Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/229fa1de-efe2-3c17-b0e1-39a11620da4d.roa
File:                     229fa1de-efe2-3c17-b0e1-39a11620da4d.roa (raw, json)
Hash identifier:          tWoyWy3AnfqTgXTjRlN60tpgRNKPStKxbiUkCOQ8QXg=
Subject key identifier:   17:26:F8:A3:D5:B2:50:14:2A:88:BC:91:AF:23:E6:18:4C:CE:E2:00
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC25E6DFDA847584A74300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/229fa1de-efe2-3c17-b0e1-39a11620da4d.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        130.174.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:25:e6:df:da:84:75:84:a7:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=3f775650-42aa-4575-98f1-501ad1281d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:07:d0:a4:b5:5f:36:c3:f3:df:0f:67:b3:
                    79:43:b8:05:1f:7d:5e:da:54:15:4d:b8:0e:58:2e:
                    50:f3:4f:b4:89:07:f8:f5:02:e2:f4:bd:ce:e5:84:
                    eb:b9:03:60:3f:82:ba:ea:9d:0b:f5:b4:5a:c4:82:
                    b0:cc:d2:89:2b:79:c8:a3:73:9c:93:55:c8:2b:9c:
                    5f:3f:23:6f:d5:c3:55:b8:20:6e:c0:d8:d7:20:75:
                    31:a6:b8:bb:79:b2:c5:4d:fc:7f:f4:97:a6:86:89:
                    15:7d:f0:40:2d:c1:3b:f7:54:7a:f1:33:42:cb:cd:
                    f8:6a:21:72:f2:54:96:db:e0:2a:4c:2c:d2:fc:d3:
                    2d:56:68:b9:25:e0:0f:01:9e:6c:d7:ee:d2:6b:1e:
                    30:34:f4:da:f6:c3:8e:fa:6c:b6:6b:4f:c4:0b:00:
                    bf:90:d5:44:84:b3:b6:5f:31:47:73:65:6a:21:16:
                    64:1d:94:70:37:5f:5c:56:a9:d9:60:f8:9e:5c:e1:
                    6c:92:2b:00:74:f8:98:e3:85:d6:9a:fa:82:a1:29:
                    5c:66:9b:5c:ce:87:3e:a4:e8:a7:72:e5:bc:f0:3f:
                    e4:a1:70:79:5d:fa:57:ad:17:cf:74:7a:18:9a:10:
                    be:66:b3:b0:cf:f8:c3:ac:31:ee:3f:f4:79:60:36:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:26:F8:A3:D5:B2:50:14:2A:88:BC:91:AF:23:E6:18:4C:CE:E2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/229fa1de-efe2-3c17-b0e1-39a11620da4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:57:5d:d5:0b:8f:ef:40:c7:85:7e:44:79:12:2f:ff:e4:
         b8:b1:a2:ee:be:6e:4c:92:fd:37:c0:cd:18:79:aa:34:61:e5:
         db:7e:51:f2:a9:4b:0c:fe:41:3f:bd:87:5a:c3:94:a5:3c:f1:
         a3:fc:20:2a:2f:02:b5:81:8b:68:ef:f1:ab:ef:65:8f:aa:0b:
         c9:d3:6e:80:27:21:ae:a9:16:b1:38:b2:3a:e5:6c:09:02:3f:
         34:f0:92:54:2c:6c:14:ff:cc:35:58:00:e9:f6:67:c2:7a:74:
         9d:4e:18:03:d0:a2:42:fc:bb:0f:d1:2e:d7:8a:bb:d1:da:03:
         89:d9:43:c9:19:79:f7:ea:2b:41:7f:a0:9d:30:1c:10:f7:38:
         09:64:bb:00:5a:9d:de:ee:9c:c1:d6:ba:7b:a8:62:87:04:25:
         41:37:f2:aa:be:62:f1:5c:91:5f:1c:c3:1e:4d:4f:53:07:1b:
         18:6d:18:3e:db:81:60:7f:49:86:35:77:bd:13:8e:3b:76:38:
         1a:3f:ce:ac:78:4f:be:85:37:58:f5:f3:5c:f7:e2:5e:61:ad:
         88:ac:84:01:79:64:e7:ca:e2:91:bd:4e:44:0c:b3:c0:5b:5d:
         12:86:84:cb:8f:0e:0d:40:b5:d5:62:9d:38:8c:f1:72:a1:f8:
         b1:d5:a4:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCXm39qEdYSnQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
M2Y3NzU2NTAtNDJhYS00NTc1LTk4ZjEtNTAxYWQxMjgxZDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGUH0KS1XzbD898PZ7N5Q7gFH31e2lQVTbgO
WC5Q80+0iQf49QLi9L3O5YTruQNgP4K66p0L9bRaxIKwzNKJK3nIo3Ock1XIK5xf
PyNv1cNVuCBuwNjXIHUxpri7ebLFTfx/9JemhokVffBALcE791R68TNCy834aiFy
8lSW2+AqTCzS/NMtVmi5JeAPAZ5s1+7Sax4wNPTa9sOO+my2a0/ECwC/kNVEhLO2
XzFHc2VqIRZkHZRwN19cVqnZYPieXOFskisAdPiY44XWmvqCoSlcZptczoc+pOin
cuW88D/koXB5XfpXrRfPdHoYmhC+ZrOwz/jDrDHuP/R5YDYP1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcm+KPVslAUKoi8ka8j5hhMzuIAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjI5ZmExZGUtZWZlMi0z
YzE3LWIwZTEtMzlhMTE2MjBkYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWuV13VC4/vQMeFfkR5Ei//5Lixou6+bkyS/TfAzRh5qjRh5dt+UfKp
Swz+QT+9h1rDlKU88aP8ICovArWBi2jv8avvZY+qC8nTboAnIa6pFrE4sjrlbAkC
PzTwklQsbBT/zDVYAOn2Z8J6dJ1OGAPQokL8uw/RLteKu9HaA4nZQ8kZeffqK0F/
oJ0wHBD3OAlkuwBand7unMHWunuoYocEJUE38qq+YvFckV8cwx5NT1MHGxhtGD7b
gWB/SYY1d70Tjjt2OBo/zqx4T76FN1j181z34l5hrYishAF5ZOfK4pG9TkQMs8Bb
XRKGhMuPDg1AtdVinTiM8XKh+LHVpCg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:57 2025 by rpki-client