Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/154dca8b-a25b-3ea3-b4d4-84aaa518e1c7.roa
File:                     154dca8b-a25b-3ea3-b4d4-84aaa518e1c7.roa (raw, json)
Hash identifier:          sz6ndxJq+3s/wLdFSsu+L46JX9zXcrKbAPtUuNnHlzc=
Subject key identifier:   61:10:99:DC:8C:56:65:94:6F:F3:31:99:97:E5:9E:46:A2:29:98:86
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847537B77703020D951E57AEBE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/154dca8b-a25b-3ea3-b4d4-84aaa518e1c7.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     3356
IP address blocks:        130.174.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:77:70:30:20:d9:51:e5:7a:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=e487494c-a1b7-447b-b6db-eafa7e5cbb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:a7:0b:8f:0a:b1:16:91:d3:05:e5:66:19:
                    ee:14:d6:26:3f:0a:9f:58:36:d3:3a:82:16:39:0b:
                    6c:94:f1:ab:57:1f:3d:60:19:34:a5:ac:67:2e:fb:
                    91:62:6c:01:82:cd:c8:25:62:b8:9e:b2:58:c0:0a:
                    5e:35:f1:3c:11:9d:74:6f:af:8b:d0:3a:f3:2f:d6:
                    bf:c5:9a:55:bb:e9:15:de:82:51:0f:53:7a:ff:48:
                    8f:c1:45:8d:aa:cc:80:0b:94:4e:c0:d2:80:e8:cf:
                    56:8d:e7:3e:70:26:7c:b8:9b:1c:5c:b4:13:c5:ae:
                    17:e2:88:1c:00:e9:bd:9e:dd:92:a4:a6:ec:57:25:
                    b1:08:09:55:a9:7f:1b:56:9a:48:b3:c9:42:e9:d3:
                    ef:0a:ad:37:25:14:5d:7d:41:2d:61:ae:69:13:0c:
                    b9:da:2b:2f:0b:36:eb:59:84:4a:5a:79:86:b6:5c:
                    92:1e:12:69:ba:d6:9a:c0:ea:48:10:4d:03:19:9a:
                    82:26:f8:c8:b7:9c:f9:20:ca:43:84:f6:b4:9a:26:
                    70:f4:d6:9f:c7:d4:3a:49:ff:8d:e7:06:3a:0c:62:
                    10:62:b3:29:07:5f:81:a7:fb:16:17:6e:ad:c4:29:
                    75:5e:c3:d8:01:d3:b4:e4:69:70:10:21:10:15:7c:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:10:99:DC:8C:56:65:94:6F:F3:31:99:97:E5:9E:46:A2:29:98:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/154dca8b-a25b-3ea3-b4d4-84aaa518e1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3b:46:5f:94:c6:2f:23:e6:3a:e1:12:ed:7d:91:c4:1e:9c:
         c6:73:04:c2:53:6d:9f:94:be:9a:67:ac:5d:17:91:b7:75:55:
         42:73:27:93:4f:0a:32:8f:00:61:e2:e7:45:26:23:e5:f4:60:
         02:89:b5:e0:be:74:74:e5:4e:34:b4:34:41:e5:75:66:b2:14:
         b0:c9:85:3e:85:5c:e0:35:35:6d:f1:9f:9e:90:06:ff:a8:53:
         ec:be:0e:6d:c8:50:90:4a:e3:34:99:e5:ab:69:43:c4:da:f6:
         13:9d:95:6b:86:90:bc:15:aa:c0:f4:69:c0:e4:2e:37:f4:52:
         9f:83:37:93:d3:7a:9d:8e:e9:c6:05:5b:5e:f2:85:47:81:b1:
         bc:a0:3b:b9:3d:44:80:91:85:05:af:b3:d7:3f:82:87:f3:4d:
         7a:70:a9:d9:94:33:95:cd:d1:cc:5e:61:36:d0:b6:59:73:b8:
         9e:90:60:51:ed:0e:cb:02:12:b5:8d:c2:57:0c:1b:38:97:1b:
         d3:61:54:12:27:8c:50:df:b0:f5:dc:f6:95:21:c0:fc:7f:3e:
         56:4a:74:c8:8d:50:62:06:ae:f4:96:71:1f:97:00:74:1b:7b:
         7e:10:c5:cd:be:7f:73:fd:15:1f:2d:04:62:38:e5:ec:e1:20:
         92:df:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:42 2024 by rpki-client on console-fra.rpki-client.org