Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/401240ab-9d89-3299-93ae-58b131e7315d.roa
File:                     401240ab-9d89-3299-93ae-58b131e7315d.roa (raw, json)
Hash identifier:          yyCZU19z/iSM7Vd8cQPeFvJp2VxHqOExQBjp+6QCNmk=
Subject key identifier:   0F:2E:59:1D:90:3F:74:22:D9:AE:D8:EE:99:B2:9A:8F:10:59:6B:A6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963365C827B591EA8BB37480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/401240ab-9d89-3299-93ae-58b131e7315d.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        130.174.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:65:c8:27:b5:91:ea:8b:b3:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=40a84180-389c-42c2-9943-76c9833c565c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:47:e0:63:90:0a:70:f1:fd:ee:25:f7:e7:
                    72:18:f7:69:de:ef:19:af:d0:4b:a1:d7:a0:4e:98:
                    ff:4f:f1:17:96:9f:00:80:cb:40:6e:59:93:78:b4:
                    cb:ff:04:87:6d:85:ce:33:e5:f8:cf:df:47:0a:e8:
                    74:14:5b:06:02:4b:da:a1:2c:90:44:37:b8:ab:89:
                    11:8c:da:96:ac:45:c1:a1:ed:41:6b:46:84:7b:3c:
                    27:eb:ad:98:21:89:94:0f:41:cc:46:26:90:1b:a4:
                    00:df:41:45:5c:3a:c0:f1:a2:99:3f:6a:c4:39:a2:
                    8d:bd:c1:b0:01:e0:67:9c:a8:fe:a3:8e:fb:e7:4e:
                    60:49:8c:e0:6c:a0:70:8f:ba:f8:bb:98:5e:0e:0e:
                    f6:28:24:b3:f2:d1:3e:00:80:22:f0:f2:d0:9a:38:
                    4c:11:e2:7c:98:d1:34:f5:81:ff:19:a4:4d:73:71:
                    52:b5:f3:56:d2:62:d8:0d:a1:b9:2c:ab:0c:94:48:
                    c3:50:58:05:09:f7:52:6a:ce:56:17:c1:fc:5c:3e:
                    1c:3b:01:9f:17:37:e5:0c:e6:90:09:9b:7a:c3:35:
                    5c:a5:b9:1b:9f:74:a1:23:d2:7c:fa:60:c2:07:ae:
                    f9:54:bd:91:db:6f:c0:b4:a7:e4:42:68:dd:ef:ca:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:59:1D:90:3F:74:22:D9:AE:D8:EE:99:B2:9A:8F:10:59:6B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/401240ab-9d89-3299-93ae-58b131e7315d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fd:42:e3:f3:db:f0:20:a1:71:24:db:f8:4f:50:2e:b1:a9:
         92:54:91:69:32:56:3b:37:9c:05:2a:46:ee:49:08:05:8f:02:
         91:2c:ee:39:65:ea:ee:98:b2:e8:cb:cd:ed:5d:be:68:1f:b7:
         48:96:35:92:37:69:5a:9a:84:29:70:e5:aa:04:00:f8:46:58:
         53:b1:64:3b:e5:aa:63:98:39:3b:ab:9b:95:b5:b8:4e:04:fb:
         e2:8b:fc:f6:68:9c:0a:62:33:dc:c7:9b:17:9f:5c:07:31:8c:
         23:98:ab:57:87:e8:f3:95:e0:8d:01:4a:97:0c:a7:9e:85:87:
         6b:87:19:37:c0:bc:25:d9:e8:84:9a:dc:e7:d1:70:93:04:e3:
         35:95:8b:06:0f:9d:25:74:14:d0:bc:0b:5b:13:98:f0:6c:41:
         9a:2a:33:30:ab:35:16:0b:8c:89:b0:17:50:f2:24:78:96:d8:
         66:77:c6:c2:c6:e9:78:31:d9:4e:8d:70:05:3d:54:16:e6:2b:
         fe:1f:10:67:62:e4:c7:a2:ec:c6:79:37:9c:34:0c:bd:da:1a:
         f1:f8:fa:4a:6b:fd:cc:d9:3a:d9:a7:a9:55:d4:1a:bd:45:03:
         c7:60:45:fe:f4:e6:8c:38:c8:48:be:d7:ac:d1:45:ee:5c:6c:
         2c:ec:78:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWWM2XIJ7WR6ouzdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
NDBhODQxODAtMzg5Yy00MmMyLTk5NDMtNzZjOTgzM2M1NjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuZH4GOQCnDx/e4l9+dyGPdp3u8Zr9BLodeg
Tpj/T/EXlp8AgMtAblmTeLTL/wSHbYXOM+X4z99HCuh0FFsGAkvaoSyQRDe4q4kR
jNqWrEXBoe1Ba0aEezwn662YIYmUD0HMRiaQG6QA30FFXDrA8aKZP2rEOaKNvcGw
AeBnnKj+o477505gSYzgbKBwj7r4u5heDg72KCSz8tE+AIAi8PLQmjhMEeJ8mNE0
9YH/GaRNc3FStfNW0mLYDaG5LKsMlEjDUFgFCfdSas5WF8H8XD4cOwGfFzflDOaQ
CZt6wzVcpbkbn3ShI9J8+mDCB675VL2R22/AtKfkQmjd78qwUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8uWR2QP3Qi2a7Y7pmymo8QWWumMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDAxMjQwYWItOWQ4OS0z
Mjk5LTkzYWUtNThiMTMxZTczMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADf9QuPz2/AgoXEk2/hPUC6xqZJUkWkyVjs3nAUqRu5JCAWPApEs7jll
6u6YsujLze1dvmgft0iWNZI3aVqahClw5aoEAPhGWFOxZDvlqmOYOTurm5W1uE4E
++KL/PZonApiM9zHmxefXAcxjCOYq1eH6POV4I0BSpcMp56Fh2uHGTfAvCXZ6ISa
3OfRcJME4zWViwYPnSV0FNC8C1sTmPBsQZoqMzCrNRYLjImwF1DyJHiW2GZ3xsLG
6Xgx2U6NcAU9VBbmK/4fEGdi5Mei7MZ5N5w0DL3aGvH4+kpr/czZOtmnqVXUGr1F
A8dgRf705ow4yEi+16zRRe5cbCzseLk=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:42 2024 by rpki-client on console-fra.rpki-client.org