Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/608c16ab-00e7-3c81-b1d2-a1a19635c4c6.roa
File:                     608c16ab-00e7-3c81-b1d2-a1a19635c4c6.roa (raw, json)
Hash identifier:          NBnBu/aCSPuEsFXzFO1tZECTuEq1eQhSsuWKwUA+8eA=
Subject key identifier:   02:BF:76:86:04:34:8F:66:36:85:7A:D9:6D:0C:CF:B6:A0:B3:C1:B1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC29B9DFB927EB612C1F30
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/608c16ab-00e7-3c81-b1d2-a1a19635c4c6.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        130.174.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:29:b9:df:b9:27:eb:61:2c:1f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=f55867cd-e058-42c4-916d-7b52e06533f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:e8:84:4e:11:a0:2d:12:fe:cb:1b:33:1e:
                    a9:a8:8e:f1:fa:8b:41:ea:92:9f:bc:7b:7f:9a:7f:
                    b5:0e:62:39:fe:6c:9c:b7:02:52:fd:63:92:45:ad:
                    9c:4b:12:4a:1c:f3:d5:b1:5c:fc:9f:9b:f8:4b:5b:
                    b2:b9:c6:ce:60:76:c5:cf:29:51:a4:59:19:82:a5:
                    b9:86:c2:b3:92:9f:2c:79:06:00:3b:4f:53:c6:b6:
                    51:4e:37:49:2c:fc:47:e9:39:71:4f:cf:93:16:95:
                    db:c5:7d:6c:28:ac:82:17:58:c1:dd:3e:9a:e4:e0:
                    b7:96:79:0d:8d:d1:c2:53:ac:fe:03:36:0a:59:b9:
                    12:fa:3e:56:d8:44:85:27:1c:c4:a5:dc:13:b8:4b:
                    b9:ff:53:60:f9:a8:4d:c7:60:8b:58:96:43:d0:69:
                    22:f5:fe:3f:14:8d:b4:12:78:2d:ca:96:b4:e0:a4:
                    d8:55:19:d8:ec:af:68:9d:ba:34:81:96:78:c0:b3:
                    81:8e:51:45:c8:a0:b1:58:fb:3a:73:42:aa:bb:c5:
                    b7:f9:68:bc:33:04:0d:c3:ac:f6:8d:14:e0:0a:a3:
                    d3:82:f1:68:b3:7a:69:f8:26:82:2c:c3:02:98:39:
                    4b:8e:0b:20:3d:c5:a4:17:7e:20:47:8a:c4:d5:83:
                    80:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BF:76:86:04:34:8F:66:36:85:7A:D9:6D:0C:CF:B6:A0:B3:C1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/608c16ab-00e7-3c81-b1d2-a1a19635c4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:99:0d:3f:43:9b:6a:87:a7:25:25:56:c8:bc:d2:a4:a9:75:
         84:4e:bb:7d:40:8e:f1:2d:04:a3:28:3d:68:17:e7:7b:f9:e0:
         85:d7:60:46:23:d6:10:2e:48:b5:ab:32:59:94:30:91:ca:c4:
         58:74:e0:52:86:5b:2b:ec:8c:f3:a9:cc:38:97:80:e9:2a:1b:
         5b:22:7b:de:fa:a1:49:e6:02:5a:c5:1c:71:d8:b6:5d:22:f1:
         c0:64:35:9b:d4:31:bd:70:90:b9:b9:f9:92:81:c0:08:97:0f:
         97:ae:e5:42:52:f5:d6:67:7e:91:98:18:6c:6e:60:e2:8d:81:
         2b:35:11:2b:98:43:03:f8:c7:ba:9a:4e:91:59:87:db:11:e8:
         38:35:1c:a2:9b:54:60:97:16:aa:a0:67:2a:a5:ef:e1:a9:76:
         bf:8f:48:7f:38:95:22:16:cd:24:ec:85:5a:a2:20:4f:dd:d6:
         04:92:2d:91:11:44:9b:cf:10:f4:28:6e:a9:a1:63:55:80:f6:
         5b:84:80:2d:e4:fa:ae:68:88:a4:f6:b6:6a:09:e7:51:ae:27:
         1f:66:42:da:c6:74:9c:01:17:37:18:de:14:b0:65:4b:9e:2b:
         47:70:4c:c5:df:74:97:d9:54:24:04:1e:1e:2f:cf:3a:36:3b:
         da:c1:be:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCm537kn62EsHzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZjU1ODY3Y2QtZTA1OC00MmM0LTkxNmQtN2I1MmUwNjUzM2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiPohE4RoC0S/ssbMx6pqI7x+otB6pKfvHt/
mn+1DmI5/myctwJS/WOSRa2cSxJKHPPVsVz8n5v4S1uyucbOYHbFzylRpFkZgqW5
hsKzkp8seQYAO09TxrZRTjdJLPxH6TlxT8+TFpXbxX1sKKyCF1jB3T6a5OC3lnkN
jdHCU6z+AzYKWbkS+j5W2ESFJxzEpdwTuEu5/1Ng+ahNx2CLWJZD0Gki9f4/FI20
Engtypa04KTYVRnY7K9onbo0gZZ4wLOBjlFFyKCxWPs6c0Kqu8W3+Wi8MwQNw6z2
jRTgCqPTgvFos3pp+CaCLMMCmDlLjgsgPcWkF34gR4rE1YOAIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAK/doYENI9mNoV62W0Mz7ags8GxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjA4YzE2YWItMDBlNy0z
YzgxLWIxZDItYTFhMTk2MzVjNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIiZDT9Dm2qHpyUlVsi80qSpdYROu31AjvEtBKMoPWgX53v54IXXYEYj
1hAuSLWrMlmUMJHKxFh04FKGWyvsjPOpzDiXgOkqG1sie976oUnmAlrFHHHYtl0i
8cBkNZvUMb1wkLm5+ZKBwAiXD5eu5UJS9dZnfpGYGGxuYOKNgSs1ESuYQwP4x7qa
TpFZh9sR6Dg1HKKbVGCXFqqgZyql7+Gpdr+PSH84lSIWzSTshVqiIE/d1gSSLZER
RJvPEPQobqmhY1WA9luEgC3k+q5oiKT2tmoJ51GuJx9mQtrGdJwBFzcY3hSwZUue
K0dwTMXfdJfZVCQEHh4vzzo2O9rBvuI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:32:23 2025 by rpki-client