Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa
File:                     baac2399-6e65-3ceb-8e43-1020ddff7256.roa (raw, json)
Hash identifier:          yLy7eXpIs7vMXNbewAYCSISLvAe7lH4mRljxlvp6IrU=
Subject key identifier:   B2:13:F0:79:B8:F3:4E:1A:9E:4F:F5:5E:E5:1A:5D:D0:44:0C:3F:2B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E1E4498212C810BF788FC63E8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     203
IP address blocks:        130.174.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:98:21:2c:81:0b:f7:88:fc:63:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=289e3866-49d1-4b37-a169-e93f903633b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:01:b8:98:99:4c:d5:90:19:0e:ed:7c:ab:
                    08:76:b6:c4:bf:34:a8:32:f0:3a:8d:eb:c9:d9:63:
                    6a:14:f3:d5:55:f5:8f:c1:56:27:e3:8e:23:6e:fd:
                    f4:c0:42:de:e1:ed:91:80:55:84:fd:e7:80:40:f2:
                    4d:16:dc:12:75:67:78:13:62:b8:a2:2e:1c:ee:c0:
                    40:c5:3b:af:ae:78:d5:0f:df:52:47:c4:e0:5c:86:
                    47:f4:29:21:08:27:99:74:c9:c2:42:de:7b:15:d3:
                    6d:bf:57:07:1e:41:f3:fc:79:b5:2f:f7:6a:a7:51:
                    5c:8e:7c:33:54:6b:79:a1:40:2a:64:96:2c:6d:3b:
                    7d:2c:77:71:da:93:5d:39:f3:69:3b:cc:fc:0e:87:
                    1b:ec:be:35:01:9b:da:c6:cf:56:79:07:32:14:d8:
                    ea:f4:38:ab:9e:70:30:ba:d0:d4:ba:50:f0:12:ba:
                    58:63:8d:b3:b5:3c:26:57:d6:09:48:85:2f:83:3d:
                    9f:e4:4e:3b:09:c7:c9:1c:30:d8:95:93:fa:f0:d6:
                    b4:83:5e:4a:f0:db:b9:b1:4b:7e:fb:7a:c3:9d:cd:
                    f0:a4:e5:6c:56:cb:6d:13:8f:c4:e2:8b:83:99:4b:
                    21:9c:07:08:3d:25:d4:ed:62:af:e1:f3:21:a6:1b:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:13:F0:79:B8:F3:4E:1A:9E:4F:F5:5E:E5:1A:5D:D0:44:0C:3F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:3c:98:6a:18:ce:86:7c:45:e7:02:df:09:98:1a:00:30:
         4e:9f:a9:e5:fb:53:8c:d1:0c:8f:a4:78:67:ec:9d:03:39:40:
         2d:e6:dc:db:84:1d:b1:97:e5:97:d5:a7:c5:be:ad:67:71:a8:
         66:f0:8f:82:64:43:e4:e8:9e:c1:7c:6e:6b:e1:c7:d2:78:08:
         49:8e:d8:2a:1f:9a:ce:ad:d0:96:46:d9:69:e2:e3:ac:27:41:
         2e:9d:19:c0:57:89:2e:8b:18:32:ee:6e:b5:35:ad:df:bd:31:
         ab:0e:79:05:7a:24:b8:21:b3:ac:af:5f:e8:5d:59:79:60:3f:
         2f:1a:82:cf:73:5c:11:ab:ea:91:0c:c2:c5:bf:90:06:2f:b0:
         f5:0e:e7:51:00:b2:85:29:da:21:b4:49:1a:55:06:e6:24:e0:
         ae:41:ff:f4:65:8d:32:1b:32:53:c5:22:a6:5d:a3:75:be:c6:
         4e:e7:d6:65:69:5c:ee:ca:ea:f3:cf:33:5c:d3:2c:bc:87:29:
         10:21:9f:37:d3:b5:71:13:d9:80:ac:38:c8:d8:17:53:4b:cb:
         d1:84:21:25:f4:cc:0d:fe:19:50:c7:72:ea:20:0b:0f:09:c7:
         57:ba:7f:06:50:c1:1f:72:cd:2c:27:60:4e:87:01:34:3a:9d:
         f4:ce:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:54 2026 by rpki-client