Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d62de5c3-e65c-3795-aa89-6592dc33d971.roa
File:                     d62de5c3-e65c-3795-aa89-6592dc33d971.roa (raw, json)
Hash identifier:          bogUEWwMy+5y20TdHcKAy5BmsSTfKXQW0tyZ4/YZciU=
Subject key identifier:   10:3C:C0:1E:4D:6F:05:24:C4:E2:1E:26:24:44:D9:12:5A:D8:79:D8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246B1D7C9C6104B803A0F40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d62de5c3-e65c-3795-aa89-6592dc33d971.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     202
IP address blocks:        130.174.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b1:d7:c9:c6:10:4b:80:3a:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=f45bd54f-933e-444e-8c65-8d5bffb2145f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:23:0b:69:b7:fb:a3:e1:94:f1:5b:97:c2:
                    e0:34:6f:88:8a:1d:e2:57:13:cd:78:aa:43:82:0f:
                    f0:a9:47:c5:ca:17:44:8a:bc:c1:43:12:c3:3e:6c:
                    fa:2b:2f:70:ef:af:1a:d0:b8:f8:1d:9b:27:9c:0b:
                    95:18:5c:58:f0:8d:93:51:ed:4e:e8:b2:ad:6c:94:
                    6a:5b:ea:e3:29:00:0d:99:e1:dd:1b:88:e3:d6:ea:
                    d2:05:6e:1b:ab:0a:61:02:6d:39:4f:ce:6a:64:e1:
                    41:8f:d2:db:ed:d2:5a:86:8e:45:18:06:0a:c8:9f:
                    e2:7d:30:c8:81:b1:8b:b1:38:d2:c4:49:d4:69:88:
                    6d:bf:4f:6c:87:0e:cd:07:e8:9d:93:1a:08:67:5f:
                    1a:6c:b1:4c:36:56:d8:db:b3:ec:eb:fb:da:9e:cb:
                    c9:1f:76:96:09:49:26:49:4b:40:f5:29:57:04:20:
                    2b:d0:db:ec:0c:18:50:4c:68:e0:8a:33:31:60:61:
                    4f:bf:8a:0b:36:61:ed:02:a6:0e:ee:4e:e0:d4:04:
                    58:74:c5:79:00:44:bd:59:3e:ea:dc:ca:ee:36:8c:
                    40:e0:4d:2a:36:c5:33:e7:41:3f:63:a3:af:1a:4a:
                    a3:ce:a9:dc:1c:fd:21:8a:9d:0e:21:61:34:9a:6e:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3C:C0:1E:4D:6F:05:24:C4:E2:1E:26:24:44:D9:12:5A:D8:79:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d62de5c3-e65c-3795-aa89-6592dc33d971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:94:90:9a:5e:e9:b3:a4:d6:6b:1e:e5:39:03:00:85:34:
         aa:ae:1f:52:2a:63:5d:81:4a:38:85:b0:6c:6e:5d:20:4b:e4:
         da:4f:81:69:b2:ed:32:9e:b2:dd:ef:d5:81:16:58:26:0f:cf:
         d8:25:4a:da:eb:f3:3c:3e:ad:90:10:9c:ba:e4:50:4e:79:80:
         10:0a:12:84:98:d9:c3:c5:c2:bf:e1:3a:62:c9:fd:b4:53:98:
         53:f1:37:66:0f:98:c3:a3:4d:bd:55:e6:e7:fc:84:88:25:38:
         f8:3d:9e:24:fc:bf:63:20:8c:c4:ba:f5:bf:19:7c:d6:32:76:
         f0:cf:94:c7:a1:46:65:b5:8e:04:eb:f2:4b:a5:82:6c:b7:49:
         53:0b:22:78:81:f8:32:06:09:cc:07:5d:cf:2b:77:ec:5d:57:
         2a:0a:8d:0c:5a:5c:84:d9:bb:41:0a:ee:fd:5f:b0:be:87:3f:
         85:a0:5f:af:de:a3:47:ba:58:5b:ba:9e:94:bd:6a:91:76:8f:
         f3:b9:b3:de:2b:23:89:fd:2f:5c:c2:2f:42:c3:b4:b7:fc:27:
         ee:83:fe:42:a7:4d:7a:8d:99:a1:1a:5b:e1:7d:91:39:f5:37:
         98:cb:20:88:ce:73:4f:25:83:1a:7c:78:75:24:b3:ff:a3:8f:
         5c:ce:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:10:16 2025 by rpki-client