Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa
File:                     625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa (raw, json)
Hash identifier:          uUETL3TluJpwL5f6LxRH+k8JiS+PePeWY4SFWp/3sbA=
Subject key identifier:   97:97:27:5F:FA:E7:B4:92:1F:19:87:BC:29:DD:A1:EC:FE:04:99:CF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0D82C9605540E1AFF5F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     203
IP address blocks:        130.174.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:d8:2c:96:05:54:0e:1a:ff:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=9c060667-e406-490a-bca3-8501c8335a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:43:36:22:55:a3:d1:19:10:24:50:8b:ee:dd:
                    f1:b2:da:7e:71:92:fc:53:80:9d:19:ab:2e:39:9d:
                    48:ce:01:0c:8b:57:45:34:b7:27:91:81:e5:14:1f:
                    00:a5:fc:62:40:35:77:4a:95:44:ed:6e:86:5c:27:
                    68:48:7b:91:e9:5d:11:22:a7:73:25:4b:bc:d9:8c:
                    27:b1:c3:a8:ce:ac:16:9b:e0:34:d2:e5:2e:b6:b1:
                    d6:2a:26:62:bc:fe:68:45:11:22:2c:0c:31:b8:09:
                    66:fa:31:b5:7a:18:5b:f7:77:b5:c6:ba:9b:38:de:
                    fb:de:f9:fd:b4:0e:30:c0:9c:64:c8:68:0f:f3:35:
                    3a:a6:ec:2d:e7:64:30:52:5b:53:c4:3b:8b:fb:e5:
                    9c:fb:a6:07:f5:40:8a:a9:49:cb:45:07:67:eb:fd:
                    8e:e4:a7:cb:43:0f:9d:54:dd:c0:85:ad:ba:6a:cd:
                    e9:e5:24:4a:bd:7e:4d:cb:f8:41:a8:cd:2e:64:1e:
                    75:0e:dc:0b:cd:48:3e:6a:ff:14:fc:35:30:0d:a1:
                    2b:42:4d:51:e2:cb:a4:70:5f:fb:36:0d:23:59:d2:
                    d9:50:a3:e5:40:1b:05:81:aa:ee:38:1e:87:de:8d:
                    97:46:3a:2b:10:08:08:37:96:1b:4b:53:bf:08:3b:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:97:27:5F:FA:E7:B4:92:1F:19:87:BC:29:DD:A1:EC:FE:04:99:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:45:84:3c:c9:30:3a:b5:70:da:87:29:51:82:23:81:d7:10:
         3e:c0:d8:4f:41:52:34:ba:c4:10:f8:79:be:a3:ba:6c:78:8b:
         f7:c9:96:8a:7e:1d:33:aa:27:69:75:a9:4d:87:77:71:a5:51:
         6f:ef:de:3b:8f:11:27:02:e8:7a:7a:c4:6d:14:28:96:a1:4c:
         ff:b0:64:51:9b:2f:46:f3:6a:83:8c:f0:0e:e1:b4:1c:a4:e5:
         92:39:01:22:5c:02:1c:03:15:89:65:03:25:22:ad:2f:83:c3:
         74:c6:d7:37:5d:52:57:70:04:12:ab:ee:2e:f6:31:37:be:f8:
         fc:54:3f:e1:08:b8:d9:61:f6:c3:65:69:ff:60:30:76:a3:2c:
         a2:ce:ed:7c:97:d5:12:30:0a:d8:bd:b8:d3:77:17:f9:ac:fe:
         9d:5a:9a:d4:ff:07:4b:d8:cd:2b:fc:8b:0a:c0:83:8f:c5:7b:
         b5:53:a5:75:37:80:4e:df:58:ff:2f:6a:5a:9f:c9:88:dc:c6:
         00:ef:d8:48:8a:d5:44:2f:31:5a:b5:59:75:f1:8c:27:1c:c1:
         ee:ae:eb:68:00:36:d5:55:ba:e8:b9:31:2c:62:09:a7:d6:21:
         ca:be:09:76:9c:07:21:09:78:15:cc:be:82:62:a0:ec:ed:c5:
         b3:5a:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:44 2024 by rpki-client on console-ams.rpki-client.org