Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e74f88d-fb7f-326d-825b-1c2c2ae095c8.roa
File:                     6e74f88d-fb7f-326d-825b-1c2c2ae095c8.roa (raw, json)
Hash identifier:          Myplb0GF5oQXRrx4xsW2PYpuQcuhlbSaRaXKBw7vzNk=
Subject key identifier:   C2:42:68:DE:22:D9:C2:47:7D:E2:BD:BB:07:FA:FE:7B:C7:D2:6C:7F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246BBEF77D71FD019AFBD80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e74f88d-fb7f-326d-825b-1c2c2ae095c8.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     202
IP address blocks:        130.174.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:bb:ef:77:d7:1f:d0:19:af:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=950704af-3fe3-44d5-90df-3692e7bb8c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:cb:86:87:d0:54:c5:8f:2e:2e:30:10:a9:
                    7c:e7:9f:b1:cb:24:9a:7c:83:0c:15:86:0e:67:82:
                    96:84:0f:af:a0:5f:8a:78:05:ad:a5:08:58:df:9e:
                    4e:6b:ff:d7:52:fd:ee:52:ef:b1:56:2e:2e:16:f4:
                    a1:ba:43:76:55:8c:78:18:1f:12:c2:f9:11:66:36:
                    47:01:4a:d1:c7:fe:e5:84:6c:3e:cc:58:5c:a2:3f:
                    fd:9f:01:1c:90:91:21:83:52:24:1f:f9:0f:cb:46:
                    68:0c:cc:a7:c0:9a:11:e4:57:fe:a5:65:62:55:96:
                    fe:3b:f3:ae:4f:0d:f5:36:e3:9b:ee:02:50:97:f2:
                    5e:eb:66:3d:6e:fe:9f:bc:fb:f9:dd:84:dc:9b:ac:
                    1e:87:99:00:60:51:d1:87:1b:f4:5f:d9:c8:f9:23:
                    05:d9:c0:3e:84:44:c3:bd:08:3d:d0:27:fa:7c:be:
                    65:e8:e7:7e:f2:b7:9e:c4:0c:a4:7e:99:01:cf:85:
                    51:e6:1e:40:c5:2d:0d:00:34:27:6c:eb:a9:7b:60:
                    22:4c:05:cf:07:70:ae:f5:fc:81:b0:fb:cd:11:35:
                    9b:c9:b7:98:63:d2:1d:85:4d:b9:d9:45:ab:a9:76:
                    0e:0a:17:a0:5b:ac:97:22:ae:48:05:e8:91:7b:c0:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:42:68:DE:22:D9:C2:47:7D:E2:BD:BB:07:FA:FE:7B:C7:D2:6C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e74f88d-fb7f-326d-825b-1c2c2ae095c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:89:1d:67:86:1a:4a:ac:a9:dc:7d:f2:82:be:b8:12:3a:fc:
         27:a0:87:81:29:77:0a:9b:d8:c2:7f:4b:e6:8e:d5:22:8a:1f:
         f7:3c:8a:a1:79:82:d4:40:37:6e:55:e5:39:4e:16:9c:ed:a5:
         56:82:a0:f8:de:6e:5b:29:14:d6:2e:89:5e:db:a6:2b:4d:90:
         8c:30:29:62:96:4a:c7:2a:54:c1:5d:1f:9f:d3:dd:ea:f7:2b:
         7d:c3:47:2e:05:be:6b:4f:33:24:62:67:c1:1a:50:4c:5f:71:
         30:ba:9a:b3:87:aa:3f:07:9d:20:e1:2f:81:21:d8:87:f5:18:
         6b:46:f5:93:31:f3:50:c8:5c:e4:d8:3d:14:70:e2:cc:20:e5:
         d6:c5:1c:d8:57:b0:3a:29:1c:fd:eb:48:4d:e8:e7:f6:c9:a8:
         69:da:df:c8:66:4b:09:10:71:53:c1:d4:ac:24:91:b8:50:a0:
         70:30:af:d3:67:ff:fb:49:b5:69:2e:cc:62:3f:20:d2:cc:3b:
         aa:58:cc:ef:f3:aa:ee:ea:d6:cf:c8:d4:3d:62:ed:a4:34:6d:
         0d:2e:3a:4d:9a:ec:fc:62:62:2e:b3:60:65:07:d8:34:91:d6:
         42:de:c0:47:1d:75:b7:66:df:db:86:52:d1:0b:f3:19:2b:70:
         41:52:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:15 2025 by rpki-client