Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa
File:                     98a28125-0165-31f7-a265-0615bd186c6e.roa (raw, json)
Hash identifier:          rWEgQGyryk8PhMGD/BL+WkUI6yyhhckTpCtryc3eFFk=
Subject key identifier:   A7:3E:6E:B9:88:02:5E:B4:12:14:BB:16:BE:1D:A0:EF:72:EF:16:64
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FD66CB3D58A4AC156F500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        130.174.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d6:6c:b3:d5:8a:4a:c1:56:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=2c8d9f80-20b6-42b0-a168-0fbbdde9f73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f4:44:37:35:32:39:33:06:ae:80:e5:37:ff:
                    56:e2:d9:8a:54:b1:86:28:38:61:c6:e3:d4:85:ae:
                    78:9f:00:e9:4e:75:bf:1f:ec:51:04:3b:6c:3a:1b:
                    15:dc:bf:b9:ef:82:86:e8:89:33:9d:ea:6b:c1:62:
                    19:7d:f3:4e:35:de:08:b9:78:bf:d2:c2:c3:69:dc:
                    bd:03:68:43:9b:ec:a5:df:32:2a:58:41:53:8b:8b:
                    70:bf:fb:95:93:e6:00:6e:75:74:4b:3d:af:dc:df:
                    72:0d:e9:7d:5d:35:0e:1e:3a:8a:e0:b1:69:37:a4:
                    7f:d7:fa:a0:21:10:93:90:a6:d8:c1:f3:5a:b7:a0:
                    d7:23:ab:e4:5a:2b:2a:25:13:64:0f:18:22:d5:05:
                    7c:71:d0:69:65:87:94:cd:30:b2:16:82:08:b4:1f:
                    dc:78:c6:43:3b:59:04:c7:95:96:d0:4d:d8:57:45:
                    c6:ec:47:fd:60:fe:66:47:47:d2:71:f8:fd:e6:75:
                    da:02:d4:51:b3:29:b3:89:cc:be:8f:ea:14:23:dc:
                    50:1a:88:51:c4:44:d8:da:76:76:c8:4f:0c:f5:34:
                    69:7e:8b:0a:7b:3d:b0:50:06:67:14:b8:9d:16:5d:
                    d9:bc:5c:85:bb:3d:a0:e4:af:71:2b:e9:0e:fd:5a:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3E:6E:B9:88:02:5E:B4:12:14:BB:16:BE:1D:A0:EF:72:EF:16:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2b:07:2e:47:31:30:aa:1d:c0:67:cf:da:87:2a:4c:18:80:
         00:48:83:b6:84:ff:80:ef:59:41:39:61:6f:b4:d8:e0:2a:2b:
         0f:b9:1d:13:c0:9a:68:22:bf:17:59:fc:68:a9:f5:fd:87:f7:
         1c:f6:cc:f8:38:0f:17:c3:4e:f4:d3:c4:84:64:b1:b4:24:6e:
         3e:de:ec:80:d1:32:10:9d:91:ca:d2:e6:3b:37:51:3f:8e:5f:
         25:62:1b:26:62:bd:5e:a4:89:0a:c9:33:4c:2e:aa:4e:5b:6f:
         65:50:f3:c4:b0:c8:37:cf:43:52:13:b3:12:a5:14:6f:15:0c:
         32:24:91:79:bd:7e:56:cb:5c:c1:30:75:b7:37:bf:57:35:dc:
         03:6b:12:4c:6b:90:7a:83:5a:93:2c:e3:37:a3:db:00:92:03:
         61:ef:9b:04:51:32:2e:4d:21:ac:e2:84:31:0b:6a:c4:d0:07:
         d5:49:c0:07:b6:5d:e5:ad:1e:8a:83:ce:c6:8b:be:f5:de:17:
         30:d4:e9:45:41:80:7a:bc:2c:dc:5e:05:a7:74:46:17:d8:84:
         7e:66:0f:50:00:9f:88:28:2f:97:ae:90:0c:ee:0f:cf:46:b3:
         bc:13:70:b6:90:38:17:4f:b5:20:bc:e3:66:3a:a7:df:3d:c9:
         88:49:85:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9Zss9WKSsFW9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MmM4ZDlmODAtMjBiNi00MmIwLWExNjgtMGZiYmRkZTlmNzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfRENzUyOTMGroDlN/9W4tmKVLGGKDhhxuPU
ha54nwDpTnW/H+xRBDtsOhsV3L+574KG6IkzneprwWIZffNONd4IuXi/0sLDady9
A2hDm+yl3zIqWEFTi4twv/uVk+YAbnV0Sz2v3N9yDel9XTUOHjqK4LFpN6R/1/qg
IRCTkKbYwfNat6DXI6vkWisqJRNkDxgi1QV8cdBpZYeUzTCyFoIItB/ceMZDO1kE
x5WW0E3YV0XG7Ef9YP5mR0fScfj95nXaAtRRsymzicy+j+oUI9xQGohRxETY2nZ2
yE8M9TRpfosKez2wUAZnFLidFl3ZvFyFuz2g5K9xK+kO/VpywQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKc+brmIAl60EhS7Fr4doO9y7xZkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOThhMjgxMjUtMDE2NS0z
MWY3LWEyNjUtMDYxNWJkMTg2YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFErBy5HMTCqHcBnz9qHKkwYgABIg7aE/4DvWUE5YW+02OAqKw+5HRPA
mmgivxdZ/Gip9f2H9xz2zPg4DxfDTvTTxIRksbQkbj7e7IDRMhCdkcrS5js3UT+O
XyViGyZivV6kiQrJM0wuqk5bb2VQ88SwyDfPQ1ITsxKlFG8VDDIkkXm9flbLXMEw
dbc3v1c13ANrEkxrkHqDWpMs4zej2wCSA2HvmwRRMi5NIazihDELasTQB9VJwAe2
XeWtHoqDzsaLvvXeFzDU6UVBgHq8LNxeBad0RhfYhH5mD1AAn4goL5eukAzuD89G
s7wTcLaQOBdPtSC842Y6p989yYhJhVM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:58 2026 by rpki-client