Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98309cba-d726-307a-aa36-24234d2dfdfd.roa
File:                     98309cba-d726-307a-aa36-24234d2dfdfd.roa (raw, json)
Hash identifier:          NBR7C0Y6GNePr2PqqEFiM6Dm4PpymVSnzozIEa+XdYU=
Subject key identifier:   00:22:76:9E:63:27:08:30:D0:AA:DD:0B:BA:30:BE:B8:2B:75:8B:E0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246BECC5B7DB55F2EEBB2E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98309cba-d726-307a-aa36-24234d2dfdfd.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     202
IP address blocks:        130.174.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:be:cc:5b:7d:b5:5f:2e:eb:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=eff46b88-458a-43aa-a6d0-c5b0340127a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:01:16:0b:15:13:41:73:7b:9c:ff:23:5f:
                    eb:16:fd:23:7b:15:ae:61:ec:0a:ed:af:6d:b3:d0:
                    a0:fa:d6:20:20:2c:d9:a1:cf:5f:44:0a:b7:ab:c3:
                    fb:e1:3f:e7:db:d4:d1:04:0d:4c:38:f7:e2:aa:16:
                    31:06:9b:e5:bd:e3:4b:33:de:63:99:94:9f:5a:43:
                    60:5f:4c:7d:e9:9b:b9:00:53:b5:3f:81:24:52:ce:
                    43:15:4a:db:55:84:48:ad:ef:de:cb:03:0f:42:ce:
                    d1:88:b6:15:62:c9:f8:64:4c:63:0b:f7:b8:aa:75:
                    1c:d1:5c:c2:eb:49:56:4c:16:e6:3e:ec:95:10:3e:
                    85:46:5f:49:25:30:1f:e7:a6:b2:7d:b9:eb:5e:fa:
                    1f:7f:1c:e3:21:16:8e:55:3f:4d:61:01:1b:68:3b:
                    72:89:57:92:03:68:72:d9:2e:16:5f:4f:a6:d5:8f:
                    a5:2a:31:6f:9c:d6:0a:af:79:c3:11:c4:ee:b1:a3:
                    a9:59:c1:0c:de:43:04:39:e1:63:c4:e6:19:25:6b:
                    d3:70:ed:70:26:31:2d:44:9d:2e:0b:4a:df:c7:82:
                    4b:f9:d6:83:84:10:61:28:da:01:8b:24:0e:e5:f3:
                    02:ab:ff:a0:62:58:e4:f0:f6:71:aa:94:67:89:47:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:22:76:9E:63:27:08:30:D0:AA:DD:0B:BA:30:BE:B8:2B:75:8B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98309cba-d726-307a-aa36-24234d2dfdfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:db:ea:95:aa:fa:d9:06:fc:3b:dd:b2:58:1b:bd:f6:86:d5:
         e9:e8:24:03:ff:ed:d1:8e:7d:7a:cc:65:fa:ee:17:18:a2:dd:
         03:4c:cb:42:87:13:8f:e4:51:94:d7:b3:24:14:ae:64:a6:32:
         cd:d9:94:48:9a:4e:c1:d5:72:ae:39:46:ed:38:5e:01:b6:e9:
         5a:ba:98:71:a6:37:82:cc:b4:de:a0:82:df:c2:1b:14:f9:c2:
         06:f3:cd:e9:9c:1a:9a:45:dc:51:9e:29:43:c8:9d:e3:96:8f:
         e1:69:3b:82:69:be:e3:43:4a:1d:db:aa:d1:83:bb:dc:be:41:
         1a:ca:3e:c6:80:c1:44:fe:42:8b:d9:32:bf:43:98:42:72:5b:
         c5:ba:9c:42:f4:cf:06:0c:c3:75:9f:38:8c:d4:e2:30:0e:f2:
         b7:57:bc:eb:43:3f:70:a2:8d:ab:67:92:89:87:90:2b:66:5b:
         c6:06:fb:96:be:74:53:77:3d:96:5e:9a:2f:e6:ab:7f:53:ce:
         be:85:93:c3:ec:ac:4c:9b:e9:1a:0d:12:4a:30:d4:27:49:f4:
         0f:ca:4f:71:b9:6c:77:ac:cd:03:8f:ef:95:a6:52:7d:d7:ef:
         4c:d5:66:b3:b0:59:a0:a5:be:b0:a0:e8:9a:84:56:f8:b3:06:
         0a:82:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:17 2025 by rpki-client