Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa
File:                     dd9f908b-e4fc-32a0-b013-15842bd0459e.roa (raw, json)
Hash identifier:          MYBlRrCENNVCtWURvAiZFC1Lynkk4MKAdQN6M5xJojA=
Subject key identifier:   66:A6:FD:64:74:5F:8D:8E:E9:E6:C8:BA:55:93:20:AC:14:B1:88:D9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7B6F9D57C936F2CE07D60
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     203
IP address blocks:        130.174.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b6:f9:d5:7c:93:6f:2c:e0:7d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=96761c2d-17aa-4c80-9e4e-b607adcfc081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9b:8a:17:4f:e3:fd:ea:c0:fc:1d:bb:38:89:
                    67:18:d8:fa:17:1b:9f:68:12:01:40:9e:f0:89:b1:
                    46:a2:b3:d7:b2:5b:78:65:d4:63:e5:52:3b:46:07:
                    a5:7c:06:9e:b6:64:91:84:41:9e:6a:84:6a:64:de:
                    16:10:c0:7d:57:09:c3:cf:25:ac:1d:b1:b2:68:35:
                    91:ac:b3:8d:c4:f6:c3:a1:71:19:ae:23:77:21:f9:
                    49:43:2b:51:d8:d2:4c:fd:1d:b0:a3:65:b1:4b:72:
                    2c:6b:44:37:30:66:80:da:45:bb:2d:04:f5:5a:ef:
                    ad:13:5e:68:a9:8a:9e:15:fe:84:29:bd:ac:d9:68:
                    58:5a:50:5a:b1:af:45:8e:e6:bf:10:f3:7a:69:07:
                    07:d5:f5:59:f7:11:0c:01:0a:ea:c9:4f:1e:60:10:
                    ee:65:3c:cc:85:b1:27:01:88:84:b1:46:02:ad:00:
                    ef:40:95:b8:2f:e1:26:49:5a:3c:89:e2:a5:c1:79:
                    d3:12:05:6d:ac:45:0f:d4:eb:d3:b1:bc:0c:ad:8b:
                    ed:6b:bd:7a:2c:c3:5f:56:59:a4:53:2c:ad:06:1a:
                    40:88:a5:86:c0:f9:60:40:65:8d:76:50:04:65:9b:
                    93:62:3b:bf:b5:2e:4a:f3:01:43:87:9f:97:4d:98:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A6:FD:64:74:5F:8D:8E:E9:E6:C8:BA:55:93:20:AC:14:B1:88:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:72:65:1f:e4:da:f6:b0:c8:5c:f3:ff:ac:17:0c:8e:0f:
         f8:02:41:33:8b:1b:fd:b6:a5:e6:9e:bf:78:92:50:82:be:77:
         1a:05:7f:37:c5:7d:9d:12:41:53:71:26:06:96:e4:6d:93:ae:
         c4:b4:40:63:8b:93:d8:08:58:43:61:2d:d0:58:89:68:23:be:
         07:ac:8f:7b:49:d5:3d:2e:3c:c3:1e:45:be:87:33:70:40:6a:
         d9:49:28:cd:27:44:d4:57:d5:dc:87:30:7f:d0:10:ab:30:47:
         13:23:73:9d:f8:f7:30:4f:97:d5:75:22:18:d7:2d:8a:3f:f7:
         8e:ec:04:b3:bc:c6:11:00:d4:b9:3a:d7:40:2d:7d:40:3c:c3:
         32:26:47:e1:b9:e7:2c:a6:ca:89:14:50:87:41:0a:9a:b9:fd:
         a8:4c:19:08:83:30:f3:02:ff:dc:dd:5b:2c:f5:eb:6c:8d:57:
         97:6a:56:90:3c:e2:87:f8:b6:5d:e7:e5:71:cd:7f:b0:0a:f2:
         6f:ac:de:f6:ed:19:a5:ff:f5:f4:63:11:24:24:f9:59:96:6b:
         e1:d8:05:45:a0:dc:e8:82:0f:db:de:8e:24:15:22:38:c3:61:
         fc:90:da:32:94:0d:d4:7b:8c:67:4b:20:e0:40:c2:05:d6:a7:
         98:9f:a3:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97b51XyTbyzgfWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
OTY3NjFjMmQtMTdhYS00YzgwLTllNGUtYjYwN2FkY2ZjMDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5uKF0/j/erA/B27OIlnGNj6FxufaBIBQJ7w
ibFGorPXslt4ZdRj5VI7RgelfAaetmSRhEGeaoRqZN4WEMB9VwnDzyWsHbGyaDWR
rLONxPbDoXEZriN3IflJQytR2NJM/R2wo2WxS3Isa0Q3MGaA2kW7LQT1Wu+tE15o
qYqeFf6EKb2s2WhYWlBasa9Fjua/EPN6aQcH1fVZ9xEMAQrqyU8eYBDuZTzMhbEn
AYiEsUYCrQDvQJW4L+EmSVo8ieKlwXnTEgVtrEUP1OvTsbwMrYvta716LMNfVlmk
UyytBhpAiKWGwPlgQGWNdlAEZZuTYju/tS5K8wFDh5+XTZjjdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGam/WR0X42O6ebIulWTIKwUsYjZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGQ5ZjkwOGItZTRmYy0z
MmEwLWIwMTMtMTU4NDJiZDA0NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyjcmUf5Nr2sMhc8/+sFwyOD/gCQTOLG/22peaev3iSUIK+dxoFfzfF
fZ0SQVNxJgaW5G2TrsS0QGOLk9gIWENhLdBYiWgjvgesj3tJ1T0uPMMeRb6HM3BA
atlJKM0nRNRX1dyHMH/QEKswRxMjc5349zBPl9V1IhjXLYo/947sBLO8xhEA1Lk6
10AtfUA8wzImR+G55yymyokUUIdBCpq5/ahMGQiDMPMC/9zdWyz162yNV5dqVpA8
4of4tl3n5XHNf7AK8m+s3vbtGaX/9fRjESQk+VmWa+HYBUWg3OiCD9vejiQVIjjD
YfyQ2jKUDdR7jGdLIOBAwgXWp5ifo8U=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:27:34 2025 by rpki-client