Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d25b70a-e567-368f-a19d-98f652cf6c50.roa
File:                     5d25b70a-e567-368f-a19d-98f652cf6c50.roa (raw, json)
Hash identifier:          nWjA1DXbyx1Fk0gqodZf4XiTiHLuvradIdmeAbnBphQ=
Subject key identifier:   27:83:53:62:E2:EA:70:D6:7D:EE:D5:90:A4:23:FA:CA:5E:E5:24:BE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847537B699429B411566798FF00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d25b70a-e567-368f-a19d-98f652cf6c50.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     3360
IP address blocks:        130.174.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:69:94:29:b4:11:56:67:98:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=3ff2c1d0-d238-49de-b1e9-782b3f5eb7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4d:e4:05:53:30:0b:e2:6c:ef:d0:0b:0f:29:
                    8d:ca:04:47:45:85:fb:37:d7:37:f3:d5:1a:29:5f:
                    71:50:97:80:1a:c7:2c:ca:07:f6:1b:94:ab:33:2f:
                    88:49:a1:b7:5c:7a:7e:2a:94:03:68:84:3f:10:a6:
                    f9:1d:98:8b:f8:33:10:84:77:e6:8f:94:f1:72:26:
                    cb:20:46:0c:4f:1a:f5:77:86:a3:d8:22:f0:51:74:
                    77:e2:98:6b:89:6e:bb:7e:24:73:01:58:35:92:98:
                    e9:d1:67:21:7f:5a:a4:3f:98:9f:20:88:02:e3:66:
                    1d:b2:59:e4:34:39:4d:1d:bf:98:86:1a:43:23:fa:
                    28:2a:f4:4b:85:ce:a8:46:de:fb:32:c9:04:ac:c2:
                    06:80:c8:67:15:7a:67:ba:54:1f:b5:ca:6f:85:8b:
                    e3:0c:6b:8d:3b:51:2f:78:08:3c:ff:1e:33:03:d5:
                    96:6f:79:4a:04:92:88:3d:af:b3:79:0f:de:5c:cc:
                    da:d1:9d:1c:bc:ed:97:2f:d1:3a:18:f0:2e:82:75:
                    71:01:a5:55:16:90:3a:b3:70:42:1f:99:07:d2:4a:
                    4a:4c:27:00:3d:0e:03:99:18:00:22:a6:25:6d:9a:
                    a4:7f:f2:21:7f:ab:c5:86:f0:e8:87:ba:9a:0d:23:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:83:53:62:E2:EA:70:D6:7D:EE:D5:90:A4:23:FA:CA:5E:E5:24:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d25b70a-e567-368f-a19d-98f652cf6c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:be:b8:a2:63:6b:1b:30:06:7b:37:25:3b:14:98:a3:f2:
         f5:40:53:61:1b:5b:39:ff:6a:63:9c:b5:85:ed:f2:4b:4e:ae:
         7f:f5:65:a6:ae:5e:30:74:e2:ca:89:6c:08:c9:0d:70:50:b8:
         04:72:43:8b:7a:f9:60:19:d2:28:5f:f1:2a:ae:62:9f:ce:24:
         70:52:55:ad:3f:89:f0:76:f4:72:80:ac:d5:9d:a2:3d:42:3e:
         a9:25:84:23:e5:d8:95:10:cf:25:77:b4:e1:ef:42:8a:b6:27:
         d4:55:24:e7:a7:12:f7:e3:47:47:69:c9:01:9a:e3:f3:74:5c:
         12:8b:7d:40:0c:7b:40:0b:45:3a:e0:d9:a4:07:d4:32:46:d2:
         62:65:ac:63:f7:03:a3:b3:47:9b:e6:4c:53:cd:b0:95:83:d8:
         e2:c9:11:ad:56:fd:5a:d6:f6:67:91:13:9c:19:71:ad:67:5b:
         03:2a:1a:8c:d5:11:ec:c9:c6:0c:41:e6:59:5f:ff:a6:5d:c9:
         8e:c3:37:43:54:bb:75:dd:7f:d7:f3:a2:7e:22:d7:5d:ea:09:
         5e:de:5a:99:bb:d9:eb:0f:fa:37:77:64:57:14:95:c1:67:0b:
         a0:10:97:0f:9e:97:a9:68:cc:8d:0a:fd:35:e3:7a:81:1e:bf:
         0f:46:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:44 2024 by rpki-client on console-ams.rpki-client.org