Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3767d120-d10e-3851-b492-75332c18ae0c.roa
File:                     3767d120-d10e-3851-b492-75332c18ae0c.roa (raw, json)
Hash identifier:          JyhNdMRiIjZzlRhq5czUMSt+h2snN+T1uYLAaCLApgk=
Subject key identifier:   CF:88:6E:91:C0:28:20:07:43:99:54:33:FE:17:91:B7:1E:F8:E4:B7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847537B65413001C450EFB53E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3767d120-d10e-3851-b492-75332c18ae0c.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     202
IP address blocks:        130.174.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:65:41:30:01:c4:50:ef:b5:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=a1a30478-556b-4d51-8463-d2ecd5c2bbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e1:39:77:a5:6a:d6:58:01:d3:e7:55:bd:20:
                    e6:a3:93:5a:97:91:5f:45:6c:a0:2a:60:ce:aa:5a:
                    23:dc:60:02:65:24:3f:b4:5f:61:b2:7b:63:cc:3b:
                    b3:db:c1:0b:7d:86:ed:19:a3:a3:a7:45:15:89:05:
                    34:7b:30:8d:e5:73:4c:87:eb:a4:78:b3:19:e6:fc:
                    c9:b5:09:eb:30:b3:26:55:79:15:80:82:28:ec:1e:
                    20:24:2d:7b:1b:55:fd:b9:bc:d3:15:03:2e:d5:cd:
                    aa:16:fc:85:23:1f:86:8e:84:ab:ee:c8:41:da:fd:
                    f2:f2:44:30:b8:cf:5d:3d:7b:89:e7:1b:e7:5b:6b:
                    3f:e6:8c:3b:1a:df:46:aa:b4:81:f7:d6:04:38:42:
                    cf:c4:72:aa:39:b5:a2:23:7c:99:99:a0:b1:ab:04:
                    b2:9e:df:3a:df:a5:e0:d9:13:d3:a8:37:86:2d:70:
                    20:80:83:3a:17:b4:1f:04:0c:cb:17:3a:99:f7:22:
                    ff:fc:0f:c9:c7:0d:44:c1:cf:83:ba:92:56:f5:bf:
                    50:46:87:a6:e3:c9:03:07:03:2a:bb:0b:23:1c:78:
                    e1:a7:e3:b3:e9:6a:40:02:06:5e:bc:bd:69:57:d4:
                    f7:b1:15:b6:0f:4f:c9:1b:95:07:ba:83:6b:1b:31:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:88:6E:91:C0:28:20:07:43:99:54:33:FE:17:91:B7:1E:F8:E4:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3767d120-d10e-3851-b492-75332c18ae0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7d:4f:1a:68:84:a5:30:6d:a0:63:45:0a:73:01:73:9a:2c:
         7e:7f:8b:b9:f4:56:d2:25:33:95:38:92:f1:79:6e:d5:2b:19:
         46:d1:a3:24:9b:8f:c1:42:60:02:5d:61:96:55:4b:37:dc:a6:
         06:81:2a:0c:83:cd:e4:c3:41:62:28:4c:96:b7:16:13:c6:5d:
         a6:f4:5f:29:29:a9:b3:a5:46:cd:9f:df:1a:19:c1:c5:2c:8e:
         d3:98:22:4e:1d:7e:8b:bb:87:cb:5f:ae:e2:09:d1:9b:0f:e7:
         49:c4:d0:22:23:62:96:a3:47:85:ee:c1:28:3b:2c:b5:12:80:
         b9:16:88:81:d6:26:2e:ed:e0:92:4e:c1:e8:55:fd:d5:d8:c5:
         ca:e4:6d:b9:1a:66:cb:d2:77:4d:6a:a0:c4:18:cc:79:1e:c0:
         a8:23:de:27:7c:4c:bf:51:f4:dd:41:30:76:9e:cf:7c:5c:23:
         65:e3:43:8d:5f:24:75:c9:f6:21:d6:04:09:ca:25:f8:3b:8a:
         fa:d4:c2:40:0a:77:0e:1f:d0:59:f7:4d:ab:06:16:05:93:92:
         89:05:da:2d:36:48:32:9c:7c:70:82:40:80:20:34:37:95:e4:
         c6:68:0e:b4:33:3a:8b:23:3f:07:97:ce:b1:37:96:88:92:9b:
         bf:1a:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:42 2024 by rpki-client on console-fra.rpki-client.org