Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa
File:                     f112e98d-5990-34ef-99a3-61d46f80f713.roa (raw, json)
Hash identifier:          18Yg+ag4+LjwAgZUk52xKbFU9pe1l/3XATRfilYlVD8=
Subject key identifier:   66:A7:47:47:18:BB:D9:92:52:1B:93:DA:E0:BF:5D:86:E1:E4:23:80
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FD320A1C0F278B3FA1980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3360
IP address blocks:        130.174.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d3:20:a1:c0:f2:78:b3:fa:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=e48c2fd0-b63d-4366-9cc8-92e4a54bbe96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:bd:4b:ac:05:a2:34:77:1d:10:be:f6:ad:
                    0b:1b:bb:66:75:16:14:bc:66:b7:bf:5e:db:e0:6c:
                    ec:e8:b0:e5:40:de:67:4a:58:c8:33:c1:b2:c7:66:
                    95:1f:2c:66:64:f1:b7:28:1f:90:3b:88:d9:08:3f:
                    ca:55:00:84:29:a3:08:98:65:c6:eb:96:a8:46:b2:
                    3a:6f:03:af:de:0d:af:48:3e:56:01:c4:c9:59:55:
                    95:8d:db:49:d5:35:05:01:77:44:4d:42:19:4d:9a:
                    04:83:bc:3e:80:c7:90:36:ac:4e:c2:d0:42:a3:24:
                    a0:a0:1b:59:d3:42:4d:2c:df:61:87:93:1b:e1:ed:
                    36:7e:9d:cd:d2:50:c7:64:9a:37:04:da:7e:7f:ba:
                    cc:f6:19:48:03:34:33:a5:e0:bc:de:fb:b9:c2:97:
                    50:b3:a0:70:fd:65:5c:aa:87:36:2a:14:8b:18:cd:
                    11:10:ce:cd:82:d8:f5:da:fb:04:da:12:47:ae:36:
                    cd:60:10:02:e9:db:e2:2b:9d:22:53:ee:20:a9:a7:
                    af:eb:40:01:d5:c4:f3:91:cc:b2:7a:3d:bd:dd:bf:
                    97:9b:a5:f6:1f:fd:47:e8:60:5b:09:61:26:90:72:
                    6a:eb:01:6d:11:1e:96:98:31:fc:48:b4:2c:63:b5:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:47:47:18:BB:D9:92:52:1B:93:DA:E0:BF:5D:86:E1:E4:23:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:0d:2c:72:1d:58:b7:eb:61:a6:c9:a6:23:55:fa:34:7c:
         43:88:30:14:ac:66:24:56:70:32:71:6d:8a:5f:3e:68:b0:40:
         8d:64:a9:e8:ab:df:90:4a:f7:b2:f5:81:49:37:b1:b1:77:14:
         0c:7d:9a:77:1e:58:4e:ba:61:3f:14:8f:73:a5:6a:c0:44:55:
         e9:ba:fe:22:bf:d6:1e:a1:e5:06:94:5a:a6:5e:e1:f4:3a:fd:
         27:e1:ec:e6:ef:e4:18:1e:bc:dc:a7:c1:0c:2b:e2:65:23:0a:
         e2:c8:f9:da:cb:d3:f0:80:65:ac:fa:d8:8f:cb:f2:94:1b:62:
         33:4e:d4:21:70:c0:e5:17:09:7b:d0:55:48:df:6d:e3:23:65:
         58:0a:f3:80:44:10:5f:14:df:d6:b0:03:28:2a:fa:04:4e:ae:
         ca:fe:00:0f:4a:4b:8c:7f:0c:f1:30:d8:61:50:f6:8d:bf:52:
         6d:f2:b6:7e:4c:2e:2a:17:46:d7:a7:1a:82:43:7a:cc:49:bf:
         a9:87:13:58:ef:27:73:c7:cd:18:06:dc:ed:cd:b7:ed:26:ad:
         fb:45:0f:e8:7c:d3:36:2d:a7:61:08:ab:9d:95:24:42:48:3e:
         8a:9f:91:d6:f5:ec:04:82:40:1d:43:86:57:47:d9:4c:31:52:
         49:dc:59:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9MgocDyeLP6GYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZTQ4YzJmZDAtYjYzZC00MzY2LTljYzgtOTJlNGE1NGJiZTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ69S6wFojR3HRC+9q0LG7tmdRYUvGa3v17b
4Gzs6LDlQN5nSljIM8Gyx2aVHyxmZPG3KB+QO4jZCD/KVQCEKaMImGXG65aoRrI6
bwOv3g2vSD5WAcTJWVWVjdtJ1TUFAXdETUIZTZoEg7w+gMeQNqxOwtBCoySgoBtZ
00JNLN9hh5Mb4e02fp3N0lDHZJo3BNp+f7rM9hlIAzQzpeC83vu5wpdQs6Bw/WVc
qoc2KhSLGM0REM7Ngtj12vsE2hJHrjbNYBAC6dviK50iU+4gqaev60AB1cTzkcyy
ej293b+Xm6X2H/1H6GBbCWEmkHJq6wFtER6WmDH8SLQsY7U0gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGanR0cYu9mSUhuT2uC/XYbh5COAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjExMmU5OGQtNTk5MC0z
NGVmLTk5YTMtNjFkNDZmODBmNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADL0DSxyHVi362GmyaYjVfo0fEOIMBSsZiRWcDJxbYpfPmiwQI1kqeir
35BK97L1gUk3sbF3FAx9mnceWE66YT8Uj3OlasBEVem6/iK/1h6h5QaUWqZe4fQ6
/Sfh7Obv5BgevNynwQwr4mUjCuLI+drL0/CAZaz62I/L8pQbYjNO1CFwwOUXCXvQ
VUjfbeMjZVgK84BEEF8U39awAygq+gROrsr+AA9KS4x/DPEw2GFQ9o2/Um3ytn5M
LioXRtenGoJDesxJv6mHE1jvJ3PHzRgG3O3Nt+0mrftFD+h80zYtp2EIq52VJEJI
Poqfkdb17ASCQB1DhldH2UwxUkncWXI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:03 2026 by rpki-client