Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa
File:                     4ccaf6cf-5069-3f74-915c-660c34906331.roa (raw, json)
Hash identifier:          voBRZgOy03fImN8PcuRXYHOBtziOgaFO91UpWdvCZFs=
Subject key identifier:   57:8D:A2:CE:C0:3B:2F:6C:30:09:A9:FE:0E:4D:09:CA:5C:58:70:5E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246B2E2897DF35218A64600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     203
IP address blocks:        130.174.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b2:e2:89:7d:f3:52:18:a6:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=5181e860-ff81-4dc4-a737-a0255bb45783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:ca:3b:87:0a:5d:aa:df:3e:46:7f:7c:77:
                    3c:6d:11:7f:f5:53:14:9a:ac:95:f7:b2:4b:fd:8c:
                    8b:d2:65:c5:91:57:d4:a7:91:6c:92:60:22:a3:87:
                    6c:4c:72:ca:1f:d6:d3:0d:e0:7e:7c:ff:fa:4e:7a:
                    23:07:83:d9:4b:73:fe:48:e9:37:d2:d8:a6:d1:04:
                    e0:b6:01:18:84:44:8f:6b:ea:c7:83:04:a3:39:93:
                    d4:32:cd:40:e8:5b:a8:ab:1c:57:d7:4a:ac:e0:2b:
                    03:97:25:3b:6e:83:dc:bc:28:65:41:28:59:5a:45:
                    b4:e2:4d:4a:4b:be:87:c4:48:35:c8:de:02:e0:de:
                    2a:1d:43:01:fe:47:cd:de:e9:0e:3f:4a:4a:65:47:
                    38:59:f8:a6:df:20:1a:6c:25:dd:9b:5b:46:0f:16:
                    65:d7:74:b9:43:80:84:9c:e9:ea:7a:0d:e3:c5:4b:
                    79:ea:a1:86:5f:98:84:ff:02:1e:95:6e:2d:f0:30:
                    8e:51:12:56:63:a8:2e:eb:60:f2:1b:65:b4:d9:76:
                    ee:57:0c:8d:f9:4f:66:a4:a2:08:c1:21:c8:27:f9:
                    49:3e:25:1f:c0:79:58:57:1f:07:37:dc:19:f8:e8:
                    ce:97:c1:86:64:eb:27:54:a3:ed:92:76:fd:8d:ef:
                    72:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8D:A2:CE:C0:3B:2F:6C:30:09:A9:FE:0E:4D:09:CA:5C:58:70:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:f5:d3:2f:9c:3d:4a:6d:53:37:88:db:5d:c4:83:39:47:
         57:4a:3c:01:ae:b5:2c:25:95:12:32:c3:5e:b9:b5:b5:9a:0e:
         c9:ec:b2:68:db:bf:e5:4a:89:44:f2:a4:12:77:fe:c3:ac:cc:
         c7:92:4c:da:03:13:ea:88:d1:22:c0:00:49:8f:bb:9d:c3:bd:
         65:6b:71:68:e1:ce:6f:fd:e5:4b:1e:ac:c7:49:28:4f:df:97:
         f0:bc:cc:06:36:3e:ed:40:4b:41:05:18:88:f3:fe:88:a4:59:
         55:2a:dd:79:03:a6:30:1e:88:3f:48:41:4f:2b:aa:58:71:59:
         ce:8f:82:49:e9:16:ce:7e:ef:7c:e9:cf:48:44:da:cf:31:19:
         73:0c:fb:3a:3b:3e:4a:f4:38:f9:98:fd:63:5d:82:8d:27:b8:
         82:a1:c9:97:44:09:2b:67:4e:de:74:f3:73:1f:a0:42:e0:58:
         b3:e7:81:de:e0:80:ec:b8:bf:b3:0e:da:f1:df:ce:2d:60:e3:
         67:88:08:c2:c4:43:6a:cc:a0:1d:7a:63:54:8c:7d:2f:54:c4:
         4d:f5:8e:82:e8:96:22:1c:35:ba:30:a6:46:7d:ac:47:3a:6d:
         f2:c3:e7:95:77:ec:7e:73:b7:47:7c:f3:75:5f:f7:f3:49:ee:
         5e:5b:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:58:48 2025 by rpki-client