Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecfff5b-dfb6-3bc6-b52b-f1ec355474ab.roa
File:                     cecfff5b-dfb6-3bc6-b52b-f1ec355474ab.roa (raw, json)
Hash identifier:          TzmorGoAXFBsDfSf3wd/nhfYWet9ah1/uByoIvOc7zM=
Subject key identifier:   50:98:FF:A9:DE:79:20:BF:B5:AE:3C:DA:E1:84:32:0B:1A:F9:51:24
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D5362EA7EB468264595E80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecfff5b-dfb6-3bc6-b52b-f1ec355474ab.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        130.174.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:36:2e:a7:eb:46:82:64:59:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=3af0f04d-24f1-402d-9529-34b78ef5ea35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c5:ec:79:00:b4:67:f8:0e:59:f7:00:e5:f7:
                    e3:de:ab:9c:7a:7a:f3:1a:ac:80:d2:d7:3c:67:f9:
                    bd:56:d6:ef:89:a4:68:89:a7:da:28:d9:5c:32:0b:
                    c0:89:d7:3c:48:e8:be:ed:67:97:46:34:80:33:f5:
                    60:39:52:e8:cd:59:96:f9:22:e2:b4:1a:f9:d0:b6:
                    c4:2a:00:cc:54:8c:e9:94:f6:c7:22:fd:92:1f:bd:
                    5f:2e:6f:06:df:b7:21:75:88:b8:27:00:aa:ab:6e:
                    2d:21:43:c4:03:aa:d4:fd:98:8f:86:f0:0a:61:b3:
                    d0:ae:d0:e8:35:64:fc:75:c5:9b:b7:32:ff:55:d5:
                    95:f2:e8:24:d0:72:5b:49:02:2b:4f:b8:c0:6e:90:
                    92:a0:a5:c9:fd:08:cd:c4:37:83:7b:1a:a8:fd:35:
                    cb:4d:5b:60:ce:3b:2e:c1:61:85:dd:27:81:50:58:
                    1f:26:c2:53:ae:75:f7:25:ec:4a:32:79:f2:7d:a9:
                    ed:5e:86:7a:20:25:40:b0:ee:cc:64:83:77:65:a4:
                    12:d1:fc:72:2f:11:28:1b:55:6c:a7:06:f1:d8:56:
                    92:f1:e5:76:50:e7:2d:90:55:39:00:af:2e:34:f8:
                    93:af:bf:24:8c:87:bc:06:41:ee:7a:b7:57:01:ed:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:98:FF:A9:DE:79:20:BF:B5:AE:3C:DA:E1:84:32:0B:1A:F9:51:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecfff5b-dfb6-3bc6-b52b-f1ec355474ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:40:9e:bb:9f:c2:c4:cb:10:2b:2a:ca:90:c7:0d:90:58:cc:
         e8:92:08:b1:42:03:79:74:69:aa:b4:47:db:7f:7e:c7:18:f4:
         f4:10:a7:52:07:b2:13:60:95:e8:7c:60:7e:25:f0:58:61:54:
         f5:52:3e:21:66:5c:da:83:7a:6d:d5:63:ea:5e:b5:8d:71:e9:
         74:ac:ad:10:0c:40:b2:4d:74:46:be:31:b4:9f:f6:7d:33:37:
         8e:6e:01:e6:62:fa:cb:ce:f4:ae:1f:5d:f6:cf:95:82:dc:4a:
         27:0a:65:a5:ad:40:ef:8e:34:93:8a:1d:cd:19:85:1a:00:db:
         5a:f3:87:71:6c:a8:84:17:52:11:09:a9:72:bc:80:64:93:4f:
         94:3b:98:7e:44:e2:fe:a0:4e:8d:3a:c8:0b:d3:18:85:ad:dd:
         82:d1:11:c0:43:d4:3e:32:15:0f:db:46:05:0b:33:10:0d:7c:
         93:1a:4a:54:78:cb:92:18:03:d8:ff:fa:34:09:60:4a:a9:55:
         3a:05:9a:08:10:1f:bc:22:87:d5:ee:9b:0c:98:8b:53:39:9a:
         cd:e1:34:7f:0c:3d:a2:8a:f4:91:0f:9f:29:2e:22:e2:7c:0b:
         c8:49:ff:fb:9c:7d:af:c5:92:3d:bf:b7:73:89:06:76:6b:df:
         46:2a:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:13 2026 by rpki-client