Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cd694bf1-37dd-32e0-b127-3f2503b18120.roa
File:                     cd694bf1-37dd-32e0-b127-3f2503b18120.roa (raw, json)
Hash identifier:          G3WCmB5clRkMa2ZmrD/lr2G2TYIG8VuNFPxyyF3W+d4=
Subject key identifier:   F7:ED:88:AF:12:68:07:CF:DC:1A:F5:8B:CE:48:61:F1:94:B0:6F:DD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847537B758CA8AA51DFA4EB9E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cd694bf1-37dd-32e0-b127-3f2503b18120.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     3356
IP address blocks:        130.174.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:75:8c:a8:aa:51:df:a4:eb:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=a096e389-93f3-4de3-99d9-024609403434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:f2:9b:65:4b:74:d4:ad:bb:6b:85:7d:12:
                    bd:f2:d5:c0:0c:b6:35:37:5b:82:fa:a3:32:d8:33:
                    b0:9a:d3:94:1e:c1:e1:e6:f0:60:0b:91:81:07:fc:
                    ff:14:94:c4:17:52:24:b8:80:45:84:2c:02:dd:c9:
                    36:bf:e7:77:9f:df:7b:7d:32:1f:3b:4e:1a:18:13:
                    e9:f0:76:fc:4e:3c:43:b3:e0:4e:77:b0:e0:bb:b2:
                    31:7d:7c:b4:2f:ae:79:9b:49:4d:84:a5:18:a1:de:
                    b8:8d:f6:71:91:7b:3c:74:5c:7f:65:16:4c:7c:6c:
                    24:8f:0b:43:e0:0f:42:8a:7e:88:dc:a1:8e:68:1d:
                    a3:83:6c:8a:da:b4:c1:d1:ff:17:57:0c:58:1b:0d:
                    07:3a:22:47:9c:aa:8d:5d:c9:b5:e0:c7:01:89:0f:
                    85:72:6f:6b:a3:a6:3b:6c:f9:32:32:19:0a:62:11:
                    d2:d7:b1:75:6d:5e:85:8a:e1:aa:34:09:93:8f:d4:
                    f7:70:8d:8c:ee:ae:4b:31:09:0b:f7:7b:5e:ea:cd:
                    df:53:9f:e0:64:eb:06:48:5a:a5:d7:96:64:5f:f1:
                    03:25:8a:6b:d5:a8:b4:f9:55:01:ee:04:62:9c:1d:
                    6f:73:c6:89:3c:1d:8c:b1:a7:0f:0b:a0:d1:cb:85:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:ED:88:AF:12:68:07:CF:DC:1A:F5:8B:CE:48:61:F1:94:B0:6F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cd694bf1-37dd-32e0-b127-3f2503b18120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:c6:45:28:a0:de:06:22:76:e1:0a:c2:5c:0f:3a:e7:e5:
         0b:16:52:9e:eb:e4:b4:7a:d4:33:25:27:9f:07:3c:5c:2b:59:
         79:ac:eb:2b:14:9f:01:6d:2c:45:96:d8:8d:3e:13:dd:5b:c6:
         c3:99:90:e6:0b:fa:ec:f8:6b:0e:b7:a2:21:de:96:17:c2:b3:
         20:c7:21:dd:8d:74:01:b7:09:db:01:c6:3a:20:3a:fd:d4:19:
         88:e5:d8:d8:cf:5f:bb:e1:85:53:23:e5:09:32:fc:8f:99:e7:
         00:7f:8c:b3:c7:9c:43:55:08:c3:8d:bd:07:28:63:b7:ca:65:
         24:f3:d6:70:9d:0f:df:1d:fd:1d:92:c7:9c:4b:35:2e:30:3b:
         e5:ed:f6:3c:d4:cc:48:e8:9c:63:cb:64:cf:38:35:6c:34:82:
         a4:41:03:bc:7b:f4:93:e5:02:5f:ae:e4:5b:f0:ff:33:bc:b9:
         68:9b:76:77:46:19:49:f2:2e:46:43:61:13:b7:6d:ee:d1:88:
         c8:0a:30:d8:6b:fb:7e:94:69:4d:64:9e:37:48:b6:0f:bb:d1:
         d0:4d:ab:a5:d1:b5:7b:db:16:e2:6b:ea:49:cd:22:f6:4e:4b:
         ee:e3:85:61:e1:72:71:5d:3e:75:1c:68:c4:c4:28:a0:9e:86:
         60:7e:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:46 2024 by rpki-client on console-fra.rpki-client.org