Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23239702-6a15-38e6-ac10-94f9dfab6ac7.roa
File:                     23239702-6a15-38e6-ac10-94f9dfab6ac7.roa (raw, json)
Hash identifier:          fQixYlhSTfAJiMZYJ6qVl5upMD6LpfnsYPDa0w5W+nA=
Subject key identifier:   AA:09:67:8A:2B:B6:22:A5:C3:19:2A:31:73:0C:22:44:31:3E:2D:37
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459368C1DE8FBCA63A8F8F1200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23239702-6a15-38e6-ac10-94f9dfab6ac7.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     3356
IP address blocks:        130.174.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c1:de:8f:bc:a6:3a:8f:8f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=36898ce1-8085-4396-a8b2-76f4d4b146fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:4d:c3:86:ab:a2:e0:c9:15:6e:9f:01:4d:
                    02:d0:bb:c6:83:64:18:59:80:de:3b:f8:8a:5c:7a:
                    fd:10:a7:87:17:e4:9c:a0:36:1b:43:c3:92:e7:95:
                    82:78:ad:bf:a4:f1:5e:86:fe:94:ee:b2:ce:b4:0e:
                    53:18:80:f4:3f:f7:c2:96:ce:7a:d9:17:9b:8d:c1:
                    d3:51:2d:ec:78:4f:52:d2:95:71:e8:d2:f7:2a:d9:
                    05:47:04:60:17:ea:eb:91:00:8e:67:a2:a1:b6:8d:
                    82:d9:ca:ec:45:c3:e9:6e:7a:99:a2:a9:06:0d:6b:
                    f6:8a:85:55:dd:e9:ce:4f:4b:58:f5:f2:45:68:16:
                    a8:9c:64:a1:53:50:5b:34:18:f2:ab:cb:bb:1e:ee:
                    2f:bb:32:6b:0f:5d:88:9e:67:67:f3:3f:5d:35:a1:
                    da:52:71:3e:58:d4:80:d4:a7:32:13:57:f0:38:66:
                    f4:2a:66:bd:3c:6e:d6:84:f3:5a:6f:d3:df:07:88:
                    0c:1b:b6:61:22:d4:8d:08:4c:b4:06:71:c1:95:99:
                    55:37:67:7f:31:80:56:c1:a1:04:cf:d2:9d:b6:2a:
                    a7:bc:58:75:fc:dd:59:87:8e:b1:a9:a8:14:3f:08:
                    99:06:af:06:2f:a2:75:f9:80:57:e6:58:2d:02:45:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:09:67:8A:2B:B6:22:A5:C3:19:2A:31:73:0C:22:44:31:3E:2D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23239702-6a15-38e6-ac10-94f9dfab6ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:44:82:4e:c0:3f:04:e2:1d:0f:37:15:b6:b4:19:4d:72:
         04:fb:07:1b:1e:89:d3:05:0a:b2:cc:99:5a:e9:ae:5f:52:6c:
         a8:4f:43:02:9e:a3:15:2e:56:10:85:70:3b:2a:ac:85:2d:41:
         cc:1c:f3:d2:b5:4b:0d:52:36:55:59:f0:b1:c1:03:82:25:73:
         c8:83:e8:b1:98:91:b5:4c:c5:ab:92:da:b2:ff:68:f3:a2:89:
         b0:ae:72:b6:92:f2:f7:3a:bb:5c:a1:fd:40:9e:12:e9:03:a2:
         05:8a:3c:e3:7e:73:d5:72:6c:b3:f0:2b:e2:99:07:37:85:9c:
         a7:e9:75:d0:20:d0:1f:da:31:d6:c5:11:95:7d:6a:e7:a6:87:
         08:3d:a6:89:8f:3f:e6:b9:5a:3d:0e:99:95:1e:c2:2c:24:bc:
         c0:71:ec:57:b3:9e:49:85:e2:2c:76:98:fb:2e:7c:06:8b:0d:
         43:d0:da:cb:12:bc:be:d2:e3:45:f1:a3:44:fb:81:01:7e:b0:
         d1:56:cb:f3:bf:07:02:ff:6c:c6:98:5d:26:e2:f3:59:42:5d:
         0d:ed:0f:d4:4c:e2:5b:84:d1:cb:a3:70:69:ed:fb:af:df:ef:
         85:a7:d0:47:67:36:46:11:10:6c:f8:0e:ba:58:a7:e5:86:5d:
         5d:a7:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:33 2024 by rpki-client on console-ams.rpki-client.org