Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/752a0294-bddf-3a9a-8905-7c56f6c10a48.roa
File:                     752a0294-bddf-3a9a-8905-7c56f6c10a48.roa (raw, json)
Hash identifier:          P9IKaHd5IseC6mMToUGMvpBZlP0LXp2eeovGaUre7mk=
Subject key identifier:   FF:3A:08:7A:C7:A9:AE:BE:52:57:16:51:B6:67:6C:32:50:8A:07:7C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC223341704776E3033A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/752a0294-bddf-3a9a-8905-7c56f6c10a48.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3356
IP address blocks:        130.174.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:22:33:41:70:47:76:e3:03:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=a6c8de3c-de26-4cef-9614-6c96efdfb481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:b5:26:f1:02:c4:ef:80:71:3f:b5:61:06:
                    25:40:b7:f4:8e:f7:64:96:e5:95:b7:61:fb:06:04:
                    7e:7d:b0:a3:bf:e3:eb:16:8c:15:fb:b4:66:b2:0b:
                    ef:f4:c9:92:d4:00:0d:0d:87:6c:d9:dd:2a:3b:0b:
                    0c:90:4d:3c:a2:71:2e:59:a0:9f:31:de:c3:bf:c4:
                    23:a9:58:09:7d:63:41:c5:13:18:af:a9:85:ad:f7:
                    9b:36:a9:61:30:2b:e7:3b:d0:50:e5:07:7a:62:58:
                    36:67:82:5b:48:a6:78:7f:fb:13:22:b7:9a:ef:41:
                    78:37:a6:28:04:86:f4:9b:cc:14:b2:34:c7:2d:92:
                    ca:c0:95:01:4a:f8:77:bb:05:33:dd:bf:e9:21:03:
                    19:d7:d3:01:a0:c1:09:da:3e:40:34:f2:12:77:3d:
                    9e:18:8e:4e:d2:1c:f5:e4:cc:19:81:3e:ff:db:3b:
                    fd:61:ce:88:67:58:6f:43:a9:cd:21:ee:73:aa:2f:
                    82:42:a1:16:56:51:a5:94:f3:25:6e:63:8b:f9:35:
                    23:ed:0d:0e:78:cb:96:02:53:d1:15:71:a7:e3:a6:
                    f9:b4:74:9c:1a:45:c2:24:92:1b:09:a6:35:c5:d3:
                    44:02:bb:65:ee:c7:40:a0:1c:0c:7a:3a:8d:33:f8:
                    92:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:08:7A:C7:A9:AE:BE:52:57:16:51:B6:67:6C:32:50:8A:07:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/752a0294-bddf-3a9a-8905-7c56f6c10a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:43:56:a8:93:83:c5:c4:ca:cb:42:49:95:65:a0:a1:61:a9:
         ce:50:45:04:ba:8d:45:5e:f6:3e:4d:8e:30:cb:e3:d1:70:14:
         5a:e2:e7:0a:f2:c4:c8:05:45:97:6d:40:ef:3d:22:c1:77:1b:
         92:ac:87:26:ac:43:2a:fe:7b:9c:8d:20:7d:ca:59:f3:da:87:
         60:52:54:16:57:1e:25:f6:c6:a4:12:80:0b:4c:bb:5a:16:c4:
         87:b1:59:58:cd:69:13:fb:81:72:a3:68:09:b3:7c:5d:b1:05:
         c6:be:ec:86:29:77:75:de:4c:f6:36:1b:bd:9c:73:f5:91:5c:
         52:a3:19:7b:70:f2:a3:55:74:cb:32:e8:b1:9c:dd:87:78:87:
         65:87:76:ac:c0:52:ce:64:32:30:2c:c6:8e:8c:90:2c:83:c6:
         3f:cb:ee:05:46:c0:19:36:07:f8:e4:cd:15:ee:50:f6:5e:ee:
         fa:03:b3:51:c3:70:c4:5d:a1:f1:31:bd:73:92:05:8c:e3:b0:
         2a:1f:a2:3f:e5:3d:0c:91:4d:9e:70:b1:d5:2b:a5:4f:8f:e9:
         b0:e1:ae:14:b7:7d:91:6f:2b:f7:6c:88:8c:61:b8:fa:bf:6d:
         3b:f4:39:dc:44:15:bf:24:04:62:0a:f3:47:87:8c:a0:f9:1b:
         d1:a1:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:44:04 2025 by rpki-client