Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d36052d-40ea-30a5-8713-93136b44d55b.roa
File:                     3d36052d-40ea-30a5-8713-93136b44d55b.roa (raw, json)
Hash identifier:          d3f5QL2cU/t+ZRcTw4JYDPeR/k9RUFxs9Jq8lIn6Q2Q=
Subject key identifier:   36:1F:6B:36:3F:6C:E7:61:9C:C5:F3:36:4A:F0:69:A7:52:E0:F3:98
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459633565F4468BA416AE12D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d36052d-40ea-30a5-8713-93136b44d55b.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        130.174.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:56:5f:44:68:ba:41:6a:e1:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=e3d88c66-8fc1-44e6-b492-72225868c782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:4d:14:18:5a:40:52:58:57:e2:8a:bd:34:
                    6e:51:bf:c8:c8:2f:df:67:dc:d6:f8:d1:f6:60:65:
                    6d:aa:7a:c2:65:19:ea:34:a3:3e:41:ca:82:fc:02:
                    d5:fa:6a:c7:24:8e:2d:85:f5:0d:96:d4:15:5b:06:
                    76:74:02:e1:0d:82:62:e9:74:26:0c:ce:ad:47:e4:
                    29:f0:a8:1a:65:cf:9e:0e:66:79:2a:e4:02:1b:fa:
                    32:4b:ef:3a:9c:96:45:1c:62:41:9e:66:95:a7:8b:
                    04:a8:51:a0:db:85:ee:1f:35:0a:b7:0e:c8:ad:bd:
                    3d:4c:8e:50:6d:f7:ae:23:5a:c9:83:b1:17:25:86:
                    dc:0a:23:47:4b:48:8e:15:a4:8d:c4:51:60:88:77:
                    c9:0f:07:ca:1e:09:81:4e:31:a8:c5:26:06:34:82:
                    98:86:9e:60:50:1c:45:36:a6:27:5f:b4:ed:8d:86:
                    65:38:e4:2d:43:1e:40:83:4c:45:52:33:bd:a8:1b:
                    89:85:c6:2c:4b:4e:7f:c1:9b:6a:c2:76:d1:9e:c8:
                    b5:73:7f:56:33:3c:bf:77:29:82:9d:db:67:07:db:
                    29:d2:29:7a:0c:b3:ad:99:f3:60:97:d9:13:01:92:
                    ac:ed:28:0d:da:03:38:0c:b2:0a:5d:76:bc:cf:b1:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1F:6B:36:3F:6C:E7:61:9C:C5:F3:36:4A:F0:69:A7:52:E0:F3:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d36052d-40ea-30a5-8713-93136b44d55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:da:e6:92:d8:62:dc:69:5e:c3:64:35:5f:b2:bf:08:23:
         ef:9d:2d:a5:65:d7:36:21:8a:f0:c0:08:9f:e9:58:3e:66:c6:
         78:d3:98:3c:a3:8f:f2:64:d1:aa:ff:63:a4:38:67:b0:87:d7:
         dc:40:47:77:cd:7a:e7:4e:69:ea:b6:35:8a:72:db:ba:5d:78:
         39:92:9e:3c:34:3c:01:23:55:46:eb:c3:0c:10:5e:e8:6a:97:
         42:ad:68:d2:62:71:f2:1b:e7:84:47:ab:91:54:33:a1:75:b0:
         7b:9f:bd:bf:44:40:fc:e2:e6:b3:19:a2:62:81:51:8c:81:78:
         08:3d:0b:02:0d:51:0f:d4:82:f5:0f:5e:16:51:77:0c:af:ab:
         9b:a8:be:08:a5:46:c8:6b:91:01:e1:fb:d0:11:e0:48:61:ef:
         6f:bf:11:b2:67:eb:db:bd:b5:4d:f4:9f:84:a0:6e:f5:c0:40:
         9d:9e:63:92:31:78:b5:e5:b5:8d:cf:b8:62:fa:87:9f:5f:ac:
         ea:6d:35:69:d5:15:ab:92:20:5b:1b:ac:37:ae:1a:d3:90:04:
         a1:e7:15:cc:bf:8a:65:e1:be:ba:66:f4:a2:fc:60:e0:1c:0c:
         f8:b9:9a:6d:74:b1:8f:8b:a1:96:37:ed:a7:9c:e8:e8:ac:63:
         23:3a:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:40:39 2024 by rpki-client on console-fra.rpki-client.org