Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90e8d75c-c4c3-3b58-a17b-2b9e2edce2a4.roa
File:                     90e8d75c-c4c3-3b58-a17b-2b9e2edce2a4.roa (raw, json)
Hash identifier:          NIbXsbBgvWOykTJNSDZ3096yqQ5FfNDrslS1fpgYCuc=
Subject key identifier:   D0:55:2F:7A:8D:3E:B0:62:37:BF:4F:E9:34:21:59:EB:12:0F:7E:55
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FD6E7BE882019EB962240
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90e8d75c-c4c3-3b58-a17b-2b9e2edce2a4.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     202
IP address blocks:        130.174.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d6:e7:be:88:20:19:eb:96:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=34731bbe-9975-4f9a-8b45-af460f39d63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:b9:db:6c:12:1d:64:f5:88:84:a2:b6:34:
                    bc:42:f0:84:2b:44:0d:c5:c8:2f:ff:84:c3:44:9e:
                    bd:8d:65:41:8b:a2:07:13:29:56:85:a9:f1:0c:a7:
                    9f:0a:30:84:d6:45:1a:ab:94:84:34:4c:91:62:01:
                    72:eb:d1:6f:d4:a2:62:64:38:6f:e1:c5:6f:3f:c3:
                    a3:5c:58:3d:99:c9:b5:6f:39:f2:c8:74:42:75:9b:
                    be:ff:aa:a6:fe:d3:ff:32:be:e0:9e:fb:bc:d9:2c:
                    8f:70:99:53:b7:6b:3e:96:1b:88:34:be:9b:4d:1c:
                    95:0f:11:08:e7:46:22:e0:68:c6:64:29:2e:6f:2d:
                    7a:00:24:c6:c0:1c:38:b1:fb:9d:b9:a7:89:65:69:
                    77:37:f3:09:96:de:66:ab:83:24:a9:a6:01:cc:59:
                    ef:76:7b:09:c6:4e:e5:48:ba:79:30:0d:0d:34:09:
                    73:42:f4:3b:80:e5:b1:8b:66:8c:5f:67:86:06:a0:
                    98:c5:71:b9:04:1d:19:3e:73:82:cc:38:5f:f3:05:
                    d3:a3:31:cc:ad:92:1d:7a:d2:1e:dd:f6:70:02:6c:
                    52:a4:f9:c2:a7:50:f0:5d:24:b9:08:cc:6c:e2:62:
                    6e:5a:70:12:7f:d2:b4:1b:fe:9c:fe:27:a7:b6:50:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:55:2F:7A:8D:3E:B0:62:37:BF:4F:E9:34:21:59:EB:12:0F:7E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90e8d75c-c4c3-3b58-a17b-2b9e2edce2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:68:80:9b:5d:8f:4c:82:6f:07:df:54:ce:4f:b2:c6:4e:f5:
         88:d5:03:9a:b6:b6:f3:c8:c2:c3:62:07:31:39:89:c2:79:d6:
         a3:12:88:e2:04:23:59:cd:72:d8:46:ab:7c:c1:d3:cb:3c:f3:
         4a:f1:30:f3:75:79:f1:45:e2:4d:dd:e3:e5:22:53:7f:55:72:
         1e:a7:da:1f:18:20:1e:0b:7a:99:b8:94:54:33:95:ae:e1:4d:
         c8:d4:ef:65:6d:b1:20:b5:6d:44:c9:85:c0:c9:15:6e:24:23:
         28:a8:e2:bc:db:7a:57:e5:29:b6:89:b1:a1:3f:63:92:c6:39:
         67:a6:5a:e9:4f:96:07:d0:a4:75:de:ee:6e:6c:ce:0b:4a:75:
         79:9e:86:d0:92:1e:f8:71:7c:93:03:bd:97:8c:70:38:ab:53:
         3b:1c:0a:f6:68:a9:dc:a0:01:60:8f:30:99:6a:61:14:c4:04:
         f1:1f:16:0b:a2:23:f6:ee:a1:66:2b:5d:75:5e:c6:7b:4a:67:
         91:25:f5:58:4a:09:a5:7f:fe:dc:8c:79:68:d2:b1:c4:44:5a:
         f2:43:15:1d:eb:47:8b:2d:95:f0:8a:ad:4d:5e:13:6f:b7:f1:
         2e:30:13:a7:3e:ad:61:9e:ee:29:87:2f:87:d3:94:8a:77:de:
         8f:d7:66:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:47 2026 by rpki-client