Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b9f3b5f0-c8c2-30b1-9fb4-aeff9bf485bc.roa
File:                     b9f3b5f0-c8c2-30b1-9fb4-aeff9bf485bc.roa (raw, json)
Hash identifier:          ZRcuh4ueexwPD9uv7s3HNzGlFa0h5dQp1QuJmN3DnTc=
Subject key identifier:   21:CB:B7:B9:72:38:06:3D:31:51:B1:C5:F8:B1:66:C2:76:51:1A:81
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F03925AD319A760159ABA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b9f3b5f0-c8c2-30b1-9fb4-aeff9bf485bc.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     3360
IP address blocks:        130.174.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:39:25:ad:31:9a:76:01:59:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=44133e87-e206-4582-8062-f63c35f5b57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d3:46:6b:71:81:99:07:09:46:78:f9:af:37:
                    8e:f3:fc:76:f9:67:ce:ab:00:17:cf:1f:27:dc:7c:
                    fa:d0:c7:b0:7a:f8:ea:fc:f2:02:65:8a:08:7f:36:
                    70:dd:15:a7:5a:67:8f:fb:04:19:12:59:85:bc:cb:
                    dc:0d:05:8f:cf:1c:0e:81:9b:9f:f4:2e:b0:40:bf:
                    e8:de:aa:e1:8a:68:a5:77:e0:85:41:35:51:a7:6e:
                    d5:6f:57:60:0b:30:53:3c:45:ca:45:79:d1:b1:ca:
                    8d:e1:39:7c:c6:f8:36:f8:c7:44:af:dd:88:09:05:
                    bb:92:c9:7a:fc:b5:c6:b1:f6:a3:df:9c:25:3a:dd:
                    50:5e:34:cc:ba:51:d7:f6:37:3e:4a:5f:80:8c:5b:
                    06:81:7c:a5:41:79:63:ae:7e:1a:5f:d1:6e:c6:40:
                    ac:02:d3:ea:9b:aa:61:08:3e:a4:aa:d1:18:0f:a7:
                    e1:18:91:56:48:68:d3:d0:31:8d:4b:c4:2a:fb:39:
                    87:1a:d1:79:dc:6a:88:b5:45:3b:f5:c2:29:05:14:
                    78:03:e4:33:10:c8:ec:ac:2d:7d:87:8b:b0:4e:68:
                    b6:66:e8:0d:e5:50:10:70:ec:08:0a:d5:53:ae:fb:
                    40:b8:b1:eb:2c:aa:e6:bd:e6:18:7b:ff:f6:b2:04:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:B7:B9:72:38:06:3D:31:51:B1:C5:F8:B1:66:C2:76:51:1A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b9f3b5f0-c8c2-30b1-9fb4-aeff9bf485bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:59:01:1c:8f:e9:00:96:00:1b:d1:c1:43:cb:52:02:c9:90:
         c4:6c:ca:0c:43:2c:43:1a:50:6f:e6:83:79:0d:7e:35:41:d5:
         16:1d:9c:3d:0e:e9:25:ca:a5:11:db:74:91:15:24:f7:2d:a6:
         d8:58:46:79:dd:9a:39:ef:d7:2a:12:43:52:91:fc:49:d9:d4:
         55:2d:95:6f:64:9f:cc:d2:7f:a8:17:d2:b8:d5:88:14:a5:4a:
         d6:b9:aa:de:f1:96:0b:dc:ba:1a:98:35:e6:bc:7a:fc:9e:16:
         06:3a:39:2f:db:c9:0f:ed:89:4f:23:d1:2e:b9:af:e5:57:b1:
         ef:1a:5d:2c:66:f6:3f:96:32:6d:c8:fe:41:81:96:8b:f4:06:
         9b:d2:e0:5e:44:99:58:7f:52:a3:ad:71:98:e9:ee:54:8f:c4:
         4c:a2:9c:6a:2c:89:f1:a1:11:92:a8:42:58:3a:b1:0c:94:24:
         51:5f:66:8c:de:da:41:0c:b0:df:a6:dc:f7:fc:03:49:4f:54:
         34:c4:9f:97:c3:d5:24:48:94:ea:88:2d:2c:30:82:92:1c:17:
         73:41:05:b6:ba:36:bd:8e:01:c6:1e:16:71:e0:dc:09:b2:95:
         74:64:a6:a6:f7:c5:45:99:e0:19:fe:29:5a:31:b7:35:7d:87:
         2f:6c:a1:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DklrTGadgFZq6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDQxMzNlODctZTIwNi00NTgyLTgwNjItZjYzYzM1ZjViNTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9NGa3GBmQcJRnj5rzeO8/x2+WfOqwAXzx8n
3Hz60Mewevjq/PICZYoIfzZw3RWnWmeP+wQZElmFvMvcDQWPzxwOgZuf9C6wQL/o
3qrhimild+CFQTVRp27Vb1dgCzBTPEXKRXnRscqN4Tl8xvg2+MdEr92ICQW7ksl6
/LXGsfaj35wlOt1QXjTMulHX9jc+Sl+AjFsGgXylQXljrn4aX9FuxkCsAtPqm6ph
CD6kqtEYD6fhGJFWSGjT0DGNS8Qq+zmHGtF53GqItUU79cIpBRR4A+QzEMjsrC19
h4uwTmi2ZugN5VAQcOwICtVTrvtAuLHrLKrmveYYe//2sgQP6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHLt7lyOAY9MVGxxfixZsJ2URqBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjlmM2I1ZjAtYzhjMi0z
MGIxLTlmYjQtYWVmZjliZjQ4NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBZARyP6QCWABvRwUPLUgLJkMRsygxDLEMaUG/mg3kNfjVB1RYdnD0O
6SXKpRHbdJEVJPctpthYRnndmjnv1yoSQ1KR/EnZ1FUtlW9kn8zSf6gX0rjViBSl
Sta5qt7xlgvcuhqYNea8evyeFgY6OS/byQ/tiU8j0S65r+VXse8aXSxm9j+WMm3I
/kGBlov0BpvS4F5EmVh/UqOtcZjp7lSPxEyinGosifGhEZKoQlg6sQyUJFFfZoze
2kEMsN+m3Pf8A0lPVDTEn5fD1SRIlOqILSwwgpIcF3NBBba6Nr2OAcYeFnHg3Amy
lXRkpqb3xUWZ4Bn+KVoxtzV9hy9sobs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:20 2025 by rpki-client