Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa
File:                     d6456c5f-35f6-34a3-88e6-09296cb70725.roa (raw, json)
Hash identifier:          BR9jVSXMWdQR1kgohgm/0Misp12+pNFv+SWiqtjCgAM=
Subject key identifier:   84:EB:55:C6:98:95:0D:D9:CF:66:CA:62:73:5B:6F:C1:37:D2:B7:0E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FB9DFE34FC7F1DC2D3EC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     203
IP address blocks:        130.174.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b9:df:e3:4f:c7:f1:dc:2d:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=2d73066e-e452-47cb-9808-4f7e60149eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:04:75:06:fc:78:ff:dc:f4:a1:59:70:89:
                    14:e4:72:b7:22:9e:72:d8:ba:d0:80:74:08:b8:8f:
                    ae:16:ed:2a:86:39:13:9c:b8:85:0d:d0:bc:7d:91:
                    25:10:31:a3:1d:85:f2:bc:c7:7b:dc:5f:07:a8:63:
                    27:fb:f1:5c:4b:1c:16:38:1e:f7:8d:d6:29:03:e6:
                    41:d3:48:26:3b:24:5b:c2:b4:9c:2d:35:2b:29:08:
                    61:21:8f:34:e8:f6:fe:f8:5b:b2:10:4f:c3:f2:0b:
                    b9:b3:bd:74:6d:b4:03:2d:7c:dd:23:3c:a8:33:1d:
                    50:8b:db:2e:65:6c:88:49:40:c9:4a:1e:d1:dd:35:
                    8c:d8:46:7b:72:af:02:ce:67:7c:fe:79:98:a5:61:
                    00:ab:ba:62:9f:02:bb:cc:52:68:bf:a9:f2:b9:90:
                    bc:c9:9d:5a:d3:45:33:7c:c3:eb:81:5b:7b:c3:0b:
                    41:f6:85:ac:b9:a2:d0:f4:32:28:79:5e:13:52:d8:
                    d8:43:52:ff:51:9d:b3:89:fa:39:b5:b3:a9:55:93:
                    21:f7:4e:e4:c4:a7:84:9b:99:9c:d9:8c:6a:d0:6a:
                    f4:c7:32:bf:de:40:b5:94:56:21:d6:3e:ac:60:58:
                    28:1c:81:75:09:03:00:b2:9a:a3:04:f4:5b:f9:45:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:55:C6:98:95:0D:D9:CF:66:CA:62:73:5B:6F:C1:37:D2:B7:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:12:7c:b8:05:38:91:1b:04:76:a0:c6:3b:da:f6:1a:07:
         63:12:f1:d3:c1:b9:95:37:48:bb:f9:ce:8d:b6:f3:a0:b4:5a:
         dd:2e:ee:1f:e4:74:c7:d1:15:91:d0:bc:0b:dc:03:f4:b6:3a:
         38:f3:b3:31:5c:42:38:d1:f0:5d:53:60:6c:ff:dd:9c:44:e1:
         9b:f5:b3:6c:10:49:7f:8e:57:52:78:2f:6f:13:5b:5f:c1:7d:
         c8:73:22:9c:23:dc:68:f2:c6:23:68:f0:05:d1:04:39:2d:b8:
         4c:76:5d:de:1a:d1:41:42:7a:c3:db:a2:b6:4d:d7:91:19:45:
         1b:42:9f:06:eb:f7:82:54:ae:d8:d0:b1:62:c0:bc:74:60:9d:
         44:60:ac:44:e3:30:02:ca:8c:16:42:0d:10:1c:60:37:22:ed:
         f5:1c:93:ae:04:a9:9b:d7:32:21:23:ec:1f:8f:b9:2d:4c:27:
         64:71:c5:62:02:a4:b5:b3:55:f9:3c:d1:bb:41:b5:4a:ca:64:
         71:fc:6b:2a:cb:11:99:72:b1:48:3d:04:9f:d5:ec:0c:74:81:
         fa:8e:97:38:c5:43:15:d8:d2:d9:c7:c6:d9:be:2a:bc:72:c7:
         00:84:14:b8:66:cb:63:6f:ae:1d:1e:6e:cf:1b:36:d8:80:d6:
         af:ad:21:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:40:36 2025 by rpki-client