Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa
File:                     bf90fca5-79a9-3e91-8066-10aabfcc4701.roa (raw, json)
Hash identifier:          W4eN9uf2w/NjVgD3x0t5NiQauortmiShFNUJsntvw/c=
Subject key identifier:   7F:38:FD:AD:5C:64:5C:EF:95:6E:E6:2B:AB:D0:C0:B7:48:EF:81:C0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963358E002D5024FEA0ABDC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     202
IP address blocks:        130.174.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:58:e0:02:d5:02:4f:ea:0a:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=58553e52-e03a-46ac-a7db-095dffbb4341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:26:78:9e:0e:dc:75:03:84:40:e2:cb:f2:
                    3a:0b:04:5c:c5:2b:8c:90:d8:86:6a:4d:c1:81:08:
                    9f:cd:61:a3:eb:86:86:9b:67:99:3b:ba:b1:e2:8c:
                    0b:6c:7b:39:c1:96:dc:67:62:b2:52:ec:d1:0c:d0:
                    ac:53:33:a5:a6:f3:5e:9f:4d:28:f3:ec:b0:e0:e0:
                    ea:8e:f6:84:da:cb:b0:4d:b9:90:96:d8:18:27:3d:
                    7a:31:3e:97:a7:26:53:f5:7b:19:12:6c:b0:3d:75:
                    05:69:22:8d:75:ea:2e:53:e4:65:31:6e:8f:9e:cf:
                    3b:9f:b9:e2:56:37:a7:44:82:b8:4a:68:a9:b8:69:
                    46:96:59:a5:41:25:a7:c8:51:4d:ae:89:4b:72:e9:
                    a5:a0:8b:0a:f5:7b:37:60:6e:a5:52:a3:a0:c4:c6:
                    8e:4e:3a:88:42:a6:d6:04:e5:e1:bd:d2:cd:c5:0e:
                    c9:0b:1b:52:85:ad:d3:20:1d:ef:94:72:26:0a:a3:
                    fa:c8:de:f1:63:23:a8:21:95:7d:bf:b5:74:d1:a8:
                    0f:25:e6:4b:f2:f0:4e:9a:3e:53:76:06:b0:1f:78:
                    34:84:b7:31:e5:47:7d:ed:4f:ea:e7:3f:9d:de:80:
                    4d:de:4b:3d:bb:a6:99:78:07:04:0d:97:24:3f:8d:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:FD:AD:5C:64:5C:EF:95:6E:E6:2B:AB:D0:C0:B7:48:EF:81:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:65:87:57:fb:35:f2:f5:da:bb:80:98:77:9a:9f:46:8e:74:
         28:f6:55:bd:af:37:48:b1:79:34:93:66:9c:b0:d7:dc:de:51:
         62:3f:ac:74:f9:ef:56:78:04:3a:8e:0b:ab:1a:ef:e7:a7:71:
         b0:fc:78:c8:37:dd:2f:cf:54:ec:9a:46:71:48:aa:fc:63:92:
         c6:fd:6b:92:f0:66:8d:20:19:d9:96:75:05:67:e6:cb:c9:e7:
         9c:f0:e2:79:78:85:10:d6:42:1c:78:6d:5b:cc:9d:47:94:1b:
         32:20:5e:64:62:63:86:e4:25:f6:bd:dc:27:da:e8:fb:a3:a2:
         8f:a9:76:d5:14:85:69:6d:33:8f:c8:43:07:3f:ad:d2:f3:5b:
         40:17:d1:b5:31:cb:99:62:5f:7a:22:1b:65:28:7a:4f:ee:52:
         63:a4:62:fe:8f:27:1d:fb:c7:b8:31:15:01:4c:9f:90:be:ed:
         1a:9a:7a:af:e9:4d:57:8c:91:5a:15:45:7e:83:50:29:57:fd:
         56:34:95:44:37:f1:6c:6d:03:91:dd:95:17:be:20:49:82:a2:
         eb:6f:9f:3a:a6:cb:b6:72:19:55:b0:c4:80:ae:82:06:1b:d3:
         f6:a4:ef:47:21:af:03:a3:5e:46:ac:70:2c:a8:12:84:a2:17:
         53:39:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:42:04 2024 by rpki-client on console-ams.rpki-client.org