Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced0a47e-4508-3b79-9eeb-e55f9546464a.roa
File:                     ced0a47e-4508-3b79-9eeb-e55f9546464a.roa (raw, json)
Hash identifier:          uqOqtWKC0rcMeIKN5AXuZkPnK9VJH8rBge/qAehTfjI=
Subject key identifier:   64:66:CC:99:4E:98:D6:F4:89:6F:53:B9:4C:11:8B:14:14:ED:CE:1A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0D380B92280CB2BB21500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced0a47e-4508-3b79-9eeb-e55f9546464a.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3356
IP address blocks:        130.174.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:d3:80:b9:22:80:cb:2b:b2:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=0fd8af5a-ae58-4590-9ee3-58050ab6a850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:23:d0:92:c2:85:d6:aa:75:87:69:58:02:
                    5f:f0:63:13:9d:07:04:9c:b6:d6:85:cb:1e:5f:c0:
                    b2:45:79:9e:c9:9f:80:82:a7:8b:38:98:83:c3:48:
                    c0:14:9e:a0:aa:65:22:8a:94:09:ef:fd:63:bb:33:
                    c1:2c:c4:83:67:7e:f0:21:e6:2d:0c:56:1c:f7:72:
                    26:13:cd:bd:ea:aa:e7:be:e9:b3:51:09:0d:ba:a7:
                    7f:b2:e6:84:17:77:b0:ae:41:80:fe:29:db:61:6d:
                    fb:67:aa:37:70:ab:be:9c:e7:7c:70:7f:2b:2f:b6:
                    c1:81:db:ce:ad:44:7b:9c:95:75:f1:31:76:9f:a4:
                    60:7d:a9:b5:ca:97:a5:1a:19:cd:b7:ec:7c:17:f9:
                    d9:25:ef:76:fd:73:ec:83:55:bc:83:c8:24:09:d0:
                    a7:e3:6d:6f:a8:d2:be:b1:e8:b6:23:b1:6d:26:b6:
                    31:02:ad:6f:b4:6f:65:68:98:d8:f7:5b:de:61:5a:
                    c8:65:05:0b:2f:1f:b7:05:f1:bc:b7:72:1c:c9:0e:
                    1e:00:ae:d4:46:07:1b:dd:b7:0b:76:86:69:59:ff:
                    63:f6:1a:1f:97:3e:48:be:82:53:3c:84:3d:7e:37:
                    8c:e1:57:9c:06:fa:40:da:63:ce:49:ec:61:12:98:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:CC:99:4E:98:D6:F4:89:6F:53:B9:4C:11:8B:14:14:ED:CE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced0a47e-4508-3b79-9eeb-e55f9546464a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:d5:3b:f6:56:c2:35:6a:a4:72:2c:b5:1b:10:a5:eb:99:
         6a:cb:e5:58:e8:60:2e:27:73:32:36:4d:ba:90:d7:c3:fa:4d:
         35:d5:b5:54:4f:a7:88:61:fa:74:f3:98:65:3e:8d:48:b9:4f:
         dd:73:38:4f:e7:13:2a:4f:cf:e4:0f:fb:58:c4:b1:d8:6a:ca:
         c8:6a:e6:14:91:99:b7:53:18:7e:a6:7c:23:f6:57:39:c0:62:
         87:b7:a8:17:9c:37:93:f3:2f:b7:19:2e:df:0c:c5:21:07:4f:
         f8:fb:22:da:27:34:3d:9b:f9:c0:ff:28:e4:13:e8:6e:29:27:
         0a:8d:cb:b6:aa:dd:e9:4f:ca:0e:71:9e:9d:7e:f3:f0:7d:45:
         6e:ff:1a:59:bd:43:81:42:5f:fe:7f:30:80:09:9e:f9:2c:e7:
         e6:39:fe:1d:c9:a1:41:3e:69:9c:f4:b4:87:42:27:3f:83:f3:
         6f:49:ea:11:e9:29:9e:51:8e:ad:5a:ee:0a:d0:d1:2c:d8:bf:
         66:bf:a3:92:b7:7e:98:dd:92:3d:fa:e2:8e:30:f2:38:71:07:
         d9:d9:92:18:2c:47:57:15:14:e6:ee:6e:d0:d4:4d:1f:95:86:
         9c:e0:f0:8b:ca:a5:a8:26:25:46:1f:15:71:f7:cc:d9:9f:09:
         0f:a7:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:38 2024 by rpki-client on console-ams.rpki-client.org