Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25e1dd46-f930-3099-9766-4c02647b878d.roa
File:                     25e1dd46-f930-3099-9766-4c02647b878d.roa (raw, json)
Hash identifier:          xNXU5XcSn/7+l9pHLaU2Vm0hXSXYO9JtA70SCwYCv/c=
Subject key identifier:   EA:3C:4B:15:BE:29:9A:3A:B9:CA:6E:80:5C:F8:FE:DC:D2:E4:22:72
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E53AF082F0CD624AE3A7A8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25e1dd46-f930-3099-9766-4c02647b878d.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     3360
IP address blocks:        130.174.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:3a:f0:82:f0:cd:62:4a:e3:a7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=800a487c-851a-49d4-af90-348c72477c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:04:eb:3a:e9:f6:f3:e4:22:cc:eb:6d:40:
                    6d:c6:30:af:dd:ce:a3:88:d9:22:9a:80:80:c0:e6:
                    b9:a3:dd:4d:53:e7:14:ba:d4:e4:9c:8b:04:52:78:
                    20:b1:62:e2:02:0b:66:80:7c:d6:50:f9:21:5b:02:
                    8a:6e:5e:55:a0:cb:e8:40:e9:f6:6f:91:42:a8:d6:
                    72:d8:cc:de:5a:f1:31:51:68:ca:ca:06:08:a5:77:
                    a2:e7:1d:72:b4:15:2e:a2:59:db:84:1b:cf:e4:4b:
                    c1:78:41:32:20:03:00:f5:50:8f:3f:f9:d6:f0:0f:
                    66:4b:ba:ea:2b:56:7e:ab:fd:ca:a5:1c:a0:07:36:
                    28:4c:89:af:05:49:ed:00:fc:08:15:b3:51:05:fc:
                    48:67:43:32:a5:43:b7:ca:33:97:8b:5d:a7:1e:e8:
                    7b:00:f9:94:d9:a0:20:41:e7:22:bc:0e:9a:61:41:
                    8c:6d:70:60:3e:47:ba:eb:93:59:d3:77:25:8e:d2:
                    7c:4c:7b:6f:cc:74:13:3e:52:1d:e2:a8:74:1a:95:
                    83:e4:c2:3a:7d:59:e0:13:4c:2e:d7:e6:55:64:55:
                    02:55:fe:fc:03:11:7b:57:2b:f5:21:7d:ce:a9:d6:
                    f8:db:fb:4a:02:5c:9f:7c:50:25:be:70:57:9b:16:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3C:4B:15:BE:29:9A:3A:B9:CA:6E:80:5C:F8:FE:DC:D2:E4:22:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25e1dd46-f930-3099-9766-4c02647b878d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:c0:eb:79:94:f2:df:6b:49:60:36:b0:bf:38:43:01:a1:
         48:1e:6e:cf:d7:39:22:ec:94:1a:bc:30:f3:5e:c4:cb:a5:0d:
         07:92:3e:b8:a6:57:16:d5:de:eb:66:c3:5b:4e:b6:c5:d9:02:
         40:f7:39:ae:12:07:5e:04:cd:f4:a2:11:7b:6e:eb:4c:50:62:
         79:cc:21:97:1b:4b:c1:b3:67:be:c0:62:d5:17:d4:94:cf:b4:
         8f:22:34:f0:44:a9:ab:07:9b:03:48:55:8c:58:63:bc:65:89:
         4f:b4:d4:ef:aa:c6:7d:19:21:a9:5a:37:2f:27:f8:28:ab:38:
         58:97:89:49:74:8f:10:fe:1f:23:8d:c2:b1:8c:13:42:10:d5:
         53:cf:24:d2:83:0c:9a:ab:b6:7d:f4:aa:42:e3:e5:e8:98:2c:
         ee:89:d6:0f:c3:c7:95:cc:d6:6a:df:6d:ae:d1:a8:63:f7:0d:
         10:f8:b9:12:80:87:a2:cd:08:8c:a0:c3:45:f2:0a:91:c0:e0:
         d7:8c:b2:a3:e7:c2:df:e3:40:fc:12:d0:c9:ee:0b:00:11:e9:
         82:f1:4c:69:d1:3e:b2:f1:c3:16:7d:5f:46:a5:9c:68:ae:52:
         43:58:c9:d7:e4:3c:30:44:cf:98:1d:c4:25:d3:53:c9:92:a0:
         99:2d:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:10 2025 by rpki-client