Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5e18436-396f-3a9a-9205-24e98b214a0a.roa
File:                     e5e18436-396f-3a9a-9205-24e98b214a0a.roa (raw, json)
Hash identifier:          Z0T+e1V7Sus70f90GlM7sW16pvG8grGTaYQBWCXMXnk=
Subject key identifier:   2E:E9:11:17:71:3F:80:F0:0D:76:10:D8:4D:DB:AD:67:DB:49:B5:41
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F0391684EBFFB4C1399300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5e18436-396f-3a9a-9205-24e98b214a0a.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     203
IP address blocks:        130.174.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:39:16:84:eb:ff:b4:c1:39:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=9517ea05-4e17-4f28-828d-c3ce419d2b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:3d:27:ee:50:32:0b:f0:9b:6f:9d:8f:f1:
                    ff:cf:fe:a4:4c:78:31:84:6d:e4:20:a4:ba:ce:a2:
                    16:42:42:fc:ca:9e:a1:ce:3d:d6:8b:4b:2e:e8:49:
                    00:86:e4:7d:11:bc:82:43:6d:87:bc:94:40:47:48:
                    48:53:fc:af:f1:23:db:32:fb:a1:0d:13:fd:84:92:
                    dd:ab:eb:4f:91:98:34:ac:d7:34:fc:20:7f:a8:81:
                    fc:cb:9a:06:12:55:a9:1c:fa:9b:11:03:a3:59:d6:
                    d8:d5:77:28:98:b9:9b:76:f4:e4:ce:0c:c2:5d:97:
                    d8:52:4d:1e:99:df:5b:5c:00:98:ff:df:fd:39:c7:
                    f7:b7:5e:31:94:5a:48:63:97:db:1b:1b:97:a4:9c:
                    af:1a:b9:40:5a:e4:04:42:97:65:4d:d3:d9:6c:f9:
                    4b:ed:ed:4c:40:4d:2b:3a:3e:b4:c5:45:55:95:b7:
                    ee:c6:b3:52:48:c7:9b:f2:6b:ea:da:75:f5:ac:2c:
                    db:6d:d0:da:8b:19:dd:72:92:fe:23:44:8b:7a:9a:
                    18:80:73:b9:ba:b5:e6:f3:97:87:9f:98:e9:57:e7:
                    67:f5:ad:a6:be:a3:1b:be:cc:c8:dd:29:d8:23:78:
                    74:0a:83:af:54:9a:7d:ca:e7:51:50:74:0a:56:ef:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E9:11:17:71:3F:80:F0:0D:76:10:D8:4D:DB:AD:67:DB:49:B5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5e18436-396f-3a9a-9205-24e98b214a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:7d:59:a3:a7:3e:b5:89:e9:19:b7:c1:61:a0:48:c3:b3:
         e4:91:6e:fd:cc:25:bd:d4:11:d9:ff:e4:e2:ff:2c:54:8f:0a:
         13:99:c2:d5:3d:8e:99:0d:8f:b4:9d:d6:b4:f8:f7:c5:3d:f6:
         9b:9c:85:de:90:56:08:43:46:3c:53:42:64:13:d8:9c:de:2f:
         2a:2d:05:48:05:82:8e:46:6b:7b:c7:39:ec:45:ea:ea:24:cd:
         81:8f:18:52:65:2a:fc:8e:c2:44:0d:e6:20:fd:a3:da:ee:71:
         08:92:66:ff:c0:50:64:67:2d:2f:f5:0c:60:51:29:a9:44:44:
         05:76:2b:c3:9b:10:c4:b1:c3:6d:37:e4:10:25:96:88:69:0d:
         99:9a:41:cf:34:fe:2a:a2:1b:64:35:81:86:8e:04:1a:29:77:
         6c:74:80:c5:34:94:b9:7b:a7:59:ef:65:36:d2:31:87:1e:4f:
         41:e6:e2:a6:0d:3e:ff:94:91:7d:7e:e6:99:c4:fc:40:d8:ec:
         ee:80:3b:c7:1d:2e:f5:e3:01:95:67:41:1a:dd:2a:c9:04:10:
         af:16:ab:37:fa:63:df:e0:43:e9:8c:eb:c2:96:52:a4:6d:f9:
         d9:79:ff:ef:02:a0:36:21:5b:ee:40:61:b0:fb:e0:80:ae:75:
         b9:ba:b8:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DkWhOv/tME5kwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTUxN2VhMDUtNGUxNy00ZjI4LTgyOGQtYzNjZTQxOWQyYjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM89J+5QMgvwm2+dj/H/z/6kTHgxhG3kIKS6
zqIWQkL8yp6hzj3Wi0su6EkAhuR9EbyCQ22HvJRAR0hIU/yv8SPbMvuhDRP9hJLd
q+tPkZg0rNc0/CB/qIH8y5oGElWpHPqbEQOjWdbY1XcomLmbdvTkzgzCXZfYUk0e
md9bXACY/9/9Ocf3t14xlFpIY5fbGxuXpJyvGrlAWuQEQpdlTdPZbPlL7e1MQE0r
Oj60xUVVlbfuxrNSSMeb8mvq2nX1rCzbbdDaixndcpL+I0SLepoYgHO5urXm85eH
n5jpV+dn9a2mvqMbvszI3SnYI3h0CoOvVJp9yudRUHQKVu9pzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7pERdxP4DwDXYQ2E3brWfbSbVBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTVlMTg0MzYtMzk2Zi0z
YTlhLTkyMDUtMjRlOThiMjE0YTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGnfVmjpz61iekZt8FhoEjDs+SRbv3MJb3UEdn/5OL/LFSPChOZwtU9
jpkNj7Sd1rT498U99puchd6QVghDRjxTQmQT2JzeLyotBUgFgo5Ga3vHOexF6uok
zYGPGFJlKvyOwkQN5iD9o9rucQiSZv/AUGRnLS/1DGBRKalERAV2K8ObEMSxw203
5BAllohpDZmaQc80/iqiG2Q1gYaOBBopd2x0gMU0lLl7p1nvZTbSMYceT0Hm4qYN
Pv+UkX1+5pnE/EDY7O6AO8cdLvXjAZVnQRrdKskEEK8Wqzf6Y9/gQ+mM68KWUqRt
+dl5/+8CoDYhW+5AYbD74ICudbm6uEM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:21 2025 by rpki-client