Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa
File:                     665189d6-ce51-375d-9fcd-5cdadec449ec.roa (raw, json)
Hash identifier:          Aj1os5SM6M3QmK9SzHnNoOSXIXrwbl2ESfFKp+Bh+R0=
Subject key identifier:   88:5B:C1:01:C2:D1:D0:63:CD:AD:73:BE:D8:29:84:C8:45:B7:6F:4B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858467424ACA10D8B7C4723CDA900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa
Signing time:             Sun 07 Jul 2024 01:00:25 +0000
ROA not before:           Sun 07 Jul 2024 01:00:25 +0000
ROA not after:            Sat 05 Oct 2024 01:00:25 +0000
asID:                     3356
IP address blocks:        130.174.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:74:24:ac:a1:0d:8b:7c:47:23:cd:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  7 01:00:25 2024 GMT
            Not After : Oct  5 01:00:25 2024 GMT
        Subject: CN=6503f33c-6907-4880-9c0a-c7ac2d6fccbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:9e:d3:39:79:f8:e5:9e:eb:4a:de:c7:9e:
                    b8:dd:e1:91:f7:24:65:c9:41:4f:8d:be:90:9a:25:
                    c6:d1:8c:a5:87:36:22:ae:c0:fb:d6:9e:db:6f:f8:
                    0d:64:d5:e6:b6:fe:88:ee:10:82:3e:8b:5b:72:bf:
                    12:0e:ab:bc:dc:56:a7:fa:28:31:c1:31:7d:01:63:
                    ac:f5:f5:7c:97:14:26:c5:bc:56:d8:57:14:f7:c3:
                    cb:cd:0b:79:3c:a0:15:d5:a9:c6:41:d4:02:a2:73:
                    2d:bc:52:19:28:16:a2:02:5d:6d:f0:78:e7:80:1c:
                    f3:e7:20:23:09:ea:78:82:97:01:9f:26:2c:bf:91:
                    5d:f6:4b:a0:86:13:4f:5f:e0:ac:64:38:73:21:d0:
                    5d:a2:d8:4d:20:cb:93:60:06:66:1b:3a:07:e5:de:
                    3b:07:2b:a4:92:b4:f1:62:9c:d9:b1:65:23:d8:e3:
                    f8:93:7a:27:be:f9:e0:d5:bf:f9:98:d8:78:8c:c5:
                    7e:80:37:5f:c4:83:67:55:66:ec:e5:66:bb:55:7f:
                    ee:f1:ce:89:9c:78:32:1d:6e:6c:47:df:a8:87:b6:
                    f9:05:de:91:44:6d:03:7d:ba:e3:f5:7e:cf:e0:e6:
                    bb:7e:7e:b6:73:8d:02:ed:53:15:af:09:6e:1e:6b:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5B:C1:01:C2:D1:D0:63:CD:AD:73:BE:D8:29:84:C8:45:B7:6F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:65:59:77:95:ec:3f:83:8a:ef:82:fc:5c:e0:4a:ee:52:af:
         86:13:5b:7c:92:f4:ce:cd:f4:41:0a:67:90:3f:16:0a:cb:03:
         68:4c:e9:95:6f:f1:be:b7:36:53:85:af:cc:01:d3:17:29:b2:
         e6:e3:b6:ea:0f:11:e1:fb:25:53:cc:4f:75:76:7c:8e:cd:81:
         a1:ff:1e:32:26:4d:ae:89:31:7b:7b:8d:d7:bd:fd:a9:ef:90:
         3d:96:34:b1:83:78:99:36:b1:02:f4:03:79:21:e1:20:49:ee:
         e7:13:06:72:18:ff:f4:5e:14:5a:71:c4:e8:ee:23:d9:25:a0:
         f2:1b:d7:1d:a0:d4:b8:b4:ef:2e:26:d6:0e:7f:bc:36:9b:ce:
         de:4a:57:03:fb:46:20:f8:9a:3c:14:74:4e:79:8f:2b:2e:28:
         e8:e2:d9:9d:79:6a:4e:70:a2:db:5a:f4:14:dd:c2:03:d6:a5:
         3c:20:94:87:59:42:ca:8d:23:bd:87:87:f0:f6:fb:9b:36:62:
         de:0f:4f:2b:3a:0e:27:fa:95:56:92:18:e1:c4:4f:3c:26:67:
         77:96:44:3b:a4:ce:50:29:77:9c:dc:83:57:f5:39:84:48:17:
         1b:9e:65:9c:a0:36:ab:b5:b1:8d:d1:f3:07:e8:7e:24:63:57:
         ee:a9:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 21:50:57 2024 by rpki-client on console-fra.rpki-client.org