Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c455adff-3e8e-3227-995f-2b7e767669f2.roa
File:                     c455adff-3e8e-3227-995f-2b7e767669f2.roa (raw, json)
Hash identifier:          0z3TmGghryptzJslRZ+WnRqSAWpJzX9Ub4qmtJuHSFU=
Subject key identifier:   C0:3A:56:AA:58:9D:2F:F3:E3:E5:CF:6D:14:E1:7E:83:F0:FD:24:7E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D535E4E790122C5053BBC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c455adff-3e8e-3227-995f-2b7e767669f2.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        130.174.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:35:e4:e7:90:12:2c:50:53:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=3fa53b51-4f8f-469b-a8c1-ef21051a4e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:2f:90:e4:92:2a:76:83:86:09:fa:2c:dc:
                    fc:d0:4f:2a:2f:e6:97:9c:71:65:37:ba:97:74:23:
                    fa:c3:27:94:5a:4f:1b:52:a3:e4:99:af:eb:d0:04:
                    96:c7:2e:14:71:1a:e2:37:a0:da:16:10:e2:b4:2e:
                    2a:44:ea:cc:3b:d4:b2:c0:09:85:23:f5:50:85:d0:
                    a3:34:85:b8:ef:01:5c:a4:59:6c:fa:3f:ad:6b:07:
                    56:f0:c1:6b:8b:f5:c2:c9:ef:1a:db:d8:0b:37:c6:
                    36:90:b0:54:13:ef:11:d1:42:04:48:84:ed:e5:5c:
                    23:a5:c0:dd:4a:78:06:aa:a6:fb:6d:e7:ad:8d:27:
                    0c:42:eb:20:49:60:c2:cb:49:ec:f3:ce:3b:25:69:
                    00:54:75:1c:05:af:c1:4e:ac:ee:7c:3a:bf:53:56:
                    96:1e:6e:98:18:6b:5c:30:9c:fd:8b:b9:31:76:f4:
                    7b:7f:9f:fd:19:97:2a:33:bc:a9:42:d0:86:04:ab:
                    2e:50:bc:8c:24:a7:99:21:0c:82:8c:ac:c4:8d:b6:
                    0f:66:2c:7c:78:47:2a:16:7f:8c:a8:6c:fd:54:49:
                    99:b7:d7:7d:db:dd:81:d7:59:91:94:1b:98:9d:44:
                    88:9f:7c:94:46:25:fa:80:55:49:ac:74:95:ff:16:
                    c5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3A:56:AA:58:9D:2F:F3:E3:E5:CF:6D:14:E1:7E:83:F0:FD:24:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c455adff-3e8e-3227-995f-2b7e767669f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:91:f7:1b:40:58:6d:58:ef:30:ee:10:df:f4:83:64:61:ed:
         4a:4b:e3:ba:39:06:18:5f:78:68:87:84:c6:71:a1:a7:f8:aa:
         42:46:72:c7:99:b6:c1:68:c6:0a:87:8b:77:e7:eb:c1:ad:11:
         70:cc:78:00:bc:8f:77:1f:dc:c5:9e:55:99:59:6c:86:00:9d:
         d4:e0:23:0e:f1:4a:e7:0d:29:35:db:b2:ae:a8:90:c1:87:c6:
         b7:50:57:e8:bd:b7:f6:a1:8d:93:e2:91:1d:78:a2:0c:89:29:
         01:00:44:e5:27:12:ee:77:6a:4b:10:55:92:b5:a1:2b:ec:d5:
         c9:d1:fa:1a:a6:56:b6:bf:a2:6d:d5:14:c3:9a:94:32:ff:42:
         d6:c3:b8:66:d6:e2:6a:6f:83:d5:ae:f7:cd:0c:56:88:cd:bc:
         36:fa:4f:00:6c:9f:d3:1a:98:8a:8a:02:f3:0f:60:5e:25:e2:
         bc:4a:a6:df:cf:3c:7e:b3:6e:9d:15:bf:18:c2:c5:03:6e:2d:
         92:ef:61:be:a6:d4:e7:24:f4:a2:2f:8e:94:3e:98:74:04:00:
         a5:74:77:db:24:b0:85:15:f7:dd:08:54:4e:b6:6a:cd:64:54:
         64:34:54:3b:07:34:af:f5:d2:ca:33:e0:dc:58:e0:fd:4e:78:
         27:72:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:21 2026 by rpki-client