Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa
File:                     e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa (raw, json)
Hash identifier:          QDvAmGGyKfBbCBZ+QhsV1DD8m0UJjtDTlFpt0Pxh0io=
Subject key identifier:   A2:2E:FE:11:88:AF:3C:B0:D2:6A:EB:15:DE:78:51:95:A3:88:38:35
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459368CA7A31EC438991906F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     3360
IP address blocks:        130.174.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:ca:7a:31:ec:43:89:91:90:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=9d45da14-0696-4d16-88c5-87f5f1cb58ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e2:b6:ea:53:9d:71:c5:fc:e8:29:d5:c7:5a:
                    b1:22:dd:d1:c0:6a:de:aa:f8:09:a7:bb:c1:34:9e:
                    c0:e5:94:de:df:40:51:58:0e:32:93:51:13:91:5b:
                    6a:aa:af:fa:a1:e4:47:74:bf:9a:5b:cb:f9:d1:26:
                    fd:97:a1:d5:70:ff:ed:67:6c:46:1b:94:84:c2:57:
                    73:63:3f:f5:c8:af:63:45:ba:91:a5:42:24:05:6a:
                    44:2b:69:57:a4:42:f7:cd:fc:48:3f:04:51:96:06:
                    27:82:18:e4:c2:01:45:22:a4:b3:6b:6a:a1:9d:bf:
                    c8:0d:4c:a7:45:77:41:1a:50:ed:d9:8b:f5:57:e4:
                    be:2d:21:5e:c3:ff:e5:a6:2a:36:66:51:b1:4d:91:
                    1e:c5:20:48:d4:15:52:13:b1:cc:b6:b1:bd:e7:8b:
                    24:be:9f:6c:f4:c0:49:0b:48:b1:0c:31:25:72:88:
                    a4:9d:1b:55:11:19:08:6a:0a:c9:6d:f3:b7:1d:f6:
                    e3:a6:62:a9:17:d4:61:cd:77:ad:22:51:92:c6:01:
                    cc:86:63:d7:fc:51:a2:00:9b:7c:96:c4:53:0e:92:
                    ba:17:09:9c:34:0e:71:58:f3:84:e4:a7:ab:03:88:
                    1c:c0:02:ca:48:af:dd:38:f6:40:f8:c8:3d:85:02:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2E:FE:11:88:AF:3C:B0:D2:6A:EB:15:DE:78:51:95:A3:88:38:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4c:d6:3f:0c:93:c9:4c:12:49:06:63:06:d0:df:00:38:09:
         37:a0:93:22:21:15:1d:0d:be:00:0a:7c:8a:c2:db:22:3c:16:
         8e:e3:2a:10:d1:82:f7:f6:30:80:1c:39:85:5e:96:4a:11:3f:
         2a:bd:40:37:f7:09:21:1b:79:01:5d:fe:aa:a1:63:67:f5:12:
         f4:38:48:26:2d:41:d6:07:7d:4d:f3:29:82:ac:df:a5:8e:1b:
         ff:8b:b9:b8:2b:44:f5:19:62:7e:87:d5:83:a4:e3:99:c2:87:
         7b:d8:35:81:76:44:5c:2e:58:fd:78:e0:8e:b3:26:3f:83:79:
         7d:51:63:5b:e0:d5:07:79:8b:d2:35:a6:b3:0d:d5:93:a1:96:
         53:3f:91:a1:75:51:b9:be:83:36:38:81:0c:62:6d:2d:45:ff:
         40:a9:2c:95:d4:80:d3:ab:04:78:0a:a8:19:b5:8d:56:4f:8d:
         85:27:25:b6:2b:d2:4c:3e:f5:6a:28:f7:14:50:bc:6c:3b:ca:
         ba:20:bb:f3:94:11:1a:67:79:9d:f4:f3:d9:a8:09:c3:56:dd:
         01:f2:75:10:51:30:48:8e:82:12:b6:0f:43:fd:dd:b6:31:64:
         9b:91:96:d3:ce:d5:99:29:9d:d4:df:2d:8d:68:83:c4:ff:03:
         ee:b8:82:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:40:40 2024 by rpki-client on console-fra.rpki-client.org