Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a900651-9ed8-3287-ab4b-a4083fc91759.roa
File:                     0a900651-9ed8-3287-ab4b-a4083fc91759.roa (raw, json)
Hash identifier:          xNxsW3i7jhAL+0nv8aN+Wilh7CtxdRXcA8IotermjyM=
Subject key identifier:   E5:72:EA:01:49:00:AF:3B:39:22:B5:5A:FF:78:0C:B7:E6:8A:F8:A4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0D5104142596131820B80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a900651-9ed8-3287-ab4b-a4083fc91759.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3356
IP address blocks:        130.174.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:d5:10:41:42:59:61:31:82:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=3ae515f7-9318-4684-95a0-b056eefc91e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:40:45:40:12:bc:41:39:3b:87:6a:ab:c9:b4:
                    45:82:6d:e1:58:6a:64:3f:99:33:b9:b8:a7:cb:2b:
                    f8:db:17:db:c9:c5:84:89:82:ad:ac:6e:63:d2:a9:
                    ce:97:20:c9:19:a3:b1:e3:aa:db:37:87:d8:84:3d:
                    a1:c8:6b:c8:b3:94:0c:4d:f5:a7:4b:02:7a:24:ec:
                    95:05:5f:87:65:4c:40:b3:34:3a:9a:73:83:86:05:
                    36:ef:09:b5:a9:10:b2:a9:9e:41:16:47:99:ad:47:
                    a7:a4:10:a4:85:e6:60:d4:94:0d:d1:a3:8a:59:06:
                    2f:24:03:1a:1e:58:ed:2a:ac:f0:71:f3:25:0f:f5:
                    90:e1:7b:26:73:37:70:38:c1:f0:ba:a1:e4:e1:fe:
                    60:73:51:84:fc:33:27:e3:35:7f:53:bd:32:4e:c8:
                    44:3b:2e:c4:21:65:ac:58:3f:fb:3f:ff:52:84:66:
                    de:cd:7f:69:59:f6:6a:ac:b7:97:1e:15:43:89:73:
                    57:1b:80:f0:2f:80:34:f1:12:9d:50:cb:ad:12:30:
                    8a:09:e8:74:76:68:7a:46:5d:c0:14:5d:49:80:0b:
                    c2:96:9a:c9:43:af:ef:83:8c:bc:31:1f:01:c1:11:
                    7b:f1:97:d1:a5:f0:6a:c0:06:6e:fe:7a:30:a7:81:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:72:EA:01:49:00:AF:3B:39:22:B5:5A:FF:78:0C:B7:E6:8A:F8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a900651-9ed8-3287-ab4b-a4083fc91759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f6:cc:99:e5:34:9a:c8:ea:7e:08:16:5d:d3:f0:5d:4c:13:
         1c:a4:99:af:30:7e:f8:f8:ab:8c:04:fd:4a:d9:10:a1:44:60:
         ff:14:c7:ab:25:e3:59:8e:ea:7a:a7:c0:99:1e:3e:2b:ca:b3:
         00:71:26:17:2d:76:be:4c:67:4f:2a:06:b9:8b:1c:b8:60:8a:
         34:fb:dd:cb:70:22:9a:ab:be:4f:62:b0:db:ad:4f:08:32:24:
         45:d4:8e:51:2d:b7:b5:31:24:66:6b:d6:07:ca:ca:04:39:9b:
         9c:9c:74:1f:b9:eb:1a:c4:88:a0:d5:55:45:51:64:1e:6c:4a:
         84:ee:91:fd:8f:96:9e:b1:ab:ca:03:58:be:04:bb:42:0a:08:
         1f:d3:2f:68:80:cc:4c:81:4c:b4:87:70:47:84:ce:4b:23:88:
         d1:97:5c:53:fc:88:72:c1:60:43:82:75:e4:12:63:86:89:a0:
         50:de:c7:94:85:aa:18:98:f8:5c:95:42:1c:4f:6b:25:bf:85:
         e6:4e:7c:22:2e:be:32:20:6d:56:83:c9:2e:97:3b:9f:ad:08:
         d0:62:80:2e:08:58:d7:c2:40:69:ae:7f:1e:6b:f4:93:c7:10:
         0f:01:0b:50:4c:44:1d:66:8b:81:d6:00:5f:df:54:e0:61:71:
         09:60:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:37 2024 by rpki-client on console-fra.rpki-client.org