Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc84de1b-5810-33ad-9118-e23594e03fff.roa
File:                     bc84de1b-5810-33ad-9118-e23594e03fff.roa (raw, json)
Hash identifier:          P1I6VQe+d2SQ/JzIOCCNShbSUiN4pHUODV6oLwQM+RQ=
Subject key identifier:   CC:D3:9B:8E:A5:64:F9:AE:42:CA:4A:8B:6C:B5:C3:7F:69:D0:19:1C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0D40D1B438BB39B7E5B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc84de1b-5810-33ad-9118-e23594e03fff.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3356
IP address blocks:        130.174.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:d4:0d:1b:43:8b:b3:9b:7e:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=f984b22a-7155-4dcf-b59e-fa1798da27e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ae:30:b3:34:db:51:c5:c0:61:e0:89:f3:df:
                    b5:47:f5:ab:34:0f:c3:f3:e9:95:2a:e3:4b:03:c0:
                    4a:a9:39:e2:ab:7b:41:76:fc:56:6f:d8:e1:d1:b9:
                    c9:20:07:8f:68:a0:0f:ba:b7:27:37:0e:3a:73:84:
                    1e:c6:3f:07:c4:17:3f:63:4a:bb:a1:b8:e3:f9:c4:
                    51:fb:18:4a:aa:e1:65:a4:a9:11:11:ed:d9:2e:f1:
                    78:b3:26:0a:df:01:4a:80:b0:b5:02:2a:27:47:4a:
                    e7:b6:4e:eb:03:f4:bd:49:0f:ed:36:e0:58:55:e3:
                    ab:66:0e:0d:df:4e:18:f0:4a:ae:fc:c5:2e:57:cb:
                    b3:3f:da:04:92:8c:28:23:b0:cb:c9:0c:9f:6a:5c:
                    60:cd:43:15:65:6f:df:cf:99:6a:78:b4:70:d9:cb:
                    06:4d:50:f4:2f:f0:aa:ae:21:ba:a2:f9:0d:20:04:
                    e7:43:86:c6:42:49:20:3d:f4:3c:4f:8b:7a:8f:cc:
                    e1:46:75:e2:35:9e:43:ec:cc:b6:15:12:09:36:83:
                    13:19:9f:65:9e:3e:02:25:fe:14:e3:94:e9:26:f2:
                    05:de:d7:30:6c:99:95:ca:c0:79:b1:f1:c4:77:c7:
                    75:f5:6b:fd:05:24:43:67:77:3a:0f:47:96:bb:a0:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D3:9B:8E:A5:64:F9:AE:42:CA:4A:8B:6C:B5:C3:7F:69:D0:19:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc84de1b-5810-33ad-9118-e23594e03fff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:69:84:f4:37:cf:de:4c:e0:f3:fe:d8:f3:76:4d:d2:29:
         9d:9c:be:b5:3c:19:a2:e0:99:83:10:00:45:e5:0c:95:00:ef:
         c1:9a:d8:4a:a3:ba:82:a2:f4:95:19:12:c4:ac:0e:03:a9:17:
         da:db:4c:20:01:5d:22:60:27:d4:45:fb:2a:21:db:c8:38:f7:
         cf:a1:c3:8e:e1:fe:2d:0f:8a:f3:ff:ea:5c:81:88:15:89:23:
         14:ce:8f:8f:52:be:2d:79:9f:68:2f:7a:60:86:e5:1c:31:c8:
         91:71:9c:87:c8:10:30:d8:ee:c0:bb:8f:cd:a8:b6:07:0d:e0:
         60:7d:cc:d1:34:e5:1a:a0:e3:5b:70:bb:db:90:0f:0b:25:00:
         57:1b:82:3e:bb:80:bb:ce:10:8f:04:a0:a5:ed:99:fa:42:96:
         67:3f:84:fb:b3:3b:7e:19:ed:92:be:dc:5d:ea:63:d5:61:d1:
         43:53:f0:d0:31:e2:e2:67:f0:e2:e5:ef:a4:69:f5:6b:6b:e5:
         2b:58:ab:1c:0d:e7:bf:78:02:33:08:7e:9a:85:96:25:10:cb:
         ab:1a:9b:f5:15:2e:f5:c5:9d:89:b4:de:8a:5e:79:05:28:26:
         70:5a:fd:ba:39:66:89:93:6a:8b:d2:dc:36:e4:89:35:94:5d:
         2b:06:df:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4NQNG0OLs5t+WwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
Zjk4NGIyMmEtNzE1NS00ZGNmLWI1OWUtZmExNzk4ZGEyN2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja4wszTbUcXAYeCJ89+1R/WrNA/D8+mVKuNL
A8BKqTniq3tBdvxWb9jh0bnJIAePaKAPurcnNw46c4Qexj8HxBc/Y0q7objj+cRR
+xhKquFlpKkREe3ZLvF4syYK3wFKgLC1AionR0rntk7rA/S9SQ/tNuBYVeOrZg4N
304Y8Equ/MUuV8uzP9oEkowoI7DLyQyfalxgzUMVZW/fz5lqeLRw2csGTVD0L/Cq
riG6ovkNIATnQ4bGQkkgPfQ8T4t6j8zhRnXiNZ5D7My2FRIJNoMTGZ9lnj4CJf4U
45TpJvIF3tcwbJmVysB5sfHEd8d19Wv9BSRDZ3c6D0eWu6AaGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMzTm46lZPmuQspKi2y1w39p0BkcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmM4NGRlMWItNTgxMC0z
M2FkLTkxMTgtZTIzNTk0ZTAzZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHC5aYT0N8/eTODz/tjzdk3SKZ2cvrU8GaLgmYMQAEXlDJUA78Ga2Eqj
uoKi9JUZEsSsDgOpF9rbTCABXSJgJ9RF+yoh28g498+hw47h/i0PivP/6lyBiBWJ
IxTOj49Svi15n2gvemCG5RwxyJFxnIfIEDDY7sC7j82otgcN4GB9zNE05Rqg41tw
u9uQDwslAFcbgj67gLvOEI8EoKXtmfpClmc/hPuzO34Z7ZK+3F3qY9Vh0UNT8NAx
4uJn8OLl76Rp9Wtr5StYqxwN5794AjMIfpqFliUQy6sam/UVLvXFnYm03opeeQUo
JnBa/bo5ZomTaovS3DbkiTWUXSsG3zI=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:41 2024 by rpki-client on console-fra.rpki-client.org