Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ecd9fea-4e8c-3e59-8b6d-51767fa167c1.roa
File:                     8ecd9fea-4e8c-3e59-8b6d-51767fa167c1.roa (raw, json)
Hash identifier:          7jIYw6Ea6ei1wxD9WnoQVbXsebX4phPbN3N4AZgcL8I=
Subject key identifier:   62:6B:D0:FB:DF:13:76:20:41:C6:8A:F0:18:79:A4:26:E4:57:FF:48
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FD23E9A11B6C5FB4CA400
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ecd9fea-4e8c-3e59-8b6d-51767fa167c1.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3360
IP address blocks:        130.174.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d2:3e:9a:11:b6:c5:fb:4c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=e5edd3bd-f22c-4a5e-ad7f-2bc8af1ce7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:8c:d1:fe:11:1a:cf:ac:ca:d2:5c:3b:b9:
                    9a:eb:de:3a:e2:77:32:13:2d:af:16:ad:04:ac:ce:
                    b5:48:a8:68:96:de:50:94:5a:25:15:ab:35:be:fd:
                    43:d2:71:0e:4f:ee:30:53:ca:2f:26:ed:5b:c8:ea:
                    6f:07:13:d6:d7:ed:b2:93:59:77:c9:f8:4c:5d:dc:
                    95:0f:fe:5e:d9:db:db:c4:e5:71:e1:15:b5:8f:31:
                    ef:0a:c2:4e:f2:f0:ce:41:28:b9:73:92:f4:fc:3a:
                    33:f1:d6:b9:3f:0a:53:bd:d9:8d:96:fa:2f:a5:67:
                    12:a5:a9:c1:b4:91:a9:eb:00:06:8a:60:50:07:9d:
                    54:c8:0f:d6:0f:c2:23:4e:05:8d:83:9e:7c:d2:35:
                    66:c4:53:a0:bf:e4:bd:4f:a8:46:4d:ca:44:64:e9:
                    85:17:57:bc:d5:d8:f1:a2:9d:84:e7:7d:12:7b:f5:
                    1c:21:da:4c:ad:00:25:7d:b0:6e:3a:b9:bc:01:b5:
                    da:eb:24:26:6e:71:38:9a:07:d3:c7:21:bd:47:f8:
                    39:ca:bc:07:d1:ba:25:c9:f0:cd:c6:83:47:7a:64:
                    48:6d:d8:17:0f:c3:8f:53:59:a4:c3:3b:28:10:f8:
                    eb:52:b6:23:19:53:84:9f:e4:fb:2b:94:3c:87:f8:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6B:D0:FB:DF:13:76:20:41:C6:8A:F0:18:79:A4:26:E4:57:FF:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ecd9fea-4e8c-3e59-8b6d-51767fa167c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:3c:ce:eb:93:e0:5a:0a:4b:a0:5a:0e:38:af:0a:90:38:
         72:c8:f2:21:60:cf:69:ab:e4:0d:ef:75:05:3e:67:b2:be:19:
         c2:ac:0b:09:e3:c8:39:0a:10:1a:fa:07:ed:40:fc:bc:79:07:
         f4:f3:12:8b:b1:70:f0:f4:e2:2c:8c:f6:28:a7:9e:7c:c2:b0:
         aa:d6:3b:51:75:06:20:11:23:69:c2:1e:78:a7:89:e7:85:be:
         7d:bb:b5:6a:9b:99:29:06:08:ba:8c:cd:cf:6b:f3:e3:b6:ba:
         e3:ab:e7:12:84:22:99:a2:89:c7:1e:db:75:08:4a:c5:75:18:
         ff:cb:c8:0c:65:48:5f:3e:a2:49:e2:a1:0c:80:00:48:b3:40:
         a0:39:d5:69:7a:86:d9:fc:71:b9:a8:a9:ef:57:72:e8:ff:e4:
         7a:87:04:6b:df:d8:87:69:66:66:5b:8c:d6:4e:ac:7f:a6:77:
         33:a3:e0:5f:fa:e6:84:a9:62:18:a4:5f:43:8b:67:97:f8:14:
         25:f2:5f:d6:ee:01:75:bb:a8:c5:32:64:bc:31:3e:5b:b3:10:
         e4:d1:66:f6:09:7b:dd:fc:9c:e9:26:ed:1e:87:0f:f8:43:6b:
         7b:23:b0:dd:83:46:32:d7:33:ae:4a:f8:90:42:92:8d:58:8b:
         d8:ad:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:40 2026 by rpki-client