa:21:9d:41:fd:50:aa:d3:cc:a3:e3:de:
                    c5:62:05:19:64:5c:fa:50:b1:5e:9e:ce:76:6f:cd:
                    7c:5a:ff:fa:27:24:0f:90:1b:2c:c7:66:34:45:1a:
                    37:91:b9:7e:2f:30:3f:0c:9f:6d:53:74:11:38:a1:
                    45:79:93:61:29:c6:13:95:67:a5:14:fc:9a:72:09:
                    16:65:27:9e:9f:dd:f6:ac:5c:ca:1c:fc:0d:4f:fb:
                    9d:b7:b5:0c:ce:91:ed:35:79:73:c2:03:cd:86:ff:
                    ed:4e:3c:39:0a:7a:e3:44:ec:d7:ab:a6:16:00:bb:
                    a3:22:bb:aa:87:ea:1c:f3:fd:42:f3:52:a5:4a:a6:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CF:13:59:1C:5F:BB:F9:1D:14:EE:4F:F6:A1:80:A9:71:8D:32:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7b475fed-6762-389f-be9f-e047b9b1bd36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:0f:56:0d:98:be:86:26:a5:30:a2:5c:94:6c:56:f6:ce:
         43:4f:3d:42:b9:ac:c3:a9:b4:67:3c:c0:a6:62:ae:0a:96:ae:
         ec:a3:e6:62:ff:e4:53:ee:ce:d7:a3:47:84:79:6f:b6:d2:92:
         47:16:76:04:45:1f:e5:80:5f:b5:9e:c1:e8:96:4a:01:e6:97:
         67:b6:2d:a6:f4:99:5e:c8:49:26:a2:0d:b8:06:1d:f8:93:df:
         86:5d:f8:46:81:a4:57:59:f3:b8:7a:4c:ca:66:65:d9:07:fd:
         c5:85:d8:2c:85:49:b3:6a:37:3c:74:39:f1:2a:4a:4d:9a:e3:
         c7:46:fd:1c:82:69:a1:21:0f:7a:98:97:ae:cc:19:6b:29:ed:
         ea:f3:e5:42:bc:0f:a8:2d:d5:9a:eb:71:f9:5e:50:e9:5f:56:
         2c:58:9e:98:f3:e9:66:06:c3:ad:83:f0:ba:e6:07:8f:ae:17:
         b5:c2:9c:dd:54:36:19:85:c3:4f:df:5b:7d:da:83:60:7f:68:
         8b:d9:02:85:56:63:34:06:23:99:cc:ee:81:10:2f:92:5e:25:
         a4:d8:fd:17:64:20:86:3e:2a:20:d4:27:98:88:40:d9:93:35:
         fd:85:42:8e:22:05:d1:21:04:02:9a:fd:ab:c1:81:68:db:c3:
         ff:6c:a5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:02:19 2025 by rpki-client