Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2afb0ad9-4f76-3231-9716-3c8199667252.roa
File:                     2afb0ad9-4f76-3231-9716-3c8199667252.roa (raw, json)
Hash identifier:          IRgsx0fv/3cHq92I5V5POhsz9OZZPClyzZZv16cAJ70=
Subject key identifier:   5B:8D:0E:59:B9:C2:5C:7A:0B:10:B5:12:C3:2B:9F:6E:BC:25:23:1B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F03C0071A8BFEA47559E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2afb0ad9-4f76-3231-9716-3c8199667252.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     202
IP address blocks:        130.174.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:3c:00:71:a8:bf:ea:47:55:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=d23e779a-9f31-4880-bfa1-c00d36970f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:70:52:1b:2f:16:30:73:56:28:c3:d5:38:
                    18:87:bc:b7:be:e7:79:80:3a:a3:57:38:b1:62:66:
                    e9:b8:07:ad:25:eb:2d:51:f4:6b:3a:0b:3d:79:c0:
                    5a:8e:be:74:94:fb:2c:e2:af:32:56:07:10:a6:02:
                    fd:4c:8c:de:a6:fb:3d:49:93:37:61:9d:20:21:43:
                    49:28:90:56:1e:57:c2:d6:df:dc:95:2d:4f:97:c4:
                    8e:42:cb:95:f4:ea:59:00:20:8c:b7:61:a8:3d:fd:
                    e6:d6:c8:b2:74:c6:92:ed:ca:b5:a0:92:fa:08:ab:
                    35:67:d4:0d:40:55:05:22:16:8e:f8:f6:36:6f:9e:
                    00:4b:53:77:2f:67:16:f2:ea:0a:36:cc:57:2a:11:
                    c7:bd:f6:de:fd:75:e5:46:d7:4b:44:be:c2:4b:6b:
                    7d:9d:30:fe:99:dc:d5:e2:9b:26:f8:d2:d1:87:ef:
                    01:2b:3c:5a:c5:a6:22:00:a6:f9:23:3c:ec:8b:8b:
                    3c:e4:98:ac:c5:48:63:83:91:17:d2:34:29:49:8b:
                    e4:23:af:7c:67:df:5d:f7:d3:77:d3:b3:0d:e1:e4:
                    46:f1:eb:37:53:af:64:8d:10:52:e9:a9:99:7e:d1:
                    6c:66:9a:4f:90:80:ac:92:e1:94:67:58:8f:0b:40:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:0E:59:B9:C2:5C:7A:0B:10:B5:12:C3:2B:9F:6E:BC:25:23:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2afb0ad9-4f76-3231-9716-3c8199667252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:47:44:9c:c6:7a:40:93:a3:03:80:1b:b8:ee:97:5b:11:70:
         eb:f4:fc:d2:64:60:8f:25:10:32:a4:f0:da:6e:42:1e:db:4b:
         09:4a:7e:54:91:a8:87:79:b5:1c:49:aa:13:a2:e0:81:3d:f9:
         77:0f:91:6f:e8:4d:58:01:29:80:26:c4:a7:d8:12:eb:4e:13:
         3d:3b:28:4a:ee:58:bf:a0:80:36:26:37:4b:94:39:85:a3:38:
         8f:1d:db:2d:53:a5:b1:c5:24:5d:12:b1:8b:0d:2a:0f:e1:c1:
         e6:6f:09:df:64:91:5a:cf:bc:de:6c:93:58:7f:2c:b1:79:47:
         9d:d4:71:5e:2c:42:f2:7d:d6:ce:89:23:9f:29:e5:f8:89:08:
         91:7a:81:c4:b9:aa:94:54:4a:f4:26:9f:64:b4:6a:44:a8:e3:
         1d:22:d0:9c:8a:dd:fa:41:8a:98:17:d8:16:16:c2:ce:aa:8b:
         49:96:5e:af:d2:0f:fb:ed:f3:59:bc:80:d2:1c:7e:6d:64:7c:
         89:24:45:68:8b:19:f8:e3:f5:b5:be:14:0d:b1:51:44:ef:bf:
         c6:ce:b1:fe:dc:a1:17:1c:24:ac:e2:21:6e:31:a5:79:4f:2f:
         a8:09:d5:75:5f:c7:c7:6e:a2:08:2d:e5:7c:42:b7:87:0f:9b:
         58:53:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:08 2025 by rpki-client