Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03ff1029-a792-36da-bce0-fa792d81e2b2.roa
File:                     03ff1029-a792-36da-bce0-fa792d81e2b2.roa (raw, json)
Hash identifier:          PqINIwxOr+f5qd69H7/ynev54NtNHO5s4tvsqeBBGeg=
Subject key identifier:   B2:E7:5B:67:0F:30:FC:54:4C:9E:B8:9B:CB:B4:D8:F4:F6:D7:4D:75
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E538D86458E8FC7DF21C40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03ff1029-a792-36da-bce0-fa792d81e2b2.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     203
IP address blocks:        130.174.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:38:d8:64:58:e8:fc:7d:f2:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=1459728f-f2a3-4e68-925f-dac92c0fd1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ed:d9:01:38:64:d9:25:26:94:df:ca:f7:7e:
                    19:55:a8:6f:cf:30:c8:89:cb:2b:59:34:65:d6:1f:
                    63:a6:e8:00:6b:ed:d9:5b:20:0b:83:39:ee:5f:cb:
                    33:05:13:eb:eb:45:26:5f:a4:5b:68:09:a8:95:86:
                    05:42:cb:c0:7d:0c:e3:a0:f2:3e:75:de:00:9d:a6:
                    40:52:4e:c1:87:f7:7b:1f:fb:0d:5d:77:a9:36:cb:
                    e1:49:eb:fd:29:09:10:91:bc:af:6e:01:f7:e6:54:
                    ba:d5:e2:72:6f:1f:17:a6:0e:90:4e:2a:ac:7d:0a:
                    ba:ca:7b:5c:cd:40:5f:42:e8:d0:fc:24:87:d4:43:
                    12:bf:b2:1b:d8:f3:96:d0:bb:ab:1e:e1:f5:99:f7:
                    34:e3:b7:f7:7c:13:27:2b:90:6b:30:fa:42:54:37:
                    b9:b6:b0:66:a8:2c:c4:32:14:52:47:f1:12:d5:2e:
                    99:6d:2c:eb:48:fe:c1:46:59:5e:98:55:24:d8:52:
                    f3:e1:58:f8:28:51:29:8a:62:5a:28:ef:17:0c:3a:
                    f6:81:54:c8:ee:8c:81:9b:91:c1:57:51:e6:09:32:
                    b8:37:82:cc:2c:26:f0:98:fd:c1:a1:06:0f:b0:f7:
                    d2:89:91:6e:bd:f8:78:ba:5b:3c:8e:aa:8c:d3:99:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E7:5B:67:0F:30:FC:54:4C:9E:B8:9B:CB:B4:D8:F4:F6:D7:4D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03ff1029-a792-36da-bce0-fa792d81e2b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:30:55:29:86:51:86:2a:f6:20:62:8d:e0:ed:de:b0:85:79:
         18:e4:37:fb:74:de:68:d3:b4:12:a1:53:9c:15:d4:5b:ba:4d:
         a8:3d:e1:f6:46:b5:4b:a0:d4:72:5d:11:72:df:a1:0b:bf:5c:
         a7:79:87:67:62:0a:e1:f1:c4:53:86:c5:c0:a2:ec:33:86:44:
         92:fb:cc:e4:3a:d1:f3:ef:ae:9a:cf:aa:33:9c:da:2e:43:b3:
         75:91:88:01:be:98:d8:96:b8:cc:0e:0e:52:35:3a:74:d6:bf:
         5e:d5:70:d1:42:f4:0e:94:68:ac:03:e4:77:35:f7:89:f8:22:
         8f:41:0c:20:8d:3f:ba:c8:14:aa:01:14:af:15:db:f6:6e:34:
         ca:1c:f5:52:23:9c:a3:5c:6e:f6:2f:5a:d5:3e:3a:e6:70:f2:
         dc:3f:39:0a:2b:37:6a:76:3b:cd:e2:76:b9:02:16:07:b0:a7:
         f3:60:3f:fe:a3:16:cc:0e:fc:f3:dc:60:2d:6d:da:8c:78:4b:
         ea:8a:da:c7:81:c3:83:9e:72:a1:7b:0f:28:58:78:f7:fb:a1:
         98:93:f0:ac:be:24:aa:ca:8f:ce:a9:73:25:f0:23:20:c1:bd:
         38:91:4e:e2:4f:64:ce:af:81:26:90:67:0c:9d:4b:51:41:67:
         95:95:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:42:50 2025 by rpki-client