Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/41d5ace5-729e-36a6-af67-e62dba0ecf5c.roa
File:                     41d5ace5-729e-36a6-af67-e62dba0ecf5c.roa (raw, json)
Hash identifier:          EB/oypw+XuvxLYAyIir7/Y2SS5vtAwUHzYhk3iaUjjM=
Subject key identifier:   C3:29:F5:BA:48:B7:55:9D:34:FA:BC:DB:5A:65:6A:C3:98:4A:65:B6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246BB6A9D66267677AE0D20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/41d5ace5-729e-36a6-af67-e62dba0ecf5c.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3360
IP address blocks:        130.174.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:bb:6a:9d:66:26:76:77:ae:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=50563081-26d4-4cb9-9478-de6fa84bcabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:39:78:6b:9f:74:aa:f9:a1:28:05:db:21:
                    31:09:01:67:40:4d:22:f2:97:e1:a2:31:02:62:26:
                    09:34:c4:68:78:68:ca:e8:73:05:0b:c5:75:c0:ba:
                    e2:83:4b:5f:d8:b3:dd:b0:97:40:92:36:40:41:67:
                    8b:d1:fa:0c:f8:27:39:c2:46:eb:b7:70:eb:11:f0:
                    87:25:46:ac:88:5f:a6:a7:16:08:98:ab:79:d3:7a:
                    f0:b2:2c:98:db:01:2f:19:5c:c2:72:4f:df:1a:38:
                    8a:6e:7c:40:0f:4a:a6:9e:1c:b2:71:7a:06:5e:ea:
                    86:b5:d5:9e:2b:a1:63:be:2b:00:89:fc:78:93:d7:
                    69:d1:d2:9b:89:b1:cc:e3:1e:54:8a:02:d8:9b:33:
                    cc:4a:3e:73:b1:90:9a:8a:46:f5:5a:4a:1b:de:c2:
                    c3:fe:71:e2:41:56:4e:5f:df:4e:00:4b:ce:7f:35:
                    05:b7:3f:71:7e:cc:58:e7:43:1c:75:4e:52:4b:7e:
                    38:1a:67:06:4a:57:a5:a7:a8:97:4b:6c:2d:43:74:
                    e2:ea:31:32:2a:98:02:b6:5a:02:63:6e:06:87:11:
                    51:7a:50:33:08:d5:e6:62:e3:d5:16:5f:91:e7:64:
                    ff:85:c0:3c:f4:f3:13:3c:a9:f1:81:f7:9c:ea:f8:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:29:F5:BA:48:B7:55:9D:34:FA:BC:DB:5A:65:6A:C3:98:4A:65:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/41d5ace5-729e-36a6-af67-e62dba0ecf5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:70:d1:1b:70:e1:f6:11:fb:f0:b1:9b:e4:e9:a3:75:32:34:
         20:1b:25:b4:f6:30:5e:b6:c7:bf:5f:85:9a:38:47:66:e2:67:
         b0:72:10:85:fe:42:83:fe:9b:97:48:8d:29:95:fd:10:cf:60:
         07:96:99:ba:cb:d6:7a:ae:f2:2b:7f:ea:8a:1a:e9:30:8a:31:
         fa:1b:92:e8:24:db:50:fb:9c:d6:c7:ea:17:db:3b:3e:d1:df:
         d8:86:88:55:c7:be:3d:24:83:ff:d5:e1:0c:e1:2f:2d:40:08:
         f3:32:df:bd:64:23:9b:d9:9a:b7:8a:c6:c8:3b:25:1b:6c:ba:
         eb:e6:9e:b8:29:d5:dc:34:c4:dd:87:3d:1c:14:1a:98:f6:29:
         30:a5:bf:54:18:b7:bd:a8:2e:16:96:27:25:54:46:50:ed:b3:
         cc:f6:90:79:1c:2a:bc:95:58:17:6f:88:af:3b:c8:a0:f9:7e:
         b8:c5:ee:da:e9:de:c4:40:bf:e4:e8:a0:df:48:ae:aa:da:0c:
         dc:37:e5:4f:bc:c5:46:6b:66:b4:9a:ab:0a:cf:06:d5:40:13:
         58:a2:15:5a:a8:2b:33:5d:6a:0e:f1:77:ab:11:34:55:9a:c4:
         c4:0d:e0:c4:fb:a5:e2:1a:3d:4b:cf:4f:80:de:a4:3e:2e:eb:
         6d:3c:05:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrtqnWYmdneuDSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NTA1NjMwODEtMjZkNC00Y2I5LTk0NzgtZGU2ZmE4NGJjYWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscg5eGufdKr5oSgF2yExCQFnQE0i8pfhojEC
YiYJNMRoeGjK6HMFC8V1wLrig0tf2LPdsJdAkjZAQWeL0foM+Cc5wkbrt3DrEfCH
JUasiF+mpxYImKt503rwsiyY2wEvGVzCck/fGjiKbnxAD0qmnhyycXoGXuqGtdWe
K6FjvisAifx4k9dp0dKbibHM4x5UigLYmzPMSj5zsZCaikb1Wkob3sLD/nHiQVZO
X99OAEvOfzUFtz9xfsxY50McdU5SS344GmcGSlelp6iXS2wtQ3Ti6jEyKpgCtloC
Y24GhxFRelAzCNXmYuPVFl+R52T/hcA89PMTPKnxgfec6viciwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMp9bpIt1WdNPq821plasOYSmW2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDFkNWFjZTUtNzI5ZS0z
NmE2LWFmNjctZTYyZGJhMGVjZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdw0Rtw4fYR+/Cxm+Tpo3UyNCAbJbT2MF62x79fhZo4R2biZ7ByEIX+
QoP+m5dIjSmV/RDPYAeWmbrL1nqu8it/6ooa6TCKMfobkugk21D7nNbH6hfbOz7R
39iGiFXHvj0kg//V4QzhLy1ACPMy371kI5vZmreKxsg7JRtsuuvmnrgp1dw0xN2H
PRwUGpj2KTClv1QYt72oLhaWJyVURlDts8z2kHkcKryVWBdviK87yKD5frjF7trp
3sRAv+TooN9IrqraDNw35U+8xUZrZrSaqwrPBtVAE1iiFVqoKzNdag7xd6sRNFWa
xMQN4MT7peIaPUvPT4DepD4u6208BcM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:50 2025 by rpki-client