Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa
File:                     98a28125-0165-31f7-a265-0615bd186c6e.roa (raw, json)
Hash identifier:          2K79D3VI9rUVqLhrrbwiWYWYkvbzw7fdJIKyD5Tz1Ic=
Subject key identifier:   44:9C:F8:DA:7D:AC:8B:FA:5B:CE:CF:92:11:2F:0D:D0:DA:C0:A1:53
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459368CDB3462F3E85EFCB9700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     3356
IP address blocks:        130.174.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:cd:b3:46:2f:3e:85:ef:cb:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=4e5c9c94-3d04-4641-9f84-94bcdd368d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:bf:97:ee:3c:b7:36:84:a4:b7:7b:82:dd:
                    2d:95:af:3b:e8:ed:82:82:42:e0:65:6a:ae:b5:ed:
                    ae:83:b0:76:c1:58:45:53:d8:cd:8d:e0:2f:5e:2c:
                    75:15:b9:26:14:40:28:c1:6f:8b:84:9e:06:e0:6c:
                    3d:23:80:21:4c:26:8f:26:02:d6:2b:7d:b8:eb:3f:
                    0b:8d:6b:8f:bd:18:a8:98:0c:f2:a8:89:37:15:24:
                    05:ec:e8:48:83:5d:75:e4:3b:4a:e8:5f:27:35:77:
                    ec:8e:d2:a1:8a:8b:ff:1f:e1:58:90:b6:c5:90:f3:
                    81:ca:2f:19:f7:9f:d4:79:6b:49:f9:60:95:d1:85:
                    0d:b8:a5:a6:7e:8c:8f:aa:7d:e9:01:2f:23:77:b5:
                    c0:00:16:61:78:6f:9e:8e:d4:c7:8b:8e:d5:1f:9c:
                    95:5d:7f:a3:e3:eb:eb:56:0b:37:05:3f:a6:85:c2:
                    3a:82:56:85:71:11:7b:34:fb:d1:91:4f:ad:b7:88:
                    8b:aa:da:74:6d:2f:3f:f7:2f:8d:d9:15:c8:03:da:
                    d0:c7:9e:ba:f2:53:45:cd:a2:13:21:94:2c:fd:db:
                    f7:aa:73:72:d3:51:58:14:96:5c:5c:25:61:c7:eb:
                    0a:b9:e3:f9:a0:7b:1d:3d:7a:8a:df:9e:6c:0c:64:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9C:F8:DA:7D:AC:8B:FA:5B:CE:CF:92:11:2F:0D:D0:DA:C0:A1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:61:bf:06:19:c2:42:98:28:d8:75:ee:43:88:1d:94:47:32:
         dc:36:ea:b5:0f:ae:58:d7:18:a1:5d:4c:0c:32:87:80:a0:c7:
         84:ef:99:d6:4b:24:3a:03:a4:92:7c:c3:60:86:61:c7:b6:6d:
         79:f9:96:a5:d6:03:4c:d8:32:72:60:9f:15:c6:3d:28:92:43:
         9e:63:b4:4b:f3:08:19:04:d7:69:ce:14:70:f0:f0:66:3f:7b:
         3c:bf:58:a9:a2:d7:9f:e7:26:a8:a4:75:ae:ff:c4:0e:92:ac:
         3c:2b:37:fe:4f:2f:a2:8b:79:ab:19:b6:43:c1:58:e6:52:55:
         c4:2d:21:1c:fc:91:c2:41:52:f4:da:89:84:f4:27:f0:62:a3:
         81:59:b7:82:e8:93:f4:84:74:b0:e2:8b:6a:91:d2:d0:00:0c:
         1a:96:f2:ad:94:e0:d8:91:07:9c:4d:e6:28:5f:06:14:15:b4:
         1d:66:de:0d:c7:aa:f8:df:2f:b3:4b:c6:f7:90:68:c7:e9:e7:
         75:b2:cc:13:02:d4:dd:6d:a5:c3:09:b7:17:a4:7e:07:c3:e7:
         c2:32:32:a7:e2:7c:54:6e:27:bc:19:fe:5a:07:59:8b:a7:ce:
         27:e8:e2:16:e0:20:93:96:00:d1:4a:1f:a0:40:7c:d4:83:85:
         4b:c0:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:43 2024 by rpki-client on console-fra.rpki-client.org