Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67622771-71d2-3ec3-a4a5-92084fc9f174.roa
File:                     67622771-71d2-3ec3-a4a5-92084fc9f174.roa (raw, json)
Hash identifier:          z9szVXIuK7LnpnPUoj53LcDWhyeO9saUPiHsqIsOZvI=
Subject key identifier:   DF:96:8D:4A:E7:00:C4:ED:95:88:C1:28:7A:F0:E9:8D:6C:25:2A:27
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847537B73AAB965B526D4FC0800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67622771-71d2-3ec3-a4a5-92084fc9f174.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     202
IP address blocks:        130.174.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:73:aa:b9:65:b5:26:d4:fc:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=3349b2b6-1f4f-4d0a-813e-8b8260ad30ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:41:8a:3d:4f:b3:d5:e2:e1:ae:8b:fd:81:
                    80:0c:44:48:8e:37:8d:44:84:27:aa:d6:b1:0c:af:
                    9a:b3:29:26:ea:b2:36:dc:a5:1e:29:cc:a6:9e:72:
                    1e:c8:5d:8e:83:fd:9d:c5:e4:5d:0c:0e:fa:80:1a:
                    c2:b5:b5:a6:64:d3:82:d6:36:67:fd:58:18:41:8f:
                    3e:96:f1:0d:94:27:67:9b:16:a5:67:b9:c9:3f:d9:
                    ad:09:6d:cb:c4:32:df:eb:fd:a5:6d:76:2e:8a:df:
                    36:ce:6a:e4:fd:32:94:9e:a8:9a:ac:ae:f6:6d:3b:
                    23:bf:ca:0b:9d:4d:fc:ca:0c:ac:34:12:f1:31:62:
                    27:31:a2:7e:b6:3e:27:2b:3d:3a:18:06:3c:77:f2:
                    b8:bf:40:c1:80:e4:ac:8d:1a:bc:cc:88:50:cc:83:
                    3e:b0:48:f6:91:5f:9b:45:49:c5:11:ce:78:c2:80:
                    9a:84:06:f2:35:2c:37:b3:86:c3:55:f9:0a:a0:0a:
                    fa:bb:fd:7b:0b:3f:ac:35:f3:2c:5e:b6:7a:2e:24:
                    66:5d:7c:8c:d5:8b:be:4c:9f:58:e4:ba:8e:51:46:
                    2f:7f:46:77:af:de:14:83:e1:07:c4:e6:f2:4e:66:
                    27:26:5d:7b:80:7a:92:1d:85:a3:8d:90:1e:70:52:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:96:8D:4A:E7:00:C4:ED:95:88:C1:28:7A:F0:E9:8D:6C:25:2A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67622771-71d2-3ec3-a4a5-92084fc9f174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:58:8f:ec:ea:be:e1:5d:d5:ab:c1:bf:2c:a2:42:33:42:50:
         a8:25:2f:e2:eb:43:4d:d4:43:85:da:4e:09:bc:7f:ab:c3:73:
         5f:00:6d:10:56:cc:cc:ea:54:25:22:35:5e:67:24:a4:f7:46:
         b1:e3:75:b6:00:47:84:b8:32:c9:8f:f4:c3:4e:f2:bd:a0:db:
         c4:1f:f7:43:e9:89:4f:f1:c0:8a:81:0e:18:9f:cf:30:ad:9f:
         dd:37:dc:5e:fc:91:60:d2:94:d9:5a:63:4d:9c:f4:8e:0e:f7:
         d8:20:18:2a:b3:48:5f:ef:60:be:92:8e:9c:f4:b5:0c:e1:b9:
         e6:35:3e:cd:dc:44:96:4d:99:17:21:76:ce:81:74:26:8f:c5:
         b9:e5:70:35:d7:59:66:64:a4:ee:5f:72:0e:0d:1d:29:48:ae:
         95:e4:71:2a:81:f5:63:3e:32:d0:12:52:83:53:c6:0e:0a:ac:
         45:d7:3c:61:b3:93:fa:e0:51:14:6a:05:38:24:bb:74:44:e2:
         68:8e:73:b8:6e:71:a1:b9:4a:cc:e9:60:74:9c:36:5d:f9:d2:
         bd:ef:29:6b:ab:93:c1:29:a8:dd:a8:f2:0b:20:1b:51:d6:fc:
         43:da:3b:da:2c:1c:f3:ea:f3:53:dc:38:55:7c:51:50:ea:6e:
         96:28:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:43 2024 by rpki-client on console-fra.rpki-client.org