Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa
File:                     4ccaf6cf-5069-3f74-915c-660c34906331.roa (raw, json)
Hash identifier:          sGJfVCzK+MpWeY73H2vMAueLloNkAzXUZVNL1ginHiI=
Subject key identifier:   9A:9B:22:6A:42:5D:A4:7B:17:E2:F9:F0:97:48:96:63:F1:CB:87:2D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FBCC3511B7EE0B5FA3A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     203
IP address blocks:        130.174.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:bc:c3:51:1b:7e:e0:b5:fa:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=25a8b331-cac7-462b-811e-aefc36d1fda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:83:e5:47:19:37:53:01:a5:46:d4:03:c4:
                    3f:a0:32:5b:3a:e8:0b:e7:d5:2d:dd:ce:70:66:77:
                    be:8a:ec:bd:23:58:95:48:3a:0b:25:5d:20:f4:24:
                    16:51:0d:dd:da:1e:a2:46:49:98:c1:22:31:ae:15:
                    9b:84:31:5f:7c:cb:d6:75:a9:f2:c5:36:98:c7:c5:
                    1e:d7:34:8f:ef:c0:a3:c3:7f:6e:09:5f:fc:e8:cf:
                    38:4d:81:ce:4c:cc:b1:dd:f5:29:41:ff:48:60:1f:
                    b2:35:4d:1d:91:c8:09:f2:da:62:fa:76:b9:82:69:
                    7a:91:bd:46:ec:fc:dc:e0:42:b8:db:e0:85:9a:6b:
                    24:c0:06:fe:61:9f:24:ab:fd:85:ad:7e:ad:df:7a:
                    e6:9e:e9:5c:c7:94:50:2f:03:c5:2f:57:f5:59:d4:
                    b9:d6:81:af:da:3e:44:8c:2c:4f:3f:78:a8:ab:46:
                    24:42:a6:40:b1:8b:a0:7e:06:8a:44:d9:d9:99:5b:
                    7c:f5:3b:0b:a6:da:eb:ba:c0:b4:13:9c:e3:d7:95:
                    41:c6:8c:78:c5:1b:d8:24:45:e3:5d:f7:a7:75:ee:
                    c3:ea:2b:02:85:99:40:ad:eb:35:1c:79:51:33:17:
                    f5:45:99:0b:2a:fe:4b:9e:64:ea:48:a9:6d:c5:da:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9B:22:6A:42:5D:A4:7B:17:E2:F9:F0:97:48:96:63:F1:CB:87:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:8a:ad:3b:5b:a9:0f:ec:92:03:4d:29:68:3f:01:73:bb:
         3d:de:fd:78:40:8e:44:eb:9f:2f:90:40:e3:d4:05:0b:28:e7:
         49:7c:87:4c:a2:ed:9c:e0:00:11:55:4d:78:6c:67:c0:d2:cb:
         d5:25:ed:ca:76:b4:15:8c:89:f9:fa:ea:d0:84:54:8e:0f:29:
         f8:63:15:d1:ed:66:af:1c:5e:33:86:23:61:e1:b9:a0:b4:37:
         42:77:a4:92:8e:fd:6e:41:99:08:5b:23:c4:c5:d6:b6:63:cb:
         50:4f:3c:31:a9:6b:1e:71:e5:9f:2f:5b:68:d4:94:df:18:8e:
         c3:f8:a5:13:95:ca:01:f8:c8:5a:53:9a:45:a5:70:e6:18:04:
         83:d6:b9:d0:37:f5:5d:e1:46:52:f5:07:72:43:ea:47:15:78:
         ea:aa:da:e0:ef:81:9e:11:61:1e:9e:b1:94:45:b5:bb:2b:af:
         b7:78:6c:75:ff:ca:0e:5a:8c:d5:90:5d:cf:31:4e:01:7c:60:
         71:30:2f:ab:fc:f4:e2:b8:9d:8d:b2:5a:1e:41:17:99:f6:0b:
         88:2d:70:ea:38:33:06:f4:a2:82:d7:f0:17:3f:fa:56:10:de:
         fe:e7:2f:22:5e:08:07:e7:e4:6b:cf:23:79:fb:62:27:4f:51:
         79:d6:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:34:21 2025 by rpki-client