Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac86bfcf-0d71-3ffd-b9b6-4ebb29fedf41.roa
File:                     ac86bfcf-0d71-3ffd-b9b6-4ebb29fedf41.roa (raw, json)
Hash identifier:          ppqrb2WF5GrmzoD9CA1KoQOczerqFaCeEeUgast++bI=
Subject key identifier:   EE:07:33:3C:D4:91:08:BD:24:A1:77:54:16:D1:AA:A9:16:E6:FB:B1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246BFA0E6C84B0595748000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac86bfcf-0d71-3ffd-b9b6-4ebb29fedf41.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     203
IP address blocks:        130.174.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:bf:a0:e6:c8:4b:05:95:74:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=c1c7a106-6e7c-4bb8-974b-dc3d7b0a04a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:62:e1:46:e3:22:42:1c:30:0d:2c:4a:72:
                    08:85:e6:84:63:e7:16:6a:08:0f:f0:9f:7b:65:84:
                    f7:d3:e4:c7:9c:99:14:81:67:53:b2:48:13:c5:a5:
                    f5:e1:3b:39:1a:0c:05:64:51:1c:93:89:61:aa:67:
                    26:08:d7:a0:c7:ef:69:69:8b:58:d3:0e:7e:73:a7:
                    59:6a:e7:f5:e6:48:62:b8:ca:be:b1:c8:94:fc:68:
                    1e:88:08:be:29:c7:c6:68:51:94:dc:6f:2e:63:09:
                    31:cc:d8:59:4e:b5:02:78:97:8a:7a:9f:e9:c5:fd:
                    10:0b:3d:d2:86:7a:02:dc:70:d7:a9:75:92:ec:2b:
                    88:ad:bf:4f:8a:f4:20:d4:78:71:27:61:8b:28:ab:
                    fc:96:9a:f6:20:f4:c7:ef:ad:42:b3:cf:ba:e0:06:
                    85:88:ca:ea:b9:c6:10:f5:96:ec:a1:52:a4:20:1d:
                    0d:18:9b:75:7a:66:3d:06:7a:01:26:6f:d2:7a:97:
                    1f:4a:0c:cd:4c:29:69:23:22:e4:40:92:f0:f0:51:
                    84:d7:8a:7c:79:74:61:d5:8c:76:a3:a3:95:23:1a:
                    ed:5f:81:dd:d1:b6:fc:18:a9:af:bb:8e:4d:06:93:
                    99:4c:74:69:a8:0d:f8:f0:89:fe:1e:98:8c:ca:64:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:07:33:3C:D4:91:08:BD:24:A1:77:54:16:D1:AA:A9:16:E6:FB:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac86bfcf-0d71-3ffd-b9b6-4ebb29fedf41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:04:d7:f9:92:97:b8:ad:b9:2c:05:88:19:c8:58:f0:e2:
         e2:77:8b:60:ef:e5:21:f5:87:1c:dc:50:01:f2:c4:1e:f4:eb:
         40:b1:4d:7c:06:d7:3c:75:cb:3a:fc:a6:02:fa:a0:53:86:30:
         ae:1b:6d:9d:f7:60:fc:ca:6a:e8:b4:6a:5b:47:8c:89:52:55:
         74:82:3d:5d:62:35:a3:2d:2c:13:45:7c:78:1e:f6:2b:92:b5:
         c4:98:65:da:da:48:72:7c:ff:26:3a:7f:a3:67:2c:d6:d7:0d:
         f2:be:1f:ad:c0:f2:da:10:fc:2c:30:e8:9f:f5:c2:61:62:7e:
         92:27:1d:c1:c0:55:e6:b3:7e:95:ad:78:6d:ea:3b:81:37:b6:
         da:12:ba:f6:72:63:b5:b6:9d:30:96:8f:d6:77:7d:e2:ff:1a:
         75:f3:80:78:3a:ea:5d:9c:3c:d6:6b:c7:0e:30:37:dc:d3:57:
         76:a9:0d:34:58:0b:63:90:cc:fb:df:7c:e1:93:9b:89:92:5b:
         33:b9:ab:5a:bf:8c:c3:23:8f:5d:bf:0f:47:c6:b8:17:b1:9c:
         f3:9a:d9:05:73:35:6c:fc:20:b1:f8:1e:e3:30:d1:59:8f:ff:
         fc:2c:4d:06:00:51:c8:b3:96:a1:c2:42:6d:7c:ea:57:47:1d:
         dc:65:60:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr+g5shLBZV0gAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
YzFjN2ExMDYtNmU3Yy00YmI4LTk3NGItZGMzZDdiMGEwNGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmli4UbjIkIcMA0sSnIIheaEY+cWaggP8J97
ZYT30+THnJkUgWdTskgTxaX14Ts5GgwFZFEck4lhqmcmCNegx+9paYtY0w5+c6dZ
auf15khiuMq+sciU/GgeiAi+KcfGaFGU3G8uYwkxzNhZTrUCeJeKep/pxf0QCz3S
hnoC3HDXqXWS7CuIrb9PivQg1HhxJ2GLKKv8lpr2IPTH761Cs8+64AaFiMrqucYQ
9ZbsoVKkIB0NGJt1emY9BnoBJm/SepcfSgzNTClpIyLkQJLw8FGE14p8eXRh1Yx2
o6OVIxrtX4Hd0bb8GKmvu45NBpOZTHRpqA348In+HpiMymS74wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4HMzzUkQi9JKF3VBbRqqkW5vuxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWM4NmJmY2YtMGQ3MS0z
ZmZkLWI5YjYtNGViYjI5ZmVkZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1tBNf5kpe4rbksBYgZyFjw4uJ3i2Dv5SH1hxzcUAHyxB7060CxTXwG
1zx1yzr8pgL6oFOGMK4bbZ33YPzKaui0altHjIlSVXSCPV1iNaMtLBNFfHge9iuS
tcSYZdraSHJ8/yY6f6NnLNbXDfK+H63A8toQ/Cww6J/1wmFifpInHcHAVeazfpWt
eG3qO4E3ttoSuvZyY7W2nTCWj9Z3feL/GnXzgHg66l2cPNZrxw4wN9zTV3apDTRY
C2OQzPvffOGTm4mSWzO5q1q/jMMjj12/D0fGuBexnPOa2QVzNWz8ILH4HuMw0VmP
//wsTQYAUcizlqHCQm186ldHHdxlYIE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:32:20 2025 by rpki-client