Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd035e1a-8de9-3d13-9282-ed756e4cf908.roa
File:                     fd035e1a-8de9-3d13-9282-ed756e4cf908.roa (raw, json)
Hash identifier:          koeVMFJsllaUe0oJpK0SZnIQKoej06/wMaL2Zzq6Mrc=
Subject key identifier:   EC:37:91:2E:62:9D:6E:F7:B1:FA:92:9C:E1:41:BF:2C:A7:B2:8B:F2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D53405B74BCC1831A91000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd035e1a-8de9-3d13-9282-ed756e4cf908.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     203
IP address blocks:        130.174.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:34:05:b7:4b:cc:18:31:a9:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=01672d6a-6e15-4be7-b3ce-5541f565f358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:c4:12:c2:1f:6b:98:7f:ee:a4:81:35:a3:
                    20:ed:de:46:52:e8:71:2e:76:d7:f9:7b:7f:94:5c:
                    55:d7:8b:fc:17:e1:ba:4c:3a:3c:9e:2c:1f:a7:bf:
                    b3:bb:c4:56:be:b4:fe:5a:15:3e:b3:9e:13:74:69:
                    21:b2:36:83:da:8d:e5:11:fe:e2:6b:89:36:20:f8:
                    16:ff:6d:5e:41:99:ff:0e:fc:aa:94:f9:23:7d:d5:
                    60:60:53:77:95:86:e9:a8:12:c8:2d:01:bc:cb:22:
                    24:45:6d:6e:b0:51:85:95:5d:f9:c1:1e:0f:d4:43:
                    35:07:f6:ca:7a:37:95:72:09:3a:37:11:f8:9c:f6:
                    e5:e8:8d:2f:4c:2c:98:10:81:2d:55:fc:b7:ee:53:
                    03:fa:1f:85:a2:1a:90:11:51:d9:3f:68:1b:ed:20:
                    cc:d8:a7:f2:d0:a6:ee:fb:e2:b5:37:43:be:c3:6e:
                    51:cb:dd:91:83:de:97:94:f7:59:1f:6e:34:ed:00:
                    72:8c:ca:6c:9a:fd:c5:a9:85:24:07:d9:b1:27:e5:
                    56:d4:71:55:84:fa:7b:ce:0c:59:af:d4:c1:9f:73:
                    b2:a2:26:c1:67:82:e1:b2:40:63:f7:79:e5:3d:ac:
                    0b:30:4f:ce:37:3b:78:1c:49:19:13:83:de:d4:54:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:37:91:2E:62:9D:6E:F7:B1:FA:92:9C:E1:41:BF:2C:A7:B2:8B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd035e1a-8de9-3d13-9282-ed756e4cf908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:5f:ee:ab:a8:a3:0e:fd:61:5a:76:f9:33:35:f9:de:77:
         5c:13:22:41:aa:96:d4:38:21:ab:bf:95:5c:2c:1f:20:d9:27:
         94:de:77:24:db:62:6b:d3:7e:61:8f:b3:3c:f2:68:d1:76:ba:
         d3:72:70:76:4c:43:c9:f6:a2:8b:0c:80:da:8f:c5:bf:d0:13:
         bf:5b:4f:f7:66:27:b6:3c:27:80:a0:57:f2:0d:ca:ba:3e:6d:
         41:3d:17:53:42:bb:35:32:af:b1:11:ae:23:c5:34:f2:3a:09:
         53:2a:6d:3c:7d:12:d2:06:a3:f2:b1:fa:05:58:11:24:72:f0:
         2e:9d:eb:f9:85:a8:e6:4c:10:fb:dc:52:c7:96:27:e3:db:8a:
         94:6b:e4:33:37:44:cf:93:d6:d5:16:d7:40:e8:12:6e:76:55:
         61:ff:71:7a:95:0c:cb:04:83:73:1f:a6:f8:62:2b:56:d1:7e:
         e4:cf:fd:f7:97:43:a0:44:c6:c3:3a:a6:10:8b:20:98:62:6a:
         ef:a5:53:5b:b0:d8:a9:be:d6:c9:83:18:36:d6:1d:41:f1:be:
         76:23:fa:a1:41:3b:bb:f7:78:5f:39:58:77:f2:59:c6:26:d1:
         5e:f1:99:42:50:26:fb:68:74:60:bd:0b:6a:c3:64:e8:45:df:
         6a:ad:5d:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111TQFt0vMGDGpEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MDE2NzJkNmEtNmUxNS00YmU3LWIzY2UtNTU0MWY1NjVmMzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+nEEsIfa5h/7qSBNaMg7d5GUuhxLnbX+Xt/
lFxV14v8F+G6TDo8niwfp7+zu8RWvrT+WhU+s54TdGkhsjaD2o3lEf7ia4k2IPgW
/21eQZn/DvyqlPkjfdVgYFN3lYbpqBLILQG8yyIkRW1usFGFlV35wR4P1EM1B/bK
ejeVcgk6NxH4nPbl6I0vTCyYEIEtVfy37lMD+h+FohqQEVHZP2gb7SDM2Kfy0Kbu
++K1N0O+w25Ry92Rg96XlPdZH2407QByjMpsmv3FqYUkB9mxJ+VW1HFVhPp7zgxZ
r9TBn3OyoibBZ4LhskBj93nlPawLME/ONzt4HEkZE4Pe1FRzbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOw3kS5inW73sfqSnOFBvyynsovyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmQwMzVlMWEtOGRlOS0z
ZDEzLTkyODItZWQ3NTZlNGNmOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJqX+6rqKMO/WFadvkzNfned1wTIkGqltQ4Iau/lVwsHyDZJ5TedyTb
YmvTfmGPszzyaNF2utNycHZMQ8n2oosMgNqPxb/QE79bT/dmJ7Y8J4CgV/INyro+
bUE9F1NCuzUyr7ERriPFNPI6CVMqbTx9EtIGo/Kx+gVYESRy8C6d6/mFqOZMEPvc
UseWJ+PbipRr5DM3RM+T1tUW10DoEm52VWH/cXqVDMsEg3MfpvhiK1bRfuTP/feX
Q6BExsM6phCLIJhiau+lU1uw2Km+1smDGDbWHUHxvnYj+qFBO7v3eF85WHfyWcYm
0V7xmUJQJvtodGC9C2rDZOhF32qtXVU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:40 2026 by rpki-client