Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ca20a3e-ba7b-395b-b21b-413210f275e1.roa
File:                     8ca20a3e-ba7b-395b-b21b-413210f275e1.roa (raw, json)
Hash identifier:          pygaBcO03S5HM6d8WHGObyZIxdYUoEwwJl10LYYxz6o=
Subject key identifier:   1C:45:CA:B5:E5:9F:88:BA:21:03:1C:F7:CD:6E:7F:27:DD:55:99:BB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D534648B0D9B6F00E26360
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ca20a3e-ba7b-395b-b21b-413210f275e1.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     202
IP address blocks:        130.174.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:34:64:8b:0d:9b:6f:00:e2:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=db3af7d2-4ecd-410f-89cf-f2def0a98854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:bc:16:be:46:6e:3b:35:a5:88:da:46:5d:
                    4a:51:29:65:d6:20:3d:b3:6b:50:fc:ce:91:9e:6a:
                    ff:44:ba:56:c8:3e:b0:73:68:b1:29:5d:8f:a3:3c:
                    ae:60:c6:4d:1b:99:1b:9b:c4:f1:26:8e:72:bc:42:
                    f6:57:f5:4f:f5:a2:7f:f6:d2:52:f3:75:cc:96:12:
                    e2:b8:8d:ae:58:c5:c7:0e:aa:4d:f7:1e:be:15:c6:
                    61:39:45:34:c5:90:73:f3:17:fe:80:39:a6:e0:80:
                    eb:3e:53:98:1c:f8:8f:52:dc:0a:bd:36:7f:5e:19:
                    6b:92:0a:79:a2:03:54:d6:b6:71:d6:48:52:4f:40:
                    57:a0:94:2c:db:af:e4:f8:4f:15:b4:89:3a:63:1c:
                    5c:cf:22:6f:67:bd:4b:d7:8c:21:d2:6f:7f:bc:e3:
                    d4:75:a3:cb:83:ea:2b:56:fe:88:1f:a2:2c:bf:1d:
                    65:1d:3f:28:a4:18:64:26:9e:4c:60:4f:48:5c:32:
                    02:bf:d2:4b:8d:4a:29:b4:4f:e8:67:e7:c6:68:d8:
                    45:e5:96:e2:47:e3:b7:9b:42:e5:e1:ef:ac:4f:a4:
                    3d:40:2f:ae:3b:7a:28:dc:bc:ad:77:c1:f2:da:2f:
                    8c:97:2d:38:84:1d:a6:a5:0f:5d:63:f7:d0:cf:13:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:CA:B5:E5:9F:88:BA:21:03:1C:F7:CD:6E:7F:27:DD:55:99:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ca20a3e-ba7b-395b-b21b-413210f275e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:87:25:8d:22:44:c4:bc:1d:03:29:fb:bc:95:e5:18:45:99:
         e9:85:3a:d9:ad:cb:7c:78:ae:78:31:a1:e2:83:76:43:7e:d0:
         23:e4:95:64:97:3f:2b:df:06:f9:04:a6:8f:5b:95:f9:7a:83:
         4e:02:c5:b0:99:ff:21:24:3f:f9:40:a6:3b:00:b7:fb:e2:bf:
         0c:1d:c0:4c:08:c7:e8:fb:06:ab:93:72:14:74:7d:36:2a:52:
         ab:e4:8e:f0:dd:6e:ca:0e:c3:ec:ad:e6:76:2b:1b:ed:fa:35:
         67:6b:3f:01:1a:be:ca:10:be:37:2c:5b:85:83:4d:46:bd:b9:
         35:08:ac:13:0e:89:cd:75:c3:b8:f9:19:0f:1e:a4:48:ee:15:
         d8:dd:71:35:50:d1:a0:97:f1:68:86:0f:70:f7:bc:3a:04:41:
         95:a3:e0:23:13:cb:44:b9:49:a9:42:a6:28:8e:28:19:a1:a3:
         07:d6:65:b8:06:a3:41:fc:47:33:ca:f3:4c:8e:36:5e:39:85:
         df:92:0f:84:bb:6a:c1:8c:dd:ee:41:43:a0:60:ec:fe:fb:9e:
         54:50:eb:c5:dd:e4:ad:a8:53:40:e0:95:f9:ff:64:13:fa:63:
         70:e3:8e:00:6b:d0:a1:6b:9c:26:b2:ec:22:fb:c9:ee:fe:aa:
         04:4c:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:40 2026 by rpki-client