Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a67a2c9-d3a9-3264-8742-d6f3e5a488d0.roa
File:                     9a67a2c9-d3a9-3264-8742-d6f3e5a488d0.roa (raw, json)
Hash identifier:          h4pOeYWZnLUZ4Hi0h1UVqngphzbO3XDWnvmocCGSA6w=
Subject key identifier:   BF:C9:ED:3F:9B:C4:02:50:1F:07:1E:0F:8F:40:F0:8C:66:B8:1B:EB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF717755B692CFDCD08C7D280
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a67a2c9-d3a9-3264-8742-d6f3e5a488d0.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3360
IP address blocks:        130.174.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:75:5b:69:2c:fd:cd:08:c7:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=350d27c2-a979-4711-b742-76076be2f1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:f0:da:dd:d1:85:3e:2f:12:75:37:9e:b8:
                    ee:12:70:51:87:08:07:34:df:8e:b1:3a:82:0a:b7:
                    fc:9c:09:64:5b:a5:ea:46:7d:a9:62:3a:1b:b3:4b:
                    be:3a:50:c6:6f:60:52:ce:08:9b:1c:1f:b2:26:13:
                    5c:82:f9:78:61:da:ab:c7:ab:ac:1b:ec:58:8d:17:
                    6a:df:7d:6b:96:31:41:40:fa:61:ff:b2:b1:ab:86:
                    06:6b:13:f6:9d:1d:ae:5a:96:b8:9a:0f:65:82:60:
                    c1:f8:0a:fa:36:0f:7b:66:8a:38:0d:8d:6c:90:40:
                    7b:e1:44:fb:cd:78:3a:52:56:76:d3:eb:10:ab:9c:
                    da:4f:f2:89:90:3b:30:64:a5:fc:dd:eb:97:00:52:
                    ad:69:6e:4c:57:bc:75:5f:b2:3c:de:3f:44:db:4a:
                    fe:bf:04:e6:04:86:e7:53:42:61:54:84:25:39:7b:
                    41:ac:5e:b5:06:0f:73:e4:a1:b7:d6:cd:e6:9a:91:
                    f7:f4:5b:2e:65:61:b8:cb:bf:cc:c8:8d:d5:ba:40:
                    55:57:c0:1b:06:0b:7b:2f:52:24:43:d1:01:0f:f4:
                    fe:18:ab:1a:c4:24:c3:3f:3f:59:a5:fe:42:f3:f1:
                    41:3d:65:68:37:8a:af:55:3b:1c:2e:88:9d:7e:7f:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C9:ED:3F:9B:C4:02:50:1F:07:1E:0F:8F:40:F0:8C:66:B8:1B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a67a2c9-d3a9-3264-8742-d6f3e5a488d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:d6:b2:13:c5:06:ee:e2:8d:04:ee:18:b5:b9:07:08:c2:
         4c:8a:04:b1:a3:8b:d9:ad:6b:5e:42:a6:32:ab:7e:fd:35:df:
         0e:33:f2:56:5b:14:49:71:99:5e:3d:9d:23:00:0a:77:c1:3e:
         63:ee:f5:fe:5a:02:96:ea:85:c8:2c:54:36:8d:fc:eb:c7:bb:
         b9:25:94:b9:91:d2:fa:84:9a:d7:7b:8f:c2:8f:58:7b:49:1b:
         c5:87:24:c2:4a:ed:65:4c:40:48:b9:21:ff:1f:7f:be:ca:85:
         77:77:36:72:0e:21:73:fa:d0:1a:d6:d5:ec:65:6a:65:0e:40:
         0c:a4:c9:04:4b:2b:9c:b7:cc:af:2e:35:f6:05:ab:b5:13:f4:
         ab:94:f6:3d:9e:b2:57:ed:a6:d7:ea:ce:7f:c4:7d:92:d0:76:
         31:10:ec:f3:ca:e7:33:fb:3a:3f:7c:ac:f1:f7:89:4b:29:b7:
         55:f1:e8:35:52:65:dd:9b:4f:81:f5:87:e2:72:7d:e5:1f:a2:
         01:3b:b1:5a:47:f2:af:1d:9e:78:cd:80:88:35:8e:6c:0a:55:
         d6:af:1f:2e:45:e1:c2:ea:91:7d:e2:8e:f0:75:9a:61:c4:32:
         a5:dc:e8:6a:d4:44:a5:58:27:b3:fc:e3:69:29:d9:19:8d:64:
         0a:da:a3:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3VbaSz9zQjH0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
MzUwZDI3YzItYTk3OS00NzExLWI3NDItNzYwNzZiZTJmMWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhObw2t3RhT4vEnU3nrjuEnBRhwgHNN+OsTqC
Crf8nAlkW6XqRn2pYjobs0u+OlDGb2BSzgibHB+yJhNcgvl4Ydqrx6usG+xYjRdq
331rljFBQPph/7Kxq4YGaxP2nR2uWpa4mg9lgmDB+Ar6Ng97Zoo4DY1skEB74UT7
zXg6UlZ20+sQq5zaT/KJkDswZKX83euXAFKtaW5MV7x1X7I83j9E20r+vwTmBIbn
U0JhVIQlOXtBrF61Bg9z5KG31s3mmpH39FsuZWG4y7/MyI3VukBVV8AbBgt7L1Ik
Q9EBD/T+GKsaxCTDPz9Zpf5C8/FBPWVoN4qvVTscLoidfn97OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/J7T+bxAJQHwceD49A8IxmuBvrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWE2N2EyYzktZDNhOS0z
MjY0LTg3NDItZDZmM2U1YTQ4OGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwH1rITxQbu4o0E7hi1uQcIwkyKBLGji9mta15CpjKrfv013w4z8lZb
FElxmV49nSMACnfBPmPu9f5aApbqhcgsVDaN/OvHu7kllLmR0vqEmtd7j8KPWHtJ
G8WHJMJK7WVMQEi5If8ff77KhXd3NnIOIXP60BrW1exlamUOQAykyQRLK5y3zK8u
NfYFq7UT9KuU9j2eslftptfqzn/EfZLQdjEQ7PPK5zP7Oj98rPH3iUspt1Xx6DVS
Zd2bT4H1h+JyfeUfogE7sVpH8q8dnnjNgIg1jmwKVdavHy5F4cLqkX3ijvB1mmHE
MqXc6GrURKVYJ7P842kp2RmNZArao+k=
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:04:26 2026 by rpki-client