Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b5eb08f-a78b-35d0-aef3-9e74c2c65758.roa
File:                     0b5eb08f-a78b-35d0-aef3-9e74c2c65758.roa (raw, json)
Hash identifier:          3zHgO3BstBBkRcLZO2Wm5PeG1kA2RelZ7jFU86TiZg8=
Subject key identifier:   57:E7:B9:9B:2E:98:90:0D:B0:61:B3:D8:CD:A4:E5:A6:3B:3F:37:53
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459368CB446500123227E6B100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b5eb08f-a78b-35d0-aef3-9e74c2c65758.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     3356
IP address blocks:        130.174.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:cb:44:65:00:12:32:27:e6:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=f18b3ed6-7257-4b38-ad71-4efed2b0c203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:ed:cc:dd:57:15:3c:28:78:b9:e4:24:67:
                    b6:04:d2:c6:d7:60:13:fa:85:58:a2:8e:e4:76:e2:
                    1a:3f:2f:35:ae:8f:33:53:cc:ba:f8:0a:76:2c:80:
                    f0:b6:71:05:f2:b4:c8:ee:be:4c:3d:d7:35:0b:a5:
                    58:12:4d:2d:bb:48:af:b0:b6:eb:a7:91:05:ec:f2:
                    38:35:58:25:e1:01:7b:b4:ac:43:78:b1:f1:35:c3:
                    20:e7:e5:6d:b6:6b:06:74:1e:af:a9:1b:51:5c:38:
                    40:de:21:62:f9:b4:98:94:13:98:18:72:3d:13:36:
                    e7:7d:1c:28:a1:1e:e3:92:ef:42:4b:10:32:6f:8b:
                    15:77:2c:2a:ed:77:d9:e1:2a:8f:f7:52:c4:2a:9f:
                    66:7d:14:08:f6:ae:7f:d3:a8:96:9c:84:37:1d:0d:
                    ce:75:41:ec:99:bd:31:e7:ed:13:da:85:d7:a9:49:
                    e3:94:df:76:e5:b9:1e:24:dd:e8:40:b9:9b:06:73:
                    af:c1:9e:7e:23:c5:4b:5f:69:98:ac:d2:56:6e:d9:
                    6e:7b:df:24:24:7d:c5:49:cf:6e:5e:c4:51:9d:32:
                    90:b4:4e:d2:09:69:f7:ed:9f:7c:18:df:83:5a:f4:
                    08:aa:58:c1:21:25:60:2c:ed:21:19:69:6b:37:4e:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E7:B9:9B:2E:98:90:0D:B0:61:B3:D8:CD:A4:E5:A6:3B:3F:37:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b5eb08f-a78b-35d0-aef3-9e74c2c65758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:57:0e:13:a3:9b:c4:93:bf:32:3f:d6:d2:89:02:51:16:63:
         21:78:d1:d2:a0:8b:20:8a:a5:2d:a5:bc:97:cd:8c:bc:1d:94:
         86:4a:ac:a1:2c:e0:a1:0a:14:23:d6:60:5c:1b:f7:ab:7f:2e:
         31:95:b5:06:95:53:00:43:c3:ff:22:8f:68:e4:92:c8:51:2e:
         62:b5:91:0e:3d:20:55:67:74:ea:09:f6:e8:3c:58:b5:c2:36:
         c7:d0:d1:0b:71:d7:59:c0:36:4a:d2:15:d5:21:44:56:fe:9e:
         b8:2e:49:94:68:64:3e:c3:bc:d9:dc:c3:37:16:10:01:c1:11:
         62:d6:57:d2:6f:61:82:9d:b8:54:c7:82:aa:5c:95:b0:71:02:
         8a:1d:06:59:df:ab:2f:74:b7:94:ce:93:fd:ba:b7:28:ac:4c:
         38:3c:ed:f9:d8:cd:8b:ac:d2:43:e2:0e:1e:fe:6e:ca:5f:9f:
         1a:7e:01:b0:c0:52:89:3d:1a:d7:8b:f2:38:82:2f:ed:00:f0:
         fc:37:74:01:8a:c5:a8:c1:6d:e1:58:73:86:62:d6:b6:9a:51:
         c7:3a:2e:cc:3c:cf:d9:1b:64:b1:43:87:08:4e:ed:22:aa:26:
         59:93:e0:ff:da:37:1a:ac:02:b3:b2:a0:d2:e8:ea:b1:83:5a:
         ae:8b:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:33 2024 by rpki-client on console-ams.rpki-client.org