Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa
File:                     a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa (raw, json)
Hash identifier:          r7Orb8hmGZ85g8grPcjqwpukBQeI6WQhuNWhL9BIw+E=
Subject key identifier:   FF:F0:78:37:4A:32:78:7B:DE:D7:AB:D3:D6:7E:E0:46:6A:39:7E:1F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FBBC2E017EDC2FD472270
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     203
IP address blocks:        130.174.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:bb:c2:e0:17:ed:c2:fd:47:22:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=135b9243-b773-433e-ad91-b1defc9aa8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:12:7c:70:d9:77:9d:73:57:c7:ae:25:a5:
                    2a:45:57:b0:ac:ed:a5:b5:2a:32:9c:ec:4d:3b:9c:
                    99:89:24:26:fc:bd:aa:90:90:bc:f1:7f:c5:df:1f:
                    81:cd:9b:04:0d:be:69:19:9a:2e:a8:8b:66:81:de:
                    c8:4b:5b:7c:19:e6:91:d1:b5:55:45:4b:32:c8:89:
                    4e:bd:d3:0d:50:1b:1a:43:2c:a9:99:aa:14:cd:1c:
                    c5:55:1a:a7:50:91:2a:48:b6:35:49:d4:2b:e7:89:
                    0d:3b:47:53:7d:fe:93:e8:aa:0c:54:d5:7d:d8:90:
                    5d:84:0c:9b:8b:d0:54:17:03:d8:0f:07:a6:38:12:
                    9e:ab:bb:1a:2d:7a:62:4a:4a:14:5a:84:90:3d:6b:
                    d0:a0:0e:4b:17:61:ae:73:44:15:78:1d:db:c2:1b:
                    c2:cf:b9:6e:ed:b3:55:af:d6:8d:58:49:20:24:8f:
                    d7:25:99:f1:66:07:fe:a9:92:40:73:75:87:4a:5a:
                    b7:b7:2d:1d:77:11:cb:c4:b6:2e:ee:47:45:c5:8a:
                    ea:b3:34:ca:44:44:52:51:55:a7:01:8f:9f:8c:57:
                    10:4f:74:0c:5b:52:09:18:81:bf:fe:df:67:46:67:
                    1d:17:09:7b:9d:51:0a:30:75:2e:27:94:56:a9:fb:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F0:78:37:4A:32:78:7B:DE:D7:AB:D3:D6:7E:E0:46:6A:39:7E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:91:7e:fd:fd:87:4c:9b:57:99:a3:9d:1b:ee:3d:97:06:42:
         b1:6d:ae:05:9b:ec:ea:1f:b4:78:73:59:b5:84:6b:99:7f:34:
         14:00:47:3e:0a:2e:a5:c5:47:d6:3b:e7:f5:5d:94:7d:88:25:
         33:84:36:c5:e9:f2:39:bc:1d:68:c6:7d:34:b6:df:fa:c8:24:
         5a:3a:c8:10:04:90:fc:dc:38:ff:ec:a2:df:fb:2f:7a:0e:6b:
         dc:d6:06:e1:9a:e9:de:24:ed:fb:21:7c:9a:11:0e:5f:ea:7d:
         f7:ca:2b:56:f4:ef:03:8f:d0:fc:40:7e:99:31:76:19:60:6f:
         65:38:54:6c:e1:52:38:ec:b5:d0:70:01:93:e2:0b:9e:b3:d3:
         ba:5b:0a:1a:fe:00:75:54:2c:b0:b3:a6:3d:d8:04:6a:69:5d:
         79:0f:e8:0c:f8:2d:ae:67:93:22:e3:44:3e:b5:a3:33:a9:f2:
         33:40:16:3a:4e:e6:8e:92:e5:96:ff:07:83:b9:c6:b9:2c:b4:
         24:21:a9:dd:53:5c:98:bc:b9:85:0b:1a:ff:f8:85:bd:73:c0:
         17:91:2c:dc:26:c0:8b:3e:52:16:ad:05:18:7a:8b:e5:45:39:
         e9:3e:2d:c4:22:ed:85:04:c6:14:fb:fa:e2:83:c7:8b:fb:2c:
         ba:90:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:52:32 2025 by rpki-client