Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/909de829-7466-373d-b91c-a883f2155eee.roa
File:                     909de829-7466-373d-b91c-a883f2155eee.roa (raw, json)
Hash identifier:          JWsg5dcDPxd7HTPsz/Yt7a9inI4qimRNDenEWnOAIZg=
Subject key identifier:   D0:1F:3A:8B:C0:98:AF:5A:5B:94:BF:D8:50:6D:22:7D:76:B4:BE:57
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FCC6F624F0760936C6740
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/909de829-7466-373d-b91c-a883f2155eee.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        130.174.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:cc:6f:62:4f:07:60:93:6c:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=d3b41742-e00b-4c8d-baf1-747a5eeee958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:10:d0:55:0f:aa:52:d9:1c:49:5a:86:28:
                    02:5c:70:f9:eb:b8:41:f8:f8:84:d1:4f:07:ce:51:
                    2b:c0:aa:6f:4a:72:50:e8:2a:cb:bb:79:5f:a1:3b:
                    2c:9e:78:40:dd:43:aa:56:9f:a7:7f:7f:77:c5:b4:
                    b5:8e:a7:a3:75:f5:5a:8e:df:c1:a1:1d:3e:c7:0b:
                    e8:69:27:54:7f:66:68:ee:44:2e:66:da:6e:a7:70:
                    b0:c0:0c:75:4d:cb:d6:c7:ce:f1:a4:c0:03:8a:dc:
                    d8:71:63:9f:3f:f5:70:c2:63:7f:b2:af:06:c1:3d:
                    3d:92:a9:f4:35:cd:c2:32:7c:a7:d5:1e:e8:bd:06:
                    f3:31:09:7d:65:d7:10:9a:86:91:d9:69:0b:d2:56:
                    57:31:19:4a:df:14:56:b9:d7:19:42:e7:21:65:9a:
                    ac:6a:aa:6d:a5:32:f9:bc:bb:99:42:ff:10:93:a7:
                    43:99:01:4e:c2:26:7b:94:4a:54:04:fe:9e:b0:48:
                    7e:a4:88:c0:58:81:01:11:1b:7a:71:03:d1:cc:31:
                    fa:ac:b4:51:cd:46:94:f6:6d:84:9d:da:75:2f:ee:
                    56:49:ff:94:24:6c:4f:27:4d:db:79:88:b1:04:d6:
                    6b:73:bf:62:fc:83:49:b8:53:71:4d:39:00:bf:73:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:3A:8B:C0:98:AF:5A:5B:94:BF:D8:50:6D:22:7D:76:B4:BE:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/909de829-7466-373d-b91c-a883f2155eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:90:4d:84:c5:90:66:d8:cf:2f:1c:e3:4b:12:78:16:6e:
         56:85:79:da:25:ea:0e:26:30:89:f9:c4:85:21:46:1c:d7:15:
         ae:de:56:74:d7:54:d9:6d:a7:fe:c3:d0:da:28:7a:06:3a:03:
         d2:a7:58:88:08:28:90:81:99:25:57:f4:43:2a:12:d0:a2:94:
         d8:49:9c:93:df:0e:af:b6:a5:7a:84:4f:0d:62:57:52:03:73:
         94:eb:80:43:4b:e6:f5:d1:bc:44:25:9a:12:af:95:41:08:a0:
         bf:19:60:e5:85:22:67:fb:7f:6a:3f:2d:d6:4e:c2:c1:f7:90:
         94:59:b4:71:19:aa:5f:4f:e2:fe:4d:f9:da:e5:e6:eb:8b:6e:
         93:b3:cb:8b:73:e7:16:f7:2f:3b:ff:c2:a0:51:2b:9a:8c:46:
         c1:b9:99:f7:03:b4:a8:cf:e3:ab:4b:dc:68:c5:d4:7a:74:ac:
         fa:78:f3:a3:77:b1:27:87:8f:76:1f:5d:21:ad:03:f0:32:35:
         a0:fb:6d:02:72:16:9b:7e:10:b0:4c:64:99:6c:fb:a6:59:39:
         5d:b8:ac:a9:39:2a:1b:30:c4:33:64:e4:cb:c2:cb:8b:58:8b:
         84:1d:7a:f1:5c:0c:0e:8e:55:b8:b4:a1:85:c9:a4:b1:45:99:
         53:4a:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:53 2025 by rpki-client