Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa
File:                     bf90fca5-79a9-3e91-8066-10aabfcc4701.roa (raw, json)
Hash identifier:          4KTwIdwTQkWgo5fbX4mX9uJNZ3oHkzX6XNNQZYqnjJE=
Subject key identifier:   18:AF:3A:EF:3F:71:12:E5:A8:03:E5:D3:14:0F:8E:7F:D3:CE:EA:50
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D533F9C30A9D8829B3B1C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     202
IP address blocks:        130.174.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:33:f9:c3:0a:9d:88:29:b3:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=ea13bf1b-213c-4052-95ec-acd34d14851f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:d8:a7:cd:ce:66:c2:cb:81:02:7e:d9:5d:
                    d6:b2:f9:97:52:52:2c:9a:75:8d:e3:63:24:f4:98:
                    02:fb:b8:7b:a0:47:9b:45:00:d1:d3:7d:08:5b:fc:
                    53:0f:a5:d9:32:17:79:0c:c9:c1:d6:04:f3:c1:db:
                    f8:32:91:99:99:cc:05:bc:51:be:87:d8:44:eb:64:
                    04:11:bd:30:29:25:d9:d2:bd:0d:c0:00:9b:db:4e:
                    ea:aa:6e:cc:4d:61:87:7e:7e:c4:77:c7:fc:9a:06:
                    3f:dd:11:6d:1d:a1:da:ea:49:ab:a7:a6:af:01:59:
                    39:eb:1e:22:83:ec:58:f5:a1:fc:58:d5:ee:4f:14:
                    4c:cf:e6:fa:c1:89:b5:88:e0:7e:8d:21:0f:a7:3a:
                    68:ad:5d:b9:58:5c:aa:f6:77:b3:c4:5f:dd:c6:81:
                    38:2f:1c:47:6e:4d:c9:c4:cf:c1:81:9c:24:36:aa:
                    41:b8:1b:f8:79:3f:cc:61:75:b8:73:d1:df:d3:47:
                    44:62:8d:9f:11:66:08:d2:2f:38:08:3c:62:13:ff:
                    4d:5e:85:7e:22:df:03:72:73:22:7c:4b:8f:bb:09:
                    86:54:8a:6d:f4:72:51:67:03:35:42:dd:db:cf:8e:
                    0f:bc:d2:4e:48:e9:fe:f2:65:31:50:6e:6e:49:03:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AF:3A:EF:3F:71:12:E5:A8:03:E5:D3:14:0F:8E:7F:D3:CE:EA:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:60:31:95:94:e1:da:76:c3:f7:03:69:b0:3f:d4:90:dd:e9:
         27:bf:2e:a5:ca:d3:bc:01:c7:db:32:d4:a9:d0:7c:c8:c9:06:
         7a:48:49:70:ec:b7:4b:3d:41:78:76:fc:10:cc:be:23:d0:e6:
         e0:e1:98:d8:18:16:2c:a7:62:53:54:12:9e:7f:a9:94:82:15:
         44:fc:b4:c3:8a:ff:4b:67:5d:10:9b:92:fa:44:5a:ae:34:c5:
         d9:4a:63:3d:1f:99:98:60:1f:a0:fc:78:b6:c8:b9:bc:6a:69:
         a2:ce:af:0b:59:c3:de:5e:91:6e:02:e5:dc:ef:f0:7c:90:5c:
         73:71:d9:85:93:ce:f0:f8:f1:97:41:7c:75:53:b5:eb:7c:8e:
         c3:84:f7:30:62:68:fe:f1:05:5d:90:c8:7d:b1:e9:25:a1:aa:
         0c:19:6d:38:ae:fb:9d:a7:c3:9b:a9:4f:80:5e:46:f3:a4:06:
         6d:62:f9:0d:fe:a9:b4:17:64:9f:50:bd:8f:13:ac:08:76:f7:
         ae:e6:85:d7:a2:7d:d3:93:15:74:74:51:fc:39:1c:e8:23:c0:
         ba:71:2d:cf:97:a8:b9:29:b7:a6:ed:70:4e:ff:33:9e:f1:ae:
         ab:63:75:1e:10:c4:9b:86:89:81:e3:f6:ba:dc:12:b1:9a:69:
         79:2f:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:37 2026 by rpki-client