Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/167b0cec-501a-39c7-9242-c7a2c3bd79a7.roa
File:                     167b0cec-501a-39c7-9242-c7a2c3bd79a7.roa (raw, json)
Hash identifier:          aWYrryZGcR1UZuxPFw26T5aiNXnxJ2EWiKt4mikFW+M=
Subject key identifier:   71:E3:B7:FF:16:FC:8B:40:C6:FD:51:2B:42:33:BE:AC:4E:02:A4:09
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584596335A7A68D1B15B2968E080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/167b0cec-501a-39c7-9242-c7a2c3bd79a7.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        130.174.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:5a:7a:68:d1:b1:5b:29:68:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=e1fb297a-2e16-4613-9e01-0c875b97ef50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:e0:b4:b7:1e:c7:00:24:9a:11:f9:45:ef:
                    e2:20:54:26:05:23:39:d7:2e:3e:5c:34:33:7f:57:
                    28:ca:83:1d:7b:72:4e:28:d7:75:0d:b9:ee:cb:31:
                    43:22:e1:7d:12:ae:62:a9:0d:68:45:4e:61:cc:33:
                    27:fe:03:e5:4a:b5:33:e2:51:24:52:5c:ce:2e:e8:
                    03:bf:15:a8:2a:e7:84:4d:69:e8:5a:b8:bb:3f:f3:
                    2d:1f:8c:4e:52:22:e6:73:cd:f6:b8:53:eb:87:46:
                    09:43:5d:ed:ce:43:fc:27:21:a9:77:19:e4:0a:2d:
                    ba:82:e5:e8:7a:0a:ad:f6:1c:ac:fc:cb:d7:fc:64:
                    9e:d8:07:d0:9b:76:ec:a6:32:67:cf:40:4a:16:21:
                    c4:b1:5c:1b:b1:bb:58:c5:c8:94:00:95:66:74:aa:
                    80:0e:0c:f3:ab:84:40:28:02:13:b7:59:78:32:3c:
                    d0:f0:1b:61:5f:14:4c:54:db:b3:1c:a4:b5:bd:e4:
                    e7:a1:de:67:22:92:a3:3b:67:0a:ea:19:21:32:92:
                    4b:a7:9f:38:bc:6a:7e:5a:cb:8c:0a:57:f9:b6:16:
                    55:d5:1b:5f:f5:5c:fe:62:c7:a7:01:de:2a:ae:7a:
                    20:bc:60:10:15:e4:e8:7c:fc:fb:a0:da:1a:5d:56:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E3:B7:FF:16:FC:8B:40:C6:FD:51:2B:42:33:BE:AC:4E:02:A4:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/167b0cec-501a-39c7-9242-c7a2c3bd79a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:45:db:cb:de:c1:c1:d6:7e:8a:fc:b6:6a:8c:95:2c:98:
         48:0a:28:7f:56:d9:85:6c:9a:47:cc:9a:3a:b0:05:ce:f2:03:
         8c:24:30:63:29:59:80:d0:0f:e4:91:8b:e0:9e:dd:7f:8b:c6:
         a1:79:41:25:d7:7e:0d:63:4f:06:d7:e7:93:fc:4e:f3:e2:36:
         11:37:cf:81:2e:07:ab:1b:ff:6c:ce:0a:59:ea:05:55:fc:b6:
         8e:7d:20:94:ac:38:7b:79:65:32:3d:a2:c9:de:2f:c7:81:e6:
         39:2e:ea:8f:99:c0:57:57:49:7a:6a:f8:11:76:54:d5:26:34:
         99:97:14:42:7f:dc:7e:89:a7:de:19:c2:47:a1:80:a2:f2:3d:
         32:10:0c:29:ba:51:0f:a9:aa:c1:2e:16:9c:40:31:e0:79:fd:
         c2:b6:27:1d:6a:94:d2:27:c5:6a:9d:b2:c2:28:79:87:c7:4d:
         a4:98:25:19:c1:fe:0c:80:58:9a:f9:a4:2b:78:78:aa:42:05:
         20:92:e1:fb:94:15:b7:58:01:fa:6d:44:d7:83:71:6a:34:47:
         3f:a2:de:ba:40:dd:42:40:32:23:03:b2:bd:e7:9b:8d:5e:d2:
         6e:6a:94:ef:33:03:e2:98:13:c1:57:2a:de:2f:b8:f1:36:67:
         3c:ad:d6:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWWM1p6aNGxWylo4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZTFmYjI5N2EtMmUxNi00NjEzLTllMDEtMGM4NzViOTdlZjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN3gtLcexwAkmhH5Re/iIFQmBSM51y4+XDQz
f1coyoMde3JOKNd1DbnuyzFDIuF9Eq5iqQ1oRU5hzDMn/gPlSrUz4lEkUlzOLugD
vxWoKueETWnoWri7P/MtH4xOUiLmc832uFPrh0YJQ13tzkP8JyGpdxnkCi26guXo
egqt9hys/MvX/GSe2AfQm3bspjJnz0BKFiHEsVwbsbtYxciUAJVmdKqADgzzq4RA
KAITt1l4MjzQ8BthXxRMVNuzHKS1veTnod5nIpKjO2cK6hkhMpJLp584vGp+WsuM
Clf5thZV1Rtf9Vz+YsenAd4qrnogvGAQFeTofPz7oNoaXVaLPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHjt/8W/ItAxv1RK0IzvqxOAqQJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTY3YjBjZWMtNTAxYS0z
OWM3LTkyNDItYzdhMmMzYmQ3OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXiRdvL3sHB1n6K/LZqjJUsmEgKKH9W2YVsmkfMmjqwBc7yA4wkMGMp
WYDQD+SRi+Ce3X+LxqF5QSXXfg1jTwbX55P8TvPiNhE3z4EuB6sb/2zOClnqBVX8
to59IJSsOHt5ZTI9osneL8eB5jku6o+ZwFdXSXpq+BF2VNUmNJmXFEJ/3H6Jp94Z
wkehgKLyPTIQDCm6UQ+pqsEuFpxAMeB5/cK2Jx1qlNInxWqdssIoeYfHTaSYJRnB
/gyAWJr5pCt4eKpCBSCS4fuUFbdYAfptRNeDcWo0Rz+i3rpA3UJAMiMDsr3nm41e
0m5qlO8zA+KYE8FXKt4vuPE2Zzyt1lo=
-----END CERTIFICATE-----
Generated at Sun May 19 02:40:39 2024 by rpki-client on console-fra.rpki-client.org