Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84fec42c-45d4-3f01-8c3c-f842ddad1b14.roa
File:                     84fec42c-45d4-3f01-8c3c-f842ddad1b14.roa (raw, json)
Hash identifier:          avqirXSA1nwLzpJEupsb29bup/r+ytmwsTG5GaV81B4=
Subject key identifier:   99:2E:AE:D9:AF:C5:2E:F2:FC:A7:2F:82:88:2C:07:BF:11:6A:CE:9C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834556F49B5C20298413C1600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84fec42c-45d4-3f01-8c3c-f842ddad1b14.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:6f:49:b5:c2:02:98:41:3c:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=b53810a6-815a-463d-b179-599abb79c459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:a7:d3:e9:31:d2:12:53:c3:8e:da:8c:51:
                    92:04:9f:99:0d:ba:d2:aa:10:47:17:fe:43:f0:81:
                    02:81:78:79:f5:9d:8c:e1:c9:0c:c6:28:7a:8e:5a:
                    2f:fc:7c:be:d6:8f:18:24:56:ff:aa:46:93:a0:f8:
                    88:16:d5:6c:87:a1:41:ef:ea:bf:08:c3:13:e8:50:
                    5f:b2:23:04:12:d1:91:6e:56:80:0f:ff:9c:97:c5:
                    19:7f:d0:67:b7:6a:83:83:24:8f:35:71:2f:9f:07:
                    d4:05:7f:2b:5d:98:d0:da:78:b2:55:f2:72:e9:11:
                    4f:bb:0d:11:57:18:ab:13:1e:61:24:cc:a8:34:ff:
                    4a:89:57:cc:a3:42:d3:9e:fc:d0:5d:14:0d:53:c8:
                    83:51:98:eb:60:86:c3:b6:50:16:af:68:b9:e9:1c:
                    00:82:cf:b0:ac:f6:64:9c:0f:c9:f2:2e:bc:38:a4:
                    56:a9:46:56:47:6f:28:23:cb:a6:d7:fe:1d:5a:ec:
                    22:00:e7:aa:e9:e5:be:98:71:57:7d:d1:af:31:3f:
                    0d:0b:1b:6c:07:9b:3f:89:d4:c9:81:22:d8:05:7e:
                    ce:b0:11:ef:8a:3d:0a:44:df:1b:11:b7:20:7e:7d:
                    ce:01:e8:8a:57:b8:f5:9f:df:83:a7:8c:04:3c:64:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2E:AE:D9:AF:C5:2E:F2:FC:A7:2F:82:88:2C:07:BF:11:6A:CE:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84fec42c-45d4-3f01-8c3c-f842ddad1b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:b3:30:69:c8:52:61:89:74:87:91:2d:c7:fc:d3:60:2d:
         43:56:c2:23:63:7d:2c:34:e9:f3:32:58:e2:39:d7:96:e9:6b:
         4c:fa:3a:64:60:20:7d:90:db:93:c2:80:c5:b3:08:01:44:8e:
         59:81:f1:72:76:a2:4d:5e:b3:b3:57:bf:77:1d:73:95:a1:49:
         f1:3c:bd:a9:92:06:8b:77:3e:31:c6:1a:13:e2:18:38:40:95:
         67:23:3f:43:d9:4d:39:4c:69:8e:8e:0f:2e:5f:e9:56:de:29:
         ec:80:bf:49:87:de:45:fb:f8:ef:bd:d7:6a:16:f1:ba:1e:66:
         c0:d5:63:09:44:2f:62:1b:47:54:47:85:93:89:55:54:54:e0:
         56:4d:21:f9:46:3c:94:8f:2d:49:0a:43:32:83:91:95:a2:e3:
         61:d5:a8:ea:43:96:57:26:18:8a:7a:47:b7:0c:11:33:62:00:
         5e:88:03:50:25:9d:cd:89:4e:9a:3c:f8:78:66:98:9e:8e:39:
         39:52:55:f2:2f:85:62:26:51:9a:ba:6c:4e:a0:8a:39:ff:19:
         e0:87:78:88:66:f9:c9:9d:64:45:d1:d9:94:5f:15:d3:01:d3:
         7b:e4:e5:5b:34:0c:3e:c5:36:2e:aa:be:f5:1a:2c:ab:ba:57:
         28:bf:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:39 2025 by rpki-client