Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb5342e9-1be1-34a0-bd36-0f717da400d8.roa
File:                     eb5342e9-1be1-34a0-bd36-0f717da400d8.roa (raw, json)
Hash identifier:          t0heugk5mVswsGJRdGFfZMdLWNaD85R6CM3Xj8RaaqA=
Subject key identifier:   B0:1B:9F:5B:0B:A7:B3:69:D8:69:45:6B:0C:A6:33:C0:0F:B4:E0:D8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7B43442EF73495844E580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb5342e9-1be1-34a0-bd36-0f717da400d8.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     203
IP address blocks:        130.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b4:34:42:ef:73:49:58:44:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=e82e2d48-3157-4a4d-8581-73668f6f6253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:a7:0c:02:ae:2b:43:ee:4d:0f:18:c0:fc:
                    f8:f3:26:82:46:cc:79:71:84:75:c1:f7:9d:1b:bc:
                    d9:ea:23:c5:1f:85:16:7d:15:fe:36:84:6f:4e:db:
                    b0:ee:7e:bc:2e:aa:3a:70:62:63:fc:19:ab:f1:84:
                    5d:ae:a9:07:9c:3c:26:f1:dd:b5:a2:46:46:cb:14:
                    65:b0:97:3b:4c:36:6d:d6:41:e2:5a:33:2a:b8:3e:
                    cd:b2:49:0c:6a:a0:da:e8:b3:eb:16:d6:e5:52:8a:
                    f3:50:9b:a1:1c:5e:3d:e3:dc:db:7e:62:50:d5:ff:
                    82:d9:cc:64:25:69:d1:63:5b:65:2f:72:05:05:67:
                    2d:63:97:e9:37:0c:7a:3a:c5:af:37:34:6c:bd:83:
                    70:c0:c4:25:fd:8f:26:19:40:42:bf:69:e9:5c:57:
                    00:81:af:52:7c:d6:44:72:3c:e6:e1:43:12:c4:4b:
                    5b:d3:dc:29:ff:07:b1:b7:da:8c:d9:2b:f6:84:32:
                    78:7b:18:ca:c5:75:3a:5a:e6:bf:2a:c6:73:74:b3:
                    f8:4b:89:bc:72:ac:44:c7:07:03:0e:6f:e0:08:c7:
                    3a:96:b7:b6:b2:ae:94:1e:52:46:29:5d:0c:a6:d8:
                    f0:7e:30:5a:b4:d3:cf:a4:17:dd:b1:7b:84:88:c6:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:9F:5B:0B:A7:B3:69:D8:69:45:6B:0C:A6:33:C0:0F:B4:E0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb5342e9-1be1-34a0-bd36-0f717da400d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:76:1f:3e:78:37:af:ff:43:ea:01:63:32:3f:ac:91:40:
         b4:af:e4:3e:80:52:ce:99:ae:fc:3f:80:00:7d:08:0a:7c:01:
         63:93:c4:ad:f3:58:25:9d:60:20:31:cc:bb:21:5b:a6:30:63:
         0b:fa:1d:81:9e:05:da:e6:2b:38:f4:d4:83:e2:d8:a0:e1:4b:
         d2:6f:36:79:03:60:5d:bb:46:39:4e:a2:36:07:3d:a0:ed:27:
         63:5c:f7:29:76:b1:31:7e:eb:8e:88:0a:f0:36:56:55:aa:15:
         f9:3e:61:b8:e5:05:20:37:15:a5:aa:63:cc:4a:92:a4:29:dd:
         3f:05:21:7a:d9:44:6f:07:0e:05:a0:ca:7b:10:ac:8e:c1:80:
         f6:34:73:47:81:f2:d1:42:92:7e:79:2f:e3:59:df:fb:45:a4:
         79:2e:a1:e6:f7:2e:15:1e:fd:45:2c:f1:04:5e:c2:34:16:b2:
         4d:5c:28:bb:3b:31:1f:69:f3:03:2f:47:0a:b1:28:37:97:f0:
         7b:26:d3:13:cf:5e:54:bd:e5:e5:d0:3e:8e:aa:74:7c:74:0f:
         15:f7:1d:a4:6f:7d:62:1d:cb:f2:2e:35:df:68:8f:89:9f:08:
         34:ee:9f:62:5a:36:ff:b5:46:d2:2f:49:6d:38:7f:ba:d6:3d:
         52:60:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:38:04 2025 by rpki-client