Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9c0d4a6-5383-3660-b346-af9ec5d7a470.roa
File:                     c9c0d4a6-5383-3660-b346-af9ec5d7a470.roa (raw, json)
Hash identifier:          24uAXB0qp9xNcE/2UwaRpA9OuHukJJh7IzChKPJ7BS0=
Subject key identifier:   58:70:56:D6:8B:98:29:61:49:33:59:AE:B8:31:CC:E9:54:90:F0:D1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849301DE084770BD8BEED32EF00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9c0d4a6-5383-3660-b346-af9ec5d7a470.roa
Signing time:             Fri 14 Mar 2025 18:32:49 +0000
ROA not before:           Fri 14 Mar 2025 18:32:49 +0000
ROA not after:            Thu 12 Jun 2025 18:32:49 +0000
asID:                     3360
IP address blocks:        130.174.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:1d:e0:84:77:0b:d8:be:ed:32:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 14 18:32:49 2025 GMT
            Not After : Jun 12 18:32:49 2025 GMT
        Subject: CN=2b945ee8-22df-40b8-84c7-fd9508399ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:31:79:7a:d9:f1:9b:7d:b1:b3:8d:33:8c:
                    69:46:11:2a:eb:a5:b6:00:40:1b:9e:7b:88:ff:07:
                    6a:71:0c:50:b9:bb:45:ff:1e:2d:ee:42:7a:af:4c:
                    f2:c1:d7:5c:c9:61:48:3c:b5:c2:78:a4:72:4e:0c:
                    25:cc:6c:ab:d2:ea:5e:7d:b5:79:f7:fa:8d:c3:86:
                    99:c6:13:4d:3c:7f:5e:72:31:11:9d:29:0a:02:f9:
                    ca:76:e8:3c:e9:b8:70:da:c1:cb:12:a3:1f:1f:e1:
                    1f:aa:90:ba:52:dc:e5:ea:ca:fa:99:c7:d9:7a:7b:
                    4a:27:f0:27:82:21:2c:df:93:d2:08:4b:f3:9c:fc:
                    00:cd:d0:93:63:b1:42:5e:03:e1:39:b2:d1:36:1e:
                    60:88:d3:3e:59:4a:9b:0b:71:ba:65:54:7f:3a:ad:
                    3a:82:48:dd:01:71:49:fe:9b:58:26:7c:d0:e5:11:
                    14:28:14:9c:d4:71:3f:62:45:48:a5:84:7e:6c:1b:
                    2c:0b:a0:fd:df:12:24:af:84:af:95:49:f3:94:0a:
                    75:07:12:25:ed:9a:b1:67:c2:1d:e6:af:03:1a:61:
                    a7:5f:c4:1f:e7:34:62:eb:a6:c2:1c:5b:86:c8:36:
                    4a:6b:3d:a2:7b:a1:73:59:87:5e:68:47:3a:c2:d6:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:70:56:D6:8B:98:29:61:49:33:59:AE:B8:31:CC:E9:54:90:F0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9c0d4a6-5383-3660-b346-af9ec5d7a470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9d:45:16:e4:37:0b:aa:57:91:4a:a2:dc:22:18:2b:de:8e:
         18:64:f0:0e:07:27:13:b6:de:c6:bb:17:3a:29:00:72:29:c0:
         d3:f4:41:f9:cb:c5:a7:1e:ba:c5:3e:5f:a9:2d:d0:07:bb:7c:
         b4:55:bb:ad:1b:6a:79:3e:d8:01:78:7f:20:66:7f:dd:77:ba:
         85:d1:89:37:60:dc:6a:e1:5a:96:c9:44:1d:73:55:48:fe:aa:
         bc:22:ae:38:e3:e7:72:67:5d:de:6d:a1:a0:cc:d4:5e:b2:9f:
         f0:9a:b3:0e:43:70:7e:13:99:7f:93:72:23:76:8e:0a:af:13:
         8f:0d:17:66:7e:e5:de:ee:9e:17:34:5b:6c:a2:c5:c4:73:de:
         d9:6d:77:e9:9c:3e:6f:03:ee:53:62:9d:96:a7:7c:ec:bd:02:
         86:a2:00:7b:b0:1f:b4:13:86:54:9d:60:c7:0a:21:5c:55:13:
         dd:e6:66:5f:c8:5f:fb:a4:f8:dd:a7:96:fb:f5:09:86:4b:8e:
         3f:02:68:88:16:87:07:20:02:5d:98:88:c9:a6:f4:be:b5:08:
         34:8f:15:d5:c9:f7:4a:9d:d0:c1:1b:57:c5:cd:5e:4a:08:8f:
         e3:22:50:5d:d5:88:fd:37:62:5c:8c:9a:61:7c:d9:d0:3a:3c:
         ba:18:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:24:37 2025 by rpki-client