Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bae8d4f0-3c3b-3425-9896-8dc5b444eee7.roa
File:                     bae8d4f0-3c3b-3425-9896-8dc5b444eee7.roa (raw, json)
Hash identifier:          jg20E9XrzyZhXy7owawGZvEQubaaPx8SVfwZ2+fZ8CI=
Subject key identifier:   E5:2B:D2:55:ED:19:00:8B:8D:F2:BB:07:2F:0C:91:73:7D:72:48:9C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459368CF7CC7D72BB348672DE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bae8d4f0-3c3b-3425-9896-8dc5b444eee7.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     3356
IP address blocks:        130.174.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:cf:7c:c7:d7:2b:b3:48:67:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=be82b5b2-b58b-4550-a6c6-27d113fe4d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:52:8d:cf:b1:d8:87:83:8f:ab:d8:b4:69:a5:
                    69:e2:00:64:ce:10:65:35:5d:3a:ba:d6:13:9e:9c:
                    07:c5:64:a7:37:f6:43:6b:22:81:74:e6:b6:e3:e0:
                    f8:fb:ad:68:c5:0c:8f:7a:27:de:17:a6:5c:71:b8:
                    7b:a4:98:35:b1:c9:b2:6c:67:45:c6:35:58:38:88:
                    b8:aa:0c:f4:b6:46:7d:6d:21:49:72:97:d5:14:75:
                    dc:36:73:46:28:3a:70:8d:06:f3:1d:29:9e:fe:98:
                    51:7d:9f:b6:3d:72:d5:95:74:ae:67:27:9f:b5:3d:
                    10:c0:51:fb:43:7f:37:d1:72:30:17:b6:da:a7:5b:
                    42:dc:80:fd:d0:a3:0c:ed:4e:86:ba:8e:3e:5a:d3:
                    41:8f:80:74:54:f7:5c:86:45:bd:71:92:1f:a4:52:
                    d6:8b:b0:dc:67:5e:82:25:d8:0f:21:8a:06:22:8e:
                    b2:ce:b3:80:a9:e9:4a:7d:2f:d1:e4:d4:8f:ae:de:
                    03:81:c3:93:a1:ff:7e:35:b9:fa:d3:1e:80:a3:71:
                    88:c4:29:8a:2a:8c:c7:1c:c1:d0:8c:22:00:a2:80:
                    fd:89:b0:b8:c6:68:77:c0:1c:ce:89:27:ff:35:d6:
                    c8:20:c7:07:38:41:b2:ee:38:e5:c9:22:01:fb:38:
                    dc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:D2:55:ED:19:00:8B:8D:F2:BB:07:2F:0C:91:73:7D:72:48:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bae8d4f0-3c3b-3425-9896-8dc5b444eee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b0:c6:27:4a:72:c3:5f:e2:c9:12:dc:46:7a:6c:02:a6:4d:
         e6:81:6b:ca:12:e1:3e:a7:6b:0e:c0:ef:df:c0:44:95:75:47:
         4b:f3:fc:98:d8:54:67:ec:11:2e:54:fe:bd:f5:d6:6f:5d:94:
         35:9e:85:4b:3f:61:43:66:ee:a0:86:0a:58:ce:40:fc:4a:29:
         de:8f:db:15:e8:94:fd:f6:1f:e5:8b:90:0b:fb:eb:7b:fb:8d:
         a7:be:7a:40:94:e7:8d:0e:ce:19:90:94:fd:86:e7:6e:65:49:
         ec:3c:cb:0b:e6:dc:e4:69:de:49:15:70:6d:44:6e:d4:ba:33:
         51:31:08:0f:94:e9:c1:e2:d2:19:da:a2:11:96:ff:f1:03:bd:
         bf:df:6c:15:ef:cf:71:40:5d:f4:90:f9:2d:c0:c3:60:a9:d4:
         99:5c:bb:14:80:95:48:94:d9:a3:e0:0c:18:c3:8c:20:ff:0a:
         c5:61:18:d3:df:6c:9f:0a:28:9a:c0:27:24:54:d0:a5:ce:f0:
         69:92:36:f1:62:02:d9:f5:95:a2:9e:66:80:af:04:98:5f:72:
         03:f7:34:17:0f:75:2c:8d:26:0a:33:b0:b5:77:f6:24:95:f3:
         d1:93:ff:84:68:6e:28:ed:2f:99:78:03:5c:b6:f5:9a:bc:ae:
         48:fb:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:43 2024 by rpki-client on console-fra.rpki-client.org