Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa
File:                     14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa (raw, json)
Hash identifier:          5czbZcCRc8P7nrc/oucfQz8h69Lxo/9PQSn+qGO7cnk=
Subject key identifier:   42:D3:0F:63:ED:26:F6:C1:02:81:4C:E5:36:3D:A1:3B:E2:74:5D:66
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584596335A6C4B69B826EEB39300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     203
IP address blocks:        130.174.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:5a:6c:4b:69:b8:26:ee:b3:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=4a36f598-c572-47fb-aa45-6396f8ae1f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:b8:aa:0d:ed:c4:d9:cb:14:c6:60:68:f1:
                    8b:b4:bc:ba:ab:7d:2c:7b:e7:39:47:f0:77:00:bd:
                    c2:a0:2e:d8:ad:dd:74:b9:60:47:33:a5:59:a4:2d:
                    7c:a5:d5:a0:03:5f:ae:f9:ae:87:c9:72:ca:12:7b:
                    44:64:b6:f5:2c:90:f1:46:36:06:29:09:54:24:85:
                    88:65:53:ab:a8:a0:89:43:57:01:fb:6d:ad:81:38:
                    78:11:db:77:1c:14:0d:f9:ff:a1:96:f2:bd:6a:f4:
                    66:c5:df:ba:9d:07:91:71:a1:ce:36:aa:ef:73:df:
                    5c:01:cb:3b:25:4a:ab:9f:b4:95:ea:22:d6:78:da:
                    1a:96:ef:3b:f2:c7:80:75:34:05:31:6f:be:58:6e:
                    e8:65:20:9b:60:4b:b7:2d:50:8d:53:ee:d4:8e:d7:
                    fb:9b:70:87:e8:4b:0e:ef:60:78:9c:bf:6d:19:ea:
                    22:2d:9c:5a:40:74:53:3b:8c:8a:63:50:a3:86:8d:
                    f3:c0:1b:08:8a:8f:16:18:1f:fc:6d:b9:bc:bf:57:
                    03:2d:a4:d1:aa:3f:b3:43:19:97:58:af:87:41:5f:
                    7a:15:6a:5b:97:a6:f5:80:cf:53:73:42:d7:2c:d5:
                    41:85:60:77:28:9a:7b:94:91:ec:6c:1f:b7:0a:1b:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D3:0F:63:ED:26:F6:C1:02:81:4C:E5:36:3D:A1:3B:E2:74:5D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:be:46:b3:fc:3e:ae:f3:31:35:69:f3:a8:62:c1:b7:71:55:
         a4:22:c2:c1:1c:ba:87:db:f7:64:a1:30:d0:d3:9b:2f:84:b6:
         5f:42:b7:7e:d5:fe:9b:18:5b:67:83:36:46:a9:6c:da:73:86:
         bc:48:e1:91:21:8d:69:1b:cd:72:e5:87:24:bb:9e:79:4e:26:
         e8:99:aa:77:29:e4:6b:bc:8e:11:0a:a3:2b:bc:dc:69:67:ed:
         d2:53:f7:e7:e6:cb:5c:8c:29:ce:86:96:99:80:78:60:bf:c3:
         39:22:d9:7d:de:7d:4d:1c:6e:ea:f4:7c:22:a7:46:8a:a6:28:
         6c:f3:e2:a3:28:f7:e0:4c:65:60:a8:18:09:00:ee:fd:43:97:
         57:c1:e0:87:57:ed:75:c4:c2:e9:38:cd:05:45:f9:ba:29:5f:
         72:14:b8:4d:df:46:01:d5:91:39:e8:84:33:d7:a9:3f:55:1d:
         56:d0:1e:8a:f0:6a:2a:8c:c5:87:37:97:00:14:40:ed:4b:9f:
         9c:00:21:45:99:d8:56:46:01:a2:f2:58:85:40:d1:f1:15:27:
         79:37:7e:c5:16:19:62:c9:de:06:78:de:37:42:36:a6:02:b8:
         54:e7:c9:9a:96:6c:af:52:b3:a4:bf:30:85:29:48:72:7d:91:
         be:ea:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:36 2024 by rpki-client on console-fra.rpki-client.org