Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dbf0d46a-eb4b-3f70-936a-d60c1cf2df26.roa
File:                     dbf0d46a-eb4b-3f70-936a-d60c1cf2df26.roa (raw, json)
Hash identifier:          ivh3m3/gLhnD1uvmp3TExpbS7FzXZQoaI7bijw/MHQQ=
Subject key identifier:   34:E2:66:6D:F2:EA:97:B3:AC:9E:41:1E:03:F5:8C:2B:CA:63:4E:9D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459368C2F27286646087D76E30
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dbf0d46a-eb4b-3f70-936a-d60c1cf2df26.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     202
IP address blocks:        130.174.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c2:f2:72:86:64:60:87:d7:6e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=440b63cc-982c-442b-a131-1d57fe54e57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:bd:cb:16:dd:e1:dc:30:cf:3a:a4:93:1d:
                    02:95:c0:d0:00:f8:7b:6b:53:60:0e:6b:1d:f7:c2:
                    78:d1:2d:55:e5:79:23:a0:d9:a6:59:fa:f6:06:92:
                    a4:5d:85:62:ff:35:b3:7b:e8:ef:df:df:9e:6c:9f:
                    5d:57:47:1c:e7:f3:23:bc:cf:3e:93:8b:b7:81:39:
                    2a:89:3d:b7:d9:f8:18:4a:97:82:a2:97:ea:c2:6c:
                    91:3b:46:1f:64:3a:1f:4d:b5:4e:eb:c7:d6:1b:94:
                    e7:8e:e4:eb:a1:62:39:c4:2a:a2:4f:0a:77:48:00:
                    eb:cb:c3:27:f5:af:36:f5:b4:5a:0d:3b:ca:6e:ec:
                    ac:31:17:66:6e:49:e6:fe:5c:8f:77:eb:dc:7f:20:
                    20:1e:91:12:28:ca:36:b4:1e:45:ff:cc:27:a1:2d:
                    9e:ef:73:5f:87:26:97:38:ca:a8:df:50:76:cb:0c:
                    2c:fd:09:25:91:dd:d9:e2:c4:fc:24:29:ca:57:31:
                    90:a7:c2:ad:86:13:86:cd:18:ba:93:92:0a:ad:4b:
                    52:3b:4f:de:1c:53:d8:6b:59:57:7f:7b:4d:f4:ff:
                    33:7e:71:af:57:16:8f:c3:17:fd:aa:88:4e:bf:3a:
                    21:20:ec:3b:f8:19:52:73:35:6a:8f:f3:10:92:62:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E2:66:6D:F2:EA:97:B3:AC:9E:41:1E:03:F5:8C:2B:CA:63:4E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dbf0d46a-eb4b-3f70-936a-d60c1cf2df26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:43:5b:f6:8b:1d:e6:c1:37:01:b0:d5:5f:cb:f7:85:fa:1d:
         e9:29:fd:55:a4:fb:a2:04:73:63:b2:d0:50:97:35:96:ca:76:
         e7:4b:3d:a6:35:9f:95:8f:f0:80:8a:f3:a5:4c:ff:bc:35:93:
         76:7e:7b:a8:12:5c:1d:68:87:51:ef:82:db:fc:7f:c7:6d:dd:
         26:38:69:b0:b3:85:a3:3b:ff:b2:a6:e7:ca:4a:1d:91:93:94:
         b3:bb:7e:1d:ff:5e:f7:b6:09:fa:2a:e7:e0:a7:1f:90:5f:1d:
         e4:14:84:bd:02:90:ab:bb:3e:ea:b3:eb:c5:ac:81:0c:d8:3b:
         b3:78:68:1f:c0:c1:64:8d:65:68:81:ce:8f:6a:01:a3:0d:af:
         f9:d7:43:bb:60:2a:d7:d1:bc:28:21:83:65:95:e9:b6:5d:e2:
         7c:a9:a1:c3:06:38:d9:a7:d3:d8:f1:32:96:42:cd:4f:3d:f2:
         96:78:bb:94:bb:f8:aa:4e:c4:58:e7:1c:5a:5a:ea:87:f6:4f:
         38:50:47:11:9f:e2:f9:45:a1:65:c6:9d:e5:4a:a2:9d:aa:b2:
         53:01:b1:77:eb:bf:7f:c5:a6:87:18:72:12:45:52:52:d4:48:
         fe:37:74:e1:d8:33:38:59:47:33:06:41:41:da:19:6f:ce:f8:
         d4:95:4a:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaMLycoZkYIfXbjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
NDQwYjYzY2MtOTgyYy00NDJiLWExMzEtMWQ1N2ZlNTRlNTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRe9yxbd4dwwzzqkkx0ClcDQAPh7a1NgDmsd
98J40S1V5XkjoNmmWfr2BpKkXYVi/zWze+jv39+ebJ9dV0cc5/MjvM8+k4u3gTkq
iT232fgYSpeCopfqwmyRO0YfZDofTbVO68fWG5TnjuTroWI5xCqiTwp3SADry8Mn
9a829bRaDTvKbuysMRdmbknm/lyPd+vcfyAgHpESKMo2tB5F/8wnoS2e73NfhyaX
OMqo31B2ywws/Qklkd3Z4sT8JCnKVzGQp8KthhOGzRi6k5IKrUtSO0/eHFPYa1lX
f3tN9P8zfnGvVxaPwxf9qohOvzohIOw7+BlSczVqj/MQkmJyNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTiZm3y6pezrJ5BHgP1jCvKY06dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGJmMGQ0NmEtZWI0Yi0z
ZjcwLTkzNmEtZDYwYzFjZjJkZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBDW/aLHebBNwGw1V/L94X6Hekp/VWk+6IEc2Oy0FCXNZbKdudLPaY1
n5WP8ICK86VM/7w1k3Z+e6gSXB1oh1Hvgtv8f8dt3SY4abCzhaM7/7Km58pKHZGT
lLO7fh3/Xve2Cfoq5+CnH5BfHeQUhL0CkKu7Puqz68WsgQzYO7N4aB/AwWSNZWiB
zo9qAaMNr/nXQ7tgKtfRvCghg2WV6bZd4nypocMGONmn09jxMpZCzU898pZ4u5S7
+KpOxFjnHFpa6of2TzhQRxGf4vlFoWXGneVKop2qslMBsXfrv3/FpocYchJFUlLU
SP43dOHYMzhZRzMGQUHaGW/O+NSVSkw=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:23 2024 by rpki-client on console-fra.rpki-client.org