Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5b2d95d-47ed-3fba-a148-e53ed605830b.roa
File:                     c5b2d95d-47ed-3fba-a148-e53ed605830b.roa (raw, json)
Hash identifier:          Bq9n7pQZ/ivAf06TUUe2ucf8eTnWiQ9HDk2hAt0Ey0I=
Subject key identifier:   57:24:58:BB:A1:BD:33:61:35:5D:D7:CD:02:C8:A9:07:EC:3B:C3:64
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7CD0490819580FD7E42C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5b2d95d-47ed-3fba-a148-e53ed605830b.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     202
IP address blocks:        130.174.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:cd:04:90:81:95:80:fd:7e:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=1ba0ed0d-e479-4b69-a53c-e48c7c1451a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:82:b6:28:09:98:e2:e7:75:2d:8a:67:6d:
                    d2:b2:10:45:1b:9b:5d:ae:05:97:bc:47:35:5f:76:
                    22:6b:83:1c:65:18:0f:f7:d1:bc:78:a3:f0:5f:c3:
                    35:d5:d4:26:91:27:cc:9f:8e:06:b2:99:4e:ae:ff:
                    9f:61:5d:aa:eb:9a:d9:77:c1:13:be:f1:a1:47:be:
                    45:05:38:22:39:62:db:b6:8c:23:f2:6f:95:b3:39:
                    02:0f:3d:15:53:88:4c:4b:63:ce:9a:d5:bf:66:4b:
                    86:61:45:b3:f6:9e:5f:1e:a8:0a:1c:23:39:ba:6d:
                    4a:1d:06:cd:e0:af:53:5e:11:84:2e:45:c1:80:64:
                    72:94:9a:52:32:14:d8:40:25:20:0e:55:57:f6:dc:
                    48:fd:78:08:7e:cd:7d:fc:b0:72:4c:3c:97:8f:8f:
                    c6:f9:41:35:af:78:df:cb:30:8a:7f:52:f1:a5:70:
                    0f:5b:ae:58:7b:9a:9a:ae:bc:ed:73:9a:a9:da:c1:
                    60:4e:e3:64:16:14:a3:d4:b7:ba:d0:7f:35:ec:6a:
                    57:8c:9b:a0:e8:ec:75:49:23:5a:5f:1b:cb:22:7f:
                    38:35:5c:ca:8c:6b:9c:d9:92:85:50:9f:1c:6c:1c:
                    98:89:da:37:ac:f5:17:c2:b3:19:9e:b0:e3:be:c7:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:24:58:BB:A1:BD:33:61:35:5D:D7:CD:02:C8:A9:07:EC:3B:C3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5b2d95d-47ed-3fba-a148-e53ed605830b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:5a:28:9d:e9:24:79:39:f7:77:5d:60:1a:82:04:a4:e7:
         94:86:18:d7:0f:21:ba:2f:1d:7d:dd:52:82:10:fc:e0:eb:89:
         f0:d4:5c:84:10:13:fe:3f:99:d9:78:2f:0d:21:61:9a:b5:ff:
         a1:a0:f1:e0:ed:8e:a1:c1:68:0e:fd:a9:ac:50:a4:7a:7e:c9:
         97:0c:4b:80:ed:18:ac:5e:01:b1:92:ba:a1:4f:0e:2b:f4:2a:
         b9:73:0d:89:79:6c:bf:2a:ee:06:53:ac:6b:a8:a0:c3:87:4d:
         07:d7:f1:b4:98:e2:25:3b:56:7d:95:e4:cf:38:85:ce:d4:99:
         fd:6c:89:3d:cc:f0:a9:52:8e:13:b9:ab:97:73:06:bf:7a:cb:
         e4:26:17:ab:b5:e7:4c:3f:27:07:2c:b4:8d:3f:3d:59:82:29:
         1f:59:0b:0c:05:90:72:16:76:0e:e9:0a:22:93:e2:bc:cc:37:
         57:f2:da:ce:2b:46:86:d2:ed:37:1f:33:57:ff:9f:c9:8f:c0:
         b6:b7:5c:51:59:83:50:40:1f:14:cc:12:86:09:94:73:03:8f:
         b0:2e:cc:4f:12:15:52:bd:31:d3:bd:2a:33:31:b1:58:74:6d:
         91:97:c5:d0:b0:e6:b5:5e:80:e0:94:5b:c8:1f:6d:3f:f4:c6:
         d5:f7:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:08 2025 by rpki-client