Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16b838e9-f9a4-30e6-8ccd-8420e2eddcd8.roa
File:                     16b838e9-f9a4-30e6-8ccd-8420e2eddcd8.roa (raw, json)
Hash identifier:          8jk29SZBliGmfdjiTOUMfv6wAW14KpMArydaZruBIkw=
Subject key identifier:   AD:83:18:6D:E1:61:07:6F:8A:C9:D9:E8:18:5B:37:1C:F5:6F:51:B0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246BFECC596617833AC8CC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16b838e9-f9a4-30e6-8ccd-8420e2eddcd8.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3360
IP address blocks:        130.174.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:bf:ec:c5:96:61:78:33:ac:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=0fd00d68-172b-4a9c-bb8b-87b77b6e04b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:71:19:8f:d4:77:b9:52:cd:ee:9b:ea:a0:
                    3a:21:73:e4:80:8c:66:1f:96:a8:c9:0f:7c:c2:40:
                    fe:ae:4a:d9:8e:52:f1:ae:ea:bc:90:04:21:7f:b2:
                    b8:9b:c1:15:84:e1:27:25:c6:eb:ee:0e:d5:a2:79:
                    c7:b5:68:3d:cc:be:75:39:d9:97:3a:1f:b1:26:ba:
                    28:18:e8:32:0b:b6:94:77:06:8e:c9:c0:e7:b3:89:
                    17:0d:37:95:e7:27:08:6c:ef:6b:a5:c1:64:58:da:
                    4d:cf:31:d2:e7:3c:d1:e4:74:4b:2d:69:5b:e7:42:
                    85:3d:78:7e:61:33:2c:5b:8e:df:33:1d:a4:42:6c:
                    e4:95:3a:91:3a:ff:7b:b7:f3:51:78:74:07:a0:39:
                    30:8f:5b:fd:97:01:a2:26:29:a1:c2:17:98:d3:18:
                    90:49:6f:36:c0:14:e8:53:41:ad:ae:60:0e:02:70:
                    aa:f4:eb:8e:17:1f:eb:14:4f:ee:e8:42:6f:d3:aa:
                    7f:f2:0e:20:45:a9:f1:7d:76:b4:20:a6:9c:d3:de:
                    28:58:de:35:d9:44:36:16:06:e5:a5:88:b6:11:f4:
                    69:60:81:75:4b:57:6e:aa:d8:25:6a:7a:5a:e3:eb:
                    67:1f:b6:b1:77:d0:f1:3c:8f:1b:64:32:94:d6:a6:
                    4e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:83:18:6D:E1:61:07:6F:8A:C9:D9:E8:18:5B:37:1C:F5:6F:51:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16b838e9-f9a4-30e6-8ccd-8420e2eddcd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:27:48:7a:ac:e0:00:08:f7:3f:e2:c6:bd:68:fa:88:3d:
         d8:bf:39:70:6a:2c:34:e3:61:72:18:bf:d2:2c:bb:5b:dc:c2:
         52:b2:48:7b:ef:f2:1c:89:d3:bd:4b:34:b7:ba:e0:d7:84:40:
         5c:c9:97:f7:22:95:52:61:10:0d:3f:ad:f3:f5:4d:72:9b:01:
         9e:b8:a8:cb:4a:5e:66:2f:1e:ff:49:bd:bf:6f:e9:ff:f4:ae:
         01:62:b4:b3:6c:f4:5d:77:ea:ce:fc:2f:69:6d:e7:a4:53:5e:
         7e:8e:6b:59:7c:2a:96:4a:0b:0c:ba:43:67:51:fd:92:00:5d:
         d3:48:23:de:0b:4d:22:96:77:20:1b:2c:d4:f0:57:46:3a:aa:
         3f:9f:85:05:8d:f6:3b:46:71:3f:59:8b:ec:ab:69:e0:07:ea:
         b3:f7:97:5a:39:db:30:49:e9:5d:8d:b0:44:06:a5:ce:85:f2:
         4b:3c:0a:73:1d:e0:05:24:d5:66:f0:2d:84:60:e2:a2:9f:c4:
         fa:3b:1a:5c:73:a5:2a:47:ee:ff:05:8b:e1:20:9c:4a:83:70:
         6d:4d:c5:91:0f:a3:01:8e:c5:cd:70:20:95:97:7b:be:8a:06:
         32:0c:94:88:b2:ba:25:2d:45:e2:25:a2:b4:f3:c0:82:da:2d:
         83:dd:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:23 2025 by rpki-client