Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7a1a17cf-9711-37b4-aed5-911c58665d32.roa
File:                     7a1a17cf-9711-37b4-aed5-911c58665d32.roa (raw, json)
Hash identifier:          iuQ1+XlooKpbXv/F0vsucAN9udl6dVqoaD172aBCPvU=
Subject key identifier:   2E:F4:5F:24:35:C9:12:4B:17:3C:8C:F7:AE:23:92:49:72:CE:B5:E5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246BC521B80C04D02DEE1C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7a1a17cf-9711-37b4-aed5-911c58665d32.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     203
IP address blocks:        130.174.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:bc:52:1b:80:c0:4d:02:de:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=46d1c033-d767-4626-bdb8-45945fdd00fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:da:e2:0f:7c:0e:94:70:51:32:79:a8:2b:
                    03:68:28:95:f3:21:28:7b:fc:59:e8:07:5f:91:77:
                    b5:6d:7e:b5:ab:84:61:d7:4a:3e:44:54:eb:22:a3:
                    7b:e4:b5:54:f5:f1:a7:b2:fd:d1:66:30:a4:e8:14:
                    09:88:ea:25:3d:33:22:14:1e:1e:c4:73:52:02:4e:
                    6d:04:6a:8e:06:31:65:04:21:37:d3:24:b8:8f:35:
                    f1:56:9a:d3:a1:31:72:e2:fb:2d:9e:4a:07:8d:99:
                    31:de:0f:ae:83:d0:e8:c2:9a:a2:0a:d2:00:e1:6d:
                    9a:65:2e:5d:03:b0:49:f8:32:ae:5d:03:23:db:ee:
                    7c:65:1b:3f:a6:99:ff:02:27:ae:7d:2c:c5:23:9f:
                    6a:6e:47:6d:f2:20:de:3c:d1:d6:66:6b:96:91:03:
                    92:5e:36:50:ef:7e:15:cb:c7:6c:d4:42:aa:3c:97:
                    f5:1f:6f:ab:e2:05:ba:93:44:77:aa:8b:e5:19:45:
                    a5:c1:4e:60:70:78:f9:1f:5f:aa:b2:1b:32:3a:47:
                    6f:84:f4:c2:37:38:9b:9b:1a:f4:be:13:c2:e5:11:
                    7c:4b:42:9f:5e:e0:5c:99:db:28:b2:88:0f:6f:57:
                    e9:a7:20:1f:d6:0d:4c:a0:4c:09:2c:b0:b3:10:a6:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:5F:24:35:C9:12:4B:17:3C:8C:F7:AE:23:92:49:72:CE:B5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7a1a17cf-9711-37b4-aed5-911c58665d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:57:e3:f0:5b:d8:a3:32:fc:27:89:03:73:1e:44:c3:84:d6:
         45:1b:40:dc:09:7d:97:74:d7:21:78:4e:51:f5:09:e9:35:54:
         c2:1d:cc:6a:29:2a:0c:88:3b:46:f2:f6:3c:14:15:32:94:e6:
         1b:6b:0e:12:a9:b7:59:ad:4a:e2:b7:40:f3:5f:01:f8:58:75:
         fa:bd:df:e5:33:3f:21:b1:cf:72:44:9c:9e:06:0d:85:31:57:
         8e:2b:84:64:0f:b2:64:6e:8c:ed:42:44:eb:22:54:c3:28:18:
         4c:40:85:79:d4:b6:51:01:fd:ec:fc:57:14:5c:a5:a7:74:2e:
         ee:56:e0:52:0e:79:b7:d7:65:7b:77:0c:8d:1b:f9:8e:70:c8:
         80:5d:2e:7a:dd:70:10:d4:56:1f:a6:7f:0b:f5:46:61:6e:a7:
         0a:c8:e6:4f:5d:fb:4c:88:e3:2d:c2:3d:ab:6d:74:83:9c:35:
         fd:e7:56:3e:9e:86:38:ec:58:be:ab:8b:a3:2d:46:b0:84:1d:
         49:08:23:50:5d:67:cf:2b:6a:d7:8a:57:e2:c7:93:4e:3a:4b:
         6d:94:a4:55:03:db:57:e7:76:3c:f4:27:86:c4:c2:3e:84:85:
         49:52:37:c4:19:f1:fe:1a:4e:d9:86:55:b0:58:72:47:e9:d1:
         bd:15:fa:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrxSG4DATQLe4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NDZkMWMwMzMtZDc2Ny00NjI2LWJkYjgtNDU5NDVmZGQwMGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbTa4g98DpRwUTJ5qCsDaCiV8yEoe/xZ6Adf
kXe1bX61q4Rh10o+RFTrIqN75LVU9fGnsv3RZjCk6BQJiOolPTMiFB4exHNSAk5t
BGqOBjFlBCE30yS4jzXxVprToTFy4vstnkoHjZkx3g+ug9DowpqiCtIA4W2aZS5d
A7BJ+DKuXQMj2+58ZRs/ppn/AieufSzFI59qbkdt8iDePNHWZmuWkQOSXjZQ734V
y8ds1EKqPJf1H2+r4gW6k0R3qovlGUWlwU5gcHj5H1+qshsyOkdvhPTCNzibmxr0
vhPC5RF8S0KfXuBcmdsosogPb1fppyAf1g1MoEwJLLCzEKb/bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC70XyQ1yRJLFzyM964jkklyzrXlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2ExYTE3Y2YtOTcxMS0z
N2I0LWFlZDUtOTExYzU4NjY1ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlX4/Bb2KMy/CeJA3MeRMOE1kUbQNwJfZd01yF4TlH1Cek1VMIdzGop
KgyIO0by9jwUFTKU5htrDhKpt1mtSuK3QPNfAfhYdfq93+UzPyGxz3JEnJ4GDYUx
V44rhGQPsmRujO1CROsiVMMoGExAhXnUtlEB/ez8VxRcpad0Lu5W4FIOebfXZXt3
DI0b+Y5wyIBdLnrdcBDUVh+mfwv1RmFupwrI5k9d+0yI4y3CPattdIOcNf3nVj6e
hjjsWL6ri6MtRrCEHUkII1BdZ88rateKV+LHk046S22UpFUD21fndjz0J4bEwj6E
hUlSN8QZ8f4aTtmGVbBYckfp0b0V+pk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:02:03 2025 by rpki-client