Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32b3c269-5d44-3c28-854b-28077dda0c5f.roa
File:                     32b3c269-5d44-3c28-854b-28077dda0c5f.roa (raw, json)
Hash identifier:          u1z4g9K7Yhe9OanSvytnEQcGH0MsU0ljZ69Nkam7MXo=
Subject key identifier:   56:E9:14:99:3E:65:09:E6:8C:33:31:49:73:ED:96:0C:2A:7B:78:01
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246C28080FE74E69362B5C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32b3c269-5d44-3c28-854b-28077dda0c5f.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3356
IP address blocks:        130.174.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c2:80:80:fe:74:e6:93:62:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=eb339001-7a7a-4d24-a894-ddc9557a7e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:1f:83:d6:02:58:40:ac:09:3f:be:ca:ab:
                    ab:2d:c5:77:19:c6:0b:17:c0:56:f4:29:39:9d:79:
                    f0:a3:a5:49:40:6c:61:94:da:60:16:db:f6:46:6d:
                    d3:2c:a1:ed:e3:80:2a:e7:ca:6f:29:11:d8:18:63:
                    5a:d4:07:f3:ea:ac:b9:97:a2:d6:8b:c6:1f:a4:dd:
                    27:76:f2:94:d1:41:33:2a:40:ff:0b:10:5c:d3:01:
                    56:ee:02:84:62:19:e4:64:98:29:37:e3:6b:b9:ef:
                    9c:bc:0f:82:6b:1e:80:b4:ee:e4:69:4d:26:03:2d:
                    5a:2d:0b:a7:ed:2c:96:f2:ed:86:dd:16:e4:16:2a:
                    6d:7f:ca:d7:b2:00:2a:08:82:46:5c:75:33:a1:53:
                    f9:1d:03:95:c5:94:36:91:7f:95:3d:01:7f:ff:17:
                    9f:0a:a2:af:28:10:d2:be:40:71:c3:60:9c:39:c1:
                    9b:3d:9f:98:d1:18:ed:14:8c:39:bb:3a:52:d0:7b:
                    8d:10:1d:2a:55:ee:25:86:b1:26:67:02:18:8f:ea:
                    9c:b3:92:39:4a:fd:f3:94:ab:ba:95:79:89:6b:a7:
                    80:49:3d:ef:6c:2b:5b:aa:c8:b7:6c:86:f9:e3:fe:
                    f7:c7:02:cd:60:b4:a8:15:b1:15:b6:23:76:90:f7:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E9:14:99:3E:65:09:E6:8C:33:31:49:73:ED:96:0C:2A:7B:78:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32b3c269-5d44-3c28-854b-28077dda0c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bc:a6:16:dd:03:fc:6d:be:d2:06:10:ff:67:44:8d:e4:66:
         d8:80:5a:cf:25:96:ac:b2:fa:20:7a:8f:20:f3:08:1d:61:9e:
         8a:03:d9:c2:b4:68:be:60:bf:65:59:df:ab:5d:fc:e0:19:1e:
         7e:af:33:eb:00:6a:34:48:08:7f:76:ac:9e:4b:3e:37:c5:a7:
         1d:de:d5:78:cf:5a:4d:5c:0f:1e:cd:fc:89:bb:76:41:78:aa:
         4f:99:82:ac:3d:5d:1c:05:ce:65:a3:fc:2a:b3:c4:f5:93:d4:
         3f:1e:4d:cc:63:76:70:0b:fd:6b:06:f7:79:e0:9b:db:04:3a:
         db:e0:4d:cd:3c:f3:9f:61:7c:08:8f:bc:ad:f0:0d:52:a4:14:
         89:35:05:cf:42:2b:04:6e:2c:0a:ae:d9:10:d4:20:4f:b6:ea:
         fc:6a:3c:c8:ec:3d:4f:d2:42:69:58:a6:8a:57:05:63:3f:de:
         52:3a:94:3f:0d:fc:eb:1a:9d:83:17:3f:51:e5:1e:17:bc:9b:
         78:a0:a3:12:b2:fa:a8:17:63:37:c1:96:2e:b4:19:eb:50:b8:
         8e:7f:a9:72:dc:4b:d3:fb:4a:ad:c7:7c:9c:ee:be:6b:2e:5e:
         fd:76:8c:8f:ed:85:6a:41:df:1b:26:1e:d0:ef:2d:20:b4:ff:
         45:6e:48:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:36:45 2025 by rpki-client