Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9be08672-c872-34ca-ad3f-0de071cd5cc5.roa
File:                     9be08672-c872-34ca-ad3f-0de071cd5cc5.roa (raw, json)
Hash identifier:          2nXk4faQRo9c/r71B6Or+cTuyNrs6VL+So27e8V10n0=
Subject key identifier:   D5:E9:E6:CC:2A:20:76:F4:44:BC:18:9A:61:11:DE:DC:D8:86:B0:72
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0D5F506D6685291D3A000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9be08672-c872-34ca-ad3f-0de071cd5cc5.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     203
IP address blocks:        130.174.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:d5:f5:06:d6:68:52:91:d3:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=87ecbd23-8f78-442d-b129-483259221f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:27:da:4e:53:7f:12:70:7d:92:90:34:ca:
                    b7:2f:23:bb:1e:50:2d:1a:60:30:f7:6b:11:8f:41:
                    50:94:e0:ac:b6:9b:fe:04:75:3f:8f:cd:d8:e1:fc:
                    8f:7d:1c:0f:e9:5f:d3:70:c1:89:ae:b9:e3:af:aa:
                    7a:5b:2d:e1:16:9f:b0:d9:1e:c1:c9:2f:14:cf:0f:
                    42:89:3a:5f:bd:dd:23:d4:1d:fd:e2:3c:fd:e6:38:
                    40:09:ec:fa:b1:d1:b4:6e:fe:79:92:22:7e:0b:9a:
                    ea:95:a8:48:43:ff:71:27:90:10:93:6b:f5:34:4e:
                    23:bd:a3:92:45:c6:34:57:5a:f5:c9:3e:6a:a3:1c:
                    a4:66:0d:51:7a:02:57:7a:a4:42:0d:88:e1:4a:15:
                    04:92:3f:5a:f4:85:20:67:fd:da:4e:73:83:a7:18:
                    e6:dd:6e:14:24:9a:f8:92:f6:dd:80:dd:ab:6f:1b:
                    37:74:52:72:66:85:53:da:ba:9a:c0:d4:2d:f6:3e:
                    07:8c:00:f2:23:63:17:51:59:6f:7a:1c:be:4d:2d:
                    84:2c:84:d8:1f:89:be:72:11:40:0e:7a:ef:92:2c:
                    83:65:ab:70:6b:8a:05:73:be:77:02:b7:b9:52:8e:
                    e9:e7:33:b3:2e:79:55:ab:97:c2:7f:3f:f9:32:ad:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:E6:CC:2A:20:76:F4:44:BC:18:9A:61:11:DE:DC:D8:86:B0:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9be08672-c872-34ca-ad3f-0de071cd5cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6a:45:9d:31:d2:4f:2f:79:e2:ad:cc:3e:15:be:b8:c1:82:
         46:f6:81:08:7a:af:e4:72:67:c3:2b:56:2d:89:0b:62:48:6d:
         67:05:fc:5d:3d:7e:47:47:a6:ea:7d:62:53:b4:16:88:2b:31:
         a5:20:3c:0b:24:61:af:ca:ce:8f:9d:3b:59:f8:05:67:36:b5:
         68:f8:96:28:da:39:60:d9:5c:d9:e3:35:35:25:21:71:6e:06:
         6d:e6:75:1c:a9:ae:03:6a:de:7a:2d:44:c5:a4:06:67:7f:bd:
         35:e8:ce:30:5f:f9:2a:af:7a:28:76:5a:f7:dc:da:7d:29:69:
         51:7c:6c:44:24:88:e1:ab:9a:2f:dd:c1:87:e0:c3:29:70:ff:
         d9:06:53:55:7d:07:1c:87:9f:2e:90:1f:41:26:d0:c4:03:6f:
         44:55:4a:85:58:4e:d7:9f:3b:c7:11:c4:90:38:1b:f6:56:fa:
         ff:83:53:94:01:59:38:83:34:d4:e9:50:bc:aa:9d:3f:5a:c5:
         0d:b6:28:1c:f5:d7:f3:53:86:28:20:00:9e:74:50:c2:5f:d8:
         14:6c:b6:ce:c3:40:87:2c:a8:db:97:fb:43:1c:4e:c5:e0:53:
         93:6b:cb:2d:be:b2:18:98:2e:e1:51:0c:6e:5a:82:9f:41:7b:
         1f:c1:9f:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4NX1BtZoUpHToAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ODdlY2JkMjMtOGY3OC00NDJkLWIxMjktNDgzMjU5MjIxZjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqkn2k5TfxJwfZKQNMq3LyO7HlAtGmAw92sR
j0FQlOCstpv+BHU/j83Y4fyPfRwP6V/TcMGJrrnjr6p6Wy3hFp+w2R7ByS8Uzw9C
iTpfvd0j1B394jz95jhACez6sdG0bv55kiJ+C5rqlahIQ/9xJ5AQk2v1NE4jvaOS
RcY0V1r1yT5qoxykZg1RegJXeqRCDYjhShUEkj9a9IUgZ/3aTnODpxjm3W4UJJr4
kvbdgN2rbxs3dFJyZoVT2rqawNQt9j4HjADyI2MXUVlvehy+TS2ELITYH4m+chFA
DnrvkiyDZatwa4oFc753Are5Uo7p5zOzLnlVq5fCfz/5Mq3J9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXp5swqIHb0RLwYmmER3tzYhrByMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWJlMDg2NzItYzg3Mi0z
NGNhLWFkM2YtMGRlMDcxY2Q1Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVqRZ0x0k8veeKtzD4VvrjBgkb2gQh6r+RyZ8MrVi2JC2JIbWcF/F09
fkdHpup9YlO0FogrMaUgPAskYa/Kzo+dO1n4BWc2tWj4lijaOWDZXNnjNTUlIXFu
Bm3mdRyprgNq3notRMWkBmd/vTXozjBf+Sqveih2Wvfc2n0paVF8bEQkiOGrmi/d
wYfgwylw/9kGU1V9BxyHny6QH0Em0MQDb0RVSoVYTtefO8cRxJA4G/ZW+v+DU5QB
WTiDNNTpULyqnT9axQ22KBz11/NThiggAJ50UMJf2BRsts7DQIcsqNuX+0McTsXg
U5Nryy2+shiYLuFRDG5agp9Bex/Bn+Y=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:40 2024 by rpki-client on console-fra.rpki-client.org