Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/266309e5-1d50-3da9-a55a-adcc60f1f9bf.roa
File:                     266309e5-1d50-3da9-a55a-adcc60f1f9bf.roa (raw, json)
Hash identifier:          yl2PZWajzykxKLOKS6jJr9m3ISw2ggapR/vuk3RlqtE=
Subject key identifier:   67:82:EB:CC:97:47:CE:B2:51:F5:81:F5:E3:37:C3:14:CE:9C:30:A3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584596335AAC4840C4352887FF00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/266309e5-1d50-3da9-a55a-adcc60f1f9bf.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        130.174.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:5a:ac:48:40:c4:35:28:87:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=dca540d8-18be-4d39-a18e-77b2dab65bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:cf:b8:ca:85:07:7f:96:aa:43:64:0c:7b:
                    4c:b3:d5:6a:65:5b:bc:58:cb:39:1a:5b:49:2f:d9:
                    89:39:25:7f:98:92:ee:53:e7:07:65:c1:ff:f1:1b:
                    fd:d3:52:2c:ba:48:2d:db:f3:b2:80:d8:45:72:0b:
                    3e:87:62:6b:4a:d3:a1:cd:23:6a:73:56:ed:6a:fa:
                    2e:fe:48:dd:4c:b5:25:97:cf:87:2f:40:28:08:62:
                    f9:23:d5:c5:97:65:af:ba:6f:ed:dd:1e:9d:a1:99:
                    e0:6f:be:b1:a8:45:ab:10:f9:76:ab:19:26:24:f9:
                    e9:59:39:85:cb:6f:ae:9f:ff:c1:a4:b4:4d:bd:1b:
                    78:e9:ff:eb:06:0f:2d:da:77:81:9e:e5:26:cc:b4:
                    68:30:de:90:fb:aa:3c:ec:c0:e9:b8:a4:f4:03:c5:
                    41:4a:c9:ea:b1:4b:61:bc:be:6a:36:8a:a7:4e:2f:
                    0e:8c:5d:72:0b:89:20:ec:67:77:82:2c:4b:44:09:
                    fe:f0:12:f4:ae:6f:24:5a:9d:36:21:5a:b2:67:d7:
                    48:9e:5a:97:cf:aa:4d:f9:25:36:c8:eb:2e:09:b1:
                    7e:87:9e:f2:50:75:af:d1:f8:10:08:26:e4:8d:4d:
                    d0:fa:4d:ad:a5:69:8a:5a:4e:f1:33:8b:80:ce:aa:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:82:EB:CC:97:47:CE:B2:51:F5:81:F5:E3:37:C3:14:CE:9C:30:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/266309e5-1d50-3da9-a55a-adcc60f1f9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:c4:a0:38:d3:a1:e6:d2:3f:4b:ef:cd:dc:71:be:77:5f:
         12:ea:db:18:be:6c:3e:ef:16:fa:98:b8:9f:66:ae:9a:c0:f9:
         b6:8c:79:12:56:9c:e8:d5:6f:5a:b8:34:ac:13:60:f3:6f:3e:
         06:c3:6f:d3:99:1c:f1:bf:4f:bd:64:79:d4:19:49:b2:78:9d:
         05:59:da:39:d5:2c:1d:0a:6b:ad:e3:f3:12:77:c0:c7:9e:a3:
         76:1f:45:b5:26:4e:72:ce:21:6a:32:cc:fb:d3:47:bb:3b:3b:
         fd:bd:81:92:ac:6d:0a:d2:f4:7e:e6:08:ac:f4:63:37:62:32:
         e2:19:ff:71:97:61:3f:75:89:42:fa:73:8b:85:d7:6c:c8:2a:
         78:53:59:25:a0:0c:ea:a9:d8:d1:2d:e9:8e:85:22:49:6e:b4:
         18:d6:da:9f:e2:07:80:19:f2:ae:d2:83:aa:43:82:6e:03:d3:
         c4:d0:b6:f2:56:81:ee:16:48:c5:c1:38:bb:b8:03:55:da:8d:
         ed:7f:83:1a:85:ec:da:01:af:c3:6b:24:39:80:e7:15:ea:0a:
         e0:f5:86:ec:74:ca:59:7f:45:7d:e2:a8:25:97:ae:49:2a:5f:
         28:b9:f8:31:25:f1:67:a1:d6:08:2a:0d:ce:3e:12:e7:f1:80:
         6a:37:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:42 2024 by rpki-client on console-fra.rpki-client.org