Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5fc118c-ca52-32a5-9086-19c6b9b777ea.roa
File:                     e5fc118c-ca52-32a5-9086-19c6b9b777ea.roa (raw, json)
Hash identifier:          UXj0tZpihYYZHzWTjr4Nbrmkh1Uo9uaospvb9DQ+T5s=
Subject key identifier:   9C:23:EA:ED:20:22:3B:4E:CA:AE:68:E4:A2:C4:90:EA:0D:1A:E3:5D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF71767266C96D5BD2A0A6A20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5fc118c-ca52-32a5-9086-19c6b9b777ea.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        130.174.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:67:26:6c:96:d5:bd:2a:0a:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=ce699317-40bc-4589-b208-6e9dc4f1a2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:5d:c4:8b:41:59:3a:4c:ff:ae:07:9b:59:
                    a6:82:e1:74:de:67:42:e1:74:5e:ef:f4:8d:64:82:
                    8a:55:ed:a9:02:21:2f:0c:5c:0b:b3:12:d8:db:da:
                    17:86:bd:63:97:e5:50:e9:01:83:bf:76:de:49:ce:
                    97:a9:c5:8d:14:6b:0d:49:95:26:a9:aa:4b:59:ea:
                    d1:46:b5:72:d7:72:31:84:7a:d2:6b:c9:6b:7c:56:
                    56:37:77:5c:ee:4f:09:3f:29:df:0c:1e:32:a3:8f:
                    77:8f:e2:aa:03:1b:c8:1b:6c:f1:95:21:78:f7:f4:
                    26:28:dc:64:92:74:7c:be:8a:b2:70:f6:de:1f:a8:
                    b1:c7:22:e0:c1:d3:71:22:4e:ea:25:cc:09:ce:23:
                    c3:55:85:c6:b1:0e:8a:75:96:9d:90:56:c8:43:4a:
                    a1:da:63:ef:21:43:d8:16:ec:fd:65:7f:03:eb:5f:
                    f7:61:96:42:53:39:d8:ee:b2:0f:d6:3d:b7:c7:2a:
                    4d:0d:37:e3:60:5d:71:a5:c2:e4:1e:d2:d1:94:df:
                    ab:8d:cf:4c:d1:51:65:b4:9a:7b:b4:ab:13:39:81:
                    0d:df:ee:cf:27:fd:d5:d1:2b:30:33:ad:e3:1b:ee:
                    01:a3:bb:93:08:40:12:34:13:f1:92:91:da:e3:7d:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:23:EA:ED:20:22:3B:4E:CA:AE:68:E4:A2:C4:90:EA:0D:1A:E3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5fc118c-ca52-32a5-9086-19c6b9b777ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:14:e3:53:3f:92:ef:47:f1:23:1c:f3:48:2c:a0:14:e0:29:
         45:29:bb:fd:67:f0:28:2f:01:9f:0f:7b:23:fc:29:f7:8e:7e:
         c0:95:1c:0d:5a:d0:e0:ae:8b:0d:d9:fe:58:ad:40:3a:5f:aa:
         87:8e:51:2f:a1:46:93:86:43:cd:06:aa:77:8d:5c:cf:da:40:
         4f:d5:93:82:55:2f:38:4a:6c:13:df:ea:eb:05:ea:a4:b9:bd:
         df:be:ab:e9:a7:0a:53:2a:4b:40:1d:ac:eb:32:65:ef:f5:08:
         85:a0:2e:7b:70:9e:6e:07:67:a5:0f:21:f1:e0:6f:f6:28:91:
         a6:1e:e6:35:0a:a6:df:ee:c4:07:18:48:f8:ac:73:fa:5b:b3:
         03:bb:ac:a1:5e:ab:1d:b0:44:61:fa:36:4e:37:e4:c4:bc:16:
         9e:11:8b:fc:19:9d:45:74:79:35:68:be:83:e4:d4:41:ef:90:
         d3:9c:ab:1d:2c:f0:f3:95:38:fb:6d:da:37:06:61:7a:bb:02:
         0a:02:3c:74:59:9f:f9:36:4c:aa:7c:c6:db:3e:55:6e:c8:15:
         ae:8b:be:c6:d3:34:33:9b:1d:72:20:87:ea:23:e3:85:2c:f7:
         41:2d:aa:6a:44:9a:ed:ab:76:60:c4:9e:31:39:07:42:d5:9f:
         5f:a5:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:48:29 2026 by rpki-client