Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa
File:                     665189d6-ce51-375d-9fcd-5cdadec449ec.roa (raw, json)
Hash identifier:          uLn+tvb/Y6qMPUa8gtPKPhFvuzMNz1sfAblRqNKKqkg=
Subject key identifier:   8C:9D:63:1A:3B:13:33:ED:1F:29:0A:FC:30:23:CA:06:91:D0:ED:10
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584593689BD4360D5C07445D00A8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     3356
IP address blocks:        130.174.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:9b:d4:36:0d:5c:07:44:5d:00:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=609f78da-656e-4f32-9c13-defb9bab289b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:e6:c6:c1:46:1a:8c:a2:2c:43:07:57:d3:
                    2c:9f:df:01:9e:58:24:f1:c5:fc:c2:6c:fc:1c:82:
                    f2:a4:e2:c4:c1:e9:7a:37:a5:10:9a:4a:94:d5:14:
                    8f:29:68:e2:c1:71:7b:93:3f:aa:49:41:63:22:5a:
                    e3:6b:e8:6c:e6:e4:3d:b9:1a:a9:ac:c5:d4:69:d7:
                    d2:33:1d:17:35:c2:49:f8:d9:a5:93:c9:c3:7b:e4:
                    99:fa:72:28:f9:9f:a3:56:29:69:70:cc:8b:4c:f8:
                    7d:b1:07:fa:bc:d6:c4:4a:6b:ad:c3:9a:83:71:15:
                    cd:88:d7:27:d3:b7:b2:74:70:43:98:6c:c1:e0:d2:
                    d2:23:57:d8:7a:15:7f:7e:1d:6a:3e:cc:32:51:87:
                    d2:a9:03:52:fd:e1:4c:8e:fa:d8:d0:a8:b5:92:ab:
                    4f:7f:11:1b:a0:57:9c:a7:d4:43:e0:b9:21:89:7a:
                    4a:d5:5e:b8:53:af:ba:75:d6:66:69:73:64:3f:c6:
                    7b:2b:e7:40:8e:92:ee:57:b2:fe:0a:15:7f:a9:7d:
                    43:f1:b0:8d:bc:d2:f9:fe:84:b0:ac:d1:11:d0:20:
                    d0:68:b4:b7:c7:3e:0f:e5:df:3d:8e:19:c8:1c:d9:
                    56:b5:5e:21:a9:d9:49:52:87:11:c1:5f:27:9e:bd:
                    6e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9D:63:1A:3B:13:33:ED:1F:29:0A:FC:30:23:CA:06:91:D0:ED:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:cd:0c:6d:5d:2c:90:ae:7b:80:c7:5f:4a:13:c3:90:ab:bf:
         be:01:6c:4f:b0:d6:da:2b:15:4b:6c:34:58:68:00:ab:0d:50:
         75:5c:b8:8b:40:e2:7b:41:3b:1f:c5:e1:68:dd:9a:a6:3c:fd:
         cb:b8:f8:37:1a:35:31:c5:b7:3f:e7:5d:f4:e5:1c:2a:70:41:
         0a:52:0f:8c:f7:89:d4:9b:72:99:d6:1d:17:19:6d:c0:c2:e2:
         3f:e8:64:8d:d5:cf:d4:74:f4:06:84:6d:b2:59:18:78:3a:0a:
         53:d6:60:ed:5c:b8:15:8f:5f:ee:b6:28:30:d2:81:55:4e:0e:
         00:0c:dd:c5:fd:ef:74:54:22:ff:cb:2d:f4:e7:5e:dd:b5:6e:
         3c:10:2e:ff:14:49:9f:c9:42:9c:41:7d:3a:40:6a:72:ff:bc:
         76:7b:30:5c:4c:4b:cb:00:aa:02:55:cc:81:7d:23:ba:cb:fd:
         bf:12:36:a1:ea:0b:10:1c:e6:df:62:ce:04:70:10:9e:6e:01:
         ec:ff:c2:1a:3e:fd:aa:61:34:9d:f9:0d:f7:ec:e1:5c:e8:f8:
         5b:44:e9:2f:3b:25:42:6d:e4:4f:4d:bc:aa:70:73:84:f0:cc:
         36:ba:35:27:38:7f:bc:46:38:99:9d:d2:65:df:32:b5:80:8b:
         e7:e9:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:56 2024 by rpki-client on console-fra.rpki-client.org