Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aea4bd98-aff1-364a-905e-fa72b0142204.roa
File:                     aea4bd98-aff1-364a-905e-fa72b0142204.roa (raw, json)
Hash identifier:          lfQtFeCvvKbFjIong1N83ucJXjg7H22nYUS7++0F/V0=
Subject key identifier:   57:BE:2F:2F:1C:73:5E:57:3C:C1:D7:54:2A:BE:E5:4D:FC:6A:7B:63
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459368C343C8E73AF370CABAC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aea4bd98-aff1-364a-905e-fa72b0142204.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     203
IP address blocks:        130.174.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c3:43:c8:e7:3a:f3:70:ca:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=632e6a19-864e-4c79-b153-8a22c2f1815a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:eb:ae:81:13:9d:2f:28:98:4e:56:67:a7:
                    40:e5:83:b7:d0:25:e9:ba:07:d2:28:54:af:66:68:
                    37:b9:86:51:18:14:fa:66:c4:4a:b2:d9:8b:c4:0b:
                    a9:62:49:65:a6:64:63:8c:a4:28:a1:91:e4:77:fc:
                    88:50:82:d4:89:07:0f:17:d1:3c:b4:86:81:5d:ff:
                    23:b5:56:1f:cb:25:df:ac:b0:53:dc:cc:ef:7d:15:
                    35:25:e4:6e:de:05:52:ed:ca:2e:00:e5:47:56:cf:
                    a6:dc:8a:76:0d:97:1f:6a:84:87:1a:95:04:39:4a:
                    4d:aa:18:f4:85:aa:ff:a9:d6:cf:89:40:db:6f:8d:
                    a8:04:65:13:f4:c1:3a:6c:19:c8:e1:b0:28:dd:38:
                    ee:dc:d1:7f:90:7d:86:ee:43:df:7b:40:2c:31:58:
                    2c:be:27:fe:6a:8b:cb:22:75:32:46:65:e2:4f:a4:
                    50:d3:8f:07:94:6d:d5:82:d1:13:c0:e7:f1:c1:c6:
                    4d:2d:37:e2:1d:e8:f2:3d:10:0f:58:ff:c8:44:c9:
                    6f:65:04:e4:e0:4b:90:de:e5:a6:ff:48:39:d4:b0:
                    70:4c:1b:d8:ff:af:87:f1:7c:a5:b2:91:22:27:13:
                    54:e1:03:4d:de:5d:78:7b:19:84:7e:d7:83:b5:0b:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BE:2F:2F:1C:73:5E:57:3C:C1:D7:54:2A:BE:E5:4D:FC:6A:7B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aea4bd98-aff1-364a-905e-fa72b0142204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:df:d3:73:a9:2c:80:2c:90:e8:96:54:65:a1:92:4d:fb:06:
         16:ad:3b:73:a9:a0:5a:63:06:a8:f2:93:9f:9a:31:a9:e7:95:
         ed:ba:81:fe:e9:67:d4:c4:9e:57:bd:98:67:60:be:52:71:d8:
         45:e3:ee:30:40:77:09:8c:50:c5:76:15:03:47:6f:21:89:bf:
         d8:a8:8f:d6:51:76:1a:08:94:e6:09:38:99:d3:ad:fa:e0:fa:
         a0:4e:9c:ed:93:a2:54:dd:17:d6:e2:da:db:bc:22:5a:e4:67:
         54:88:63:ec:66:25:9b:5d:a3:a3:0a:09:99:85:e8:e6:1f:1d:
         52:61:36:ec:ed:17:12:25:48:04:a4:f4:32:60:2c:d8:15:f0:
         31:55:f8:e7:e1:4d:f2:28:10:b3:42:d8:61:88:ea:16:03:c9:
         96:7d:d6:d1:05:b0:95:25:64:2a:2d:fe:40:af:ff:4d:2e:f2:
         8c:e5:2c:2f:83:2b:54:f1:28:1c:99:5f:a2:71:39:cf:b3:b1:
         7a:c0:8b:3e:21:3b:d4:ac:79:4f:fe:47:a0:2d:ee:fe:e0:43:
         16:0b:19:a3:e1:a3:d6:bc:6d:3b:e9:ec:95:b1:79:3f:f3:e7:
         7c:13:4d:e5:96:6e:67:b6:1c:11:0f:fa:c3:fe:bb:cc:72:62:
         10:be:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:22 2024 by rpki-client on console-fra.rpki-client.org