Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ecd9fea-4e8c-3e59-8b6d-51767fa167c1.roa
File:                     8ecd9fea-4e8c-3e59-8b6d-51767fa167c1.roa (raw, json)
Hash identifier:          Piv1y5jzWWS3lfp72scW/FgoM5gYXM8dtYiH94VbrN4=
Subject key identifier:   C4:44:C5:70:5E:C1:D3:E8:51:27:0F:46:AD:2C:EF:E2:0A:34:D0:1C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF717715D8207501D68850D98
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ecd9fea-4e8c-3e59-8b6d-51767fa167c1.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3360
IP address blocks:        130.174.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:71:5d:82:07:50:1d:68:85:0d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=3f41b1d6-5f15-42d3-9507-6a70010b3df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:7b:8c:a0:1d:cc:db:9f:00:4f:2c:ae:d8:
                    ac:9a:e5:07:f9:2b:75:95:1d:03:08:e8:4e:ee:16:
                    f9:51:09:f5:fa:ea:f6:46:75:3e:b1:07:ac:50:43:
                    5d:1e:3b:44:52:03:5c:89:87:1c:e5:29:08:3d:34:
                    88:f1:12:ea:91:a1:41:73:cb:f3:ba:7c:3e:bd:4b:
                    92:dd:0e:c6:c0:97:c8:e5:12:ba:f2:35:67:27:47:
                    3e:1a:40:79:3e:9a:75:85:48:26:d4:f3:26:bd:c0:
                    9c:ea:ef:ce:de:82:2a:9b:9b:56:a9:79:04:5c:34:
                    5e:82:7f:75:29:a7:27:57:5d:eb:2b:44:d2:46:6f:
                    89:16:f5:02:3a:a4:3f:2c:1d:dd:b5:e4:d1:85:be:
                    2a:c7:33:7b:f4:39:67:cc:f7:9e:bc:00:a6:b8:9a:
                    cf:54:2b:aa:8c:18:d1:5f:a1:a6:16:06:9b:dd:22:
                    8d:5b:ca:37:c5:e1:b6:1a:42:4f:ca:44:eb:fd:07:
                    30:d4:27:2d:c6:ee:23:6c:51:74:b1:ab:49:7f:1b:
                    d4:b8:7f:18:e7:5a:ff:2a:8b:33:ac:d8:36:5f:7a:
                    e2:fe:2c:23:e0:1b:2d:1e:6a:43:f8:94:fc:1f:32:
                    75:de:9c:95:24:7c:77:47:00:de:45:5b:76:2f:5a:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:C5:70:5E:C1:D3:E8:51:27:0F:46:AD:2C:EF:E2:0A:34:D0:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ecd9fea-4e8c-3e59-8b6d-51767fa167c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:3d:d5:20:76:7f:6a:0b:84:60:4d:4f:18:a3:1e:28:88:dd:
         46:df:e6:ac:86:a7:59:34:56:c8:0c:db:e5:94:24:1c:f0:bd:
         0f:a6:b5:60:7f:05:84:89:0b:6f:c2:29:51:52:94:de:65:e4:
         8b:0f:8b:7f:b9:43:2d:8d:2c:99:a6:cf:17:5a:fa:b2:f2:74:
         a2:3f:9f:d3:15:27:e8:f9:24:ac:97:29:5a:f9:ad:0a:9b:b3:
         6a:85:48:21:a4:7f:0a:a0:7a:2c:0c:9c:18:f9:96:ed:de:c0:
         44:5d:d0:6a:0c:78:d5:89:da:82:92:6e:72:93:fb:a7:5e:f7:
         6b:f5:d3:8c:fe:8b:66:d6:88:96:42:d1:2e:6b:25:e7:b5:3f:
         6a:da:8b:e6:2a:fe:7e:5e:9a:d9:d1:d8:f2:46:15:bb:11:b8:
         2f:c3:ed:d4:e0:9c:29:e3:57:cd:be:5a:31:d7:89:0a:86:70:
         2b:e0:39:50:7a:b7:5c:fe:13:e9:14:27:d4:4a:81:f5:7c:65:
         8d:28:09:b8:98:7d:f5:50:9a:e8:6c:f7:48:40:32:4f:8d:fd:
         45:84:72:2d:06:26:ea:a0:b1:c3:ac:b0:45:29:30:ba:d8:7c:
         19:bf:b8:6a:50:9c:54:8e:95:30:7c:51:27:7d:66:9a:10:4a:
         58:a6:e6:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3FdggdQHWiFDZgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
M2Y0MWIxZDYtNWYxNS00MmQzLTk1MDctNmE3MDAxMGIzZGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z97jKAdzNufAE8srtismuUH+St1lR0DCOhO
7hb5UQn1+ur2RnU+sQesUENdHjtEUgNciYcc5SkIPTSI8RLqkaFBc8vzunw+vUuS
3Q7GwJfI5RK68jVnJ0c+GkB5Ppp1hUgm1PMmvcCc6u/O3oIqm5tWqXkEXDRegn91
KacnV13rK0TSRm+JFvUCOqQ/LB3dteTRhb4qxzN79DlnzPeevACmuJrPVCuqjBjR
X6GmFgab3SKNW8o3xeG2GkJPykTr/Qcw1Cctxu4jbFF0satJfxvUuH8Y51r/Kosz
rNg2X3ri/iwj4BstHmpD+JT8HzJ13pyVJHx3RwDeRVt2L1ptKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRExXBewdPoUScPRq0s7+IKNNAcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGVjZDlmZWEtNGU4Yy0z
ZTU5LThiNmQtNTE3NjdmYTE2N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEI91SB2f2oLhGBNTxijHiiI3Ubf5qyGp1k0VsgM2+WUJBzwvQ+mtWB/
BYSJC2/CKVFSlN5l5IsPi3+5Qy2NLJmmzxda+rLydKI/n9MVJ+j5JKyXKVr5rQqb
s2qFSCGkfwqgeiwMnBj5lu3ewERd0GoMeNWJ2oKSbnKT+6de92v104z+i2bWiJZC
0S5rJee1P2rai+Yq/n5emtnR2PJGFbsRuC/D7dTgnCnjV82+WjHXiQqGcCvgOVB6
t1z+E+kUJ9RKgfV8ZY0oCbiYffVQmuhs90hAMk+N/UWEci0GJuqgscOssEUpMLrY
fBm/uGpQnFSOlTB8USd9ZpoQSlim5qg=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:42:33 2026 by rpki-client