Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa
File:                     bfb6b141-6a57-3161-831c-725299707029.roa (raw, json)
Hash identifier:          2Jjyx7AgkrA50zTDSz0hKxQhwAv4/kjHsYMmwzET5No=
Subject key identifier:   FD:97:22:54:C6:90:03:60:BE:3F:84:92:9B:59:CC:8F:56:69:3A:3E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7C9580E8B8D8A9F0F2C80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     3360
IP address blocks:        130.174.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:c9:58:0e:8b:8d:8a:9f:0f:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=2607d285-6725-49d8-bb55-4116e8dfeda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:24:93:3e:57:28:be:a4:07:a2:86:a4:0b:
                    a1:71:fe:13:67:e5:c2:8b:cb:09:0c:c6:b5:94:2c:
                    6c:dc:a9:99:5a:e3:93:ab:c1:e9:31:5e:f3:72:f2:
                    32:85:a1:c7:be:17:50:5b:28:5c:85:fe:20:30:c2:
                    7b:fa:bf:96:26:9f:5c:44:19:03:e4:80:49:fe:16:
                    18:82:f1:42:29:ec:ec:c7:a1:16:32:52:70:83:5d:
                    55:86:e3:19:d7:42:c4:0d:97:04:60:a0:a6:00:54:
                    ab:2f:db:00:91:e7:78:3b:03:68:e5:0e:5e:5f:d9:
                    93:31:62:ae:cf:87:b8:f7:bb:f4:dc:3b:8b:33:e7:
                    56:ca:01:77:8d:44:80:90:4c:28:01:ff:8a:80:6b:
                    cd:f4:9e:46:73:26:65:bc:d8:19:7b:56:44:0b:83:
                    70:ec:05:3d:86:50:2f:51:dd:8e:88:a3:bf:a5:97:
                    90:09:7e:e3:ec:0d:7b:20:8e:19:00:78:6f:30:60:
                    a9:fa:9a:c9:64:f7:8d:22:2a:59:76:84:f8:7a:94:
                    c0:75:11:63:8d:08:5e:49:81:70:1a:53:51:f0:89:
                    7a:d6:10:58:e7:7c:38:1b:c5:1c:9c:50:e7:d1:49:
                    4e:31:f5:a4:49:e4:42:21:b6:a0:dd:07:14:69:21:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:97:22:54:C6:90:03:60:BE:3F:84:92:9B:59:CC:8F:56:69:3A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:39:1b:71:fb:83:2a:20:37:40:c0:59:d3:05:25:80:1e:c5:
         a1:a0:d9:2e:e2:8c:77:ce:10:2c:02:36:6f:31:df:25:17:e2:
         a3:4e:4d:5e:a3:2d:7f:4a:13:bf:11:8c:83:b9:ab:5c:5e:00:
         55:fa:b1:7b:92:90:ff:48:44:05:c5:6f:3b:0f:2e:6e:4e:a8:
         1f:80:d5:cd:9b:b0:8d:5e:aa:0f:53:ed:cc:42:24:a6:6e:2f:
         c4:f0:cc:62:24:68:df:c0:55:be:4f:2d:8f:10:63:5c:84:43:
         d3:7d:d6:98:1e:90:3c:39:2f:32:17:14:e6:2f:2c:4c:a3:00:
         e2:27:aa:9b:ce:5f:64:3a:fe:e0:23:74:93:e2:5b:84:a8:c7:
         4c:8a:76:ca:ff:9d:76:96:9a:68:fd:90:2b:b1:d7:44:c9:40:
         22:b4:b4:81:19:94:58:ed:a9:5a:72:b9:5f:d5:a6:0c:6f:48:
         0a:26:82:da:2a:1b:0e:17:14:b6:3c:7b:4b:74:a1:03:a6:26:
         bc:f1:f3:fa:e8:59:8b:52:9c:dd:90:87:b9:7f:b5:36:a3:be:
         54:e6:71:47:6e:ff:60:cb:74:3c:91:a4:d5:89:cf:00:b6:f6:
         5b:00:53:51:ee:9f:82:ca:e3:6f:3f:ad:d0:3f:7c:57:03:12:
         11:b9:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:44:00 2025 by rpki-client