Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/edcd34ea-61fc-335d-8042-7d76e81c59d6.roa
File:                     edcd34ea-61fc-335d-8042-7d76e81c59d6.roa (raw, json)
Hash identifier:          xviYUd+ppg3FSMfBOfXjHZX2KFOxUYdG6Y8SHkeQUCg=
Subject key identifier:   20:E8:7F:26:59:89:50:7F:BC:41:01:CA:6A:E0:B1:75:1D:86:20:5B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834556C5355031C65DB906F00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/edcd34ea-61fc-335d-8042-7d76e81c59d6.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:6c:53:55:03:1c:65:db:90:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=8023330e-e8df-422c-b239-1884490660dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:ef:12:1e:e7:75:4f:31:1a:c6:8b:8f:27:
                    f3:2f:71:8e:39:c3:b7:31:40:63:ef:af:cd:3f:ac:
                    eb:71:0d:3c:40:d5:5f:93:aa:62:78:81:41:f2:dc:
                    3e:75:15:4b:7e:08:91:05:12:33:fc:90:60:ba:ff:
                    87:dd:93:c5:42:ba:de:af:5a:ad:31:3c:96:58:f5:
                    a2:56:2b:0c:3e:57:9d:30:dc:3e:b8:fd:9f:43:49:
                    ae:26:a5:40:5f:d7:01:19:99:ed:e7:62:59:01:a3:
                    92:85:dd:7c:8f:ab:90:42:96:e2:e9:29:6d:4e:72:
                    10:7d:48:1d:79:3c:be:34:cc:8c:54:d4:14:50:e6:
                    e2:5f:8f:d5:d3:f6:58:f5:42:19:76:ba:41:ef:85:
                    3f:00:40:f4:bb:e6:f6:15:42:bf:e5:d1:69:05:b4:
                    12:ec:0c:c9:86:ba:ef:b0:89:e5:4d:b4:e9:f4:68:
                    c5:a2:77:1a:cc:bc:2f:8f:4e:a8:c4:7e:64:5d:51:
                    0a:ff:6a:e4:08:d9:fc:96:49:24:97:a5:85:2d:0f:
                    1f:b8:68:24:b4:f1:5e:5c:c8:03:68:67:09:38:f0:
                    4a:21:d1:9f:9e:87:d5:47:da:e1:85:be:ae:9b:cc:
                    30:94:3c:10:db:89:13:07:bb:a7:0f:73:56:3b:7d:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E8:7F:26:59:89:50:7F:BC:41:01:CA:6A:E0:B1:75:1D:86:20:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/edcd34ea-61fc-335d-8042-7d76e81c59d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:cc:38:0b:b0:ce:f3:c0:39:dc:0b:49:69:fe:84:ac:ba:71:
         c2:f8:06:6b:78:1f:57:02:91:42:21:cb:59:a0:3b:2b:cc:13:
         2d:8b:f5:39:fa:99:3b:d3:d0:31:a1:c8:b9:7b:8d:ed:98:6f:
         57:d3:bd:88:16:fc:93:0b:4d:6c:2a:29:ac:e9:df:7f:d3:04:
         41:4c:1e:07:10:64:87:39:fe:74:3c:ed:11:ab:ed:24:f7:ba:
         bd:cb:34:6f:76:63:bc:f7:84:ba:cc:c6:08:95:43:0b:e7:5e:
         91:2f:19:76:89:d1:ff:74:a3:28:56:b0:9b:15:c9:4c:fd:e3:
         83:6e:ad:41:55:2d:a6:84:a1:31:83:4b:f3:e1:f8:69:11:82:
         8b:03:7b:2a:89:aa:86:94:73:01:69:cf:96:b6:59:ce:76:57:
         3d:47:5a:28:6f:5f:19:a5:74:db:4b:c4:2a:cc:a5:f0:e7:23:
         0f:11:ce:3b:79:bd:7e:3a:83:6b:1f:95:39:c1:19:96:85:bd:
         16:d7:4c:5a:5f:01:00:3e:32:e1:bf:b4:52:26:13:cf:af:9c:
         5b:2d:85:cd:f6:bb:99:e9:95:2e:21:48:8c:cb:41:be:d7:5f:
         38:3a:83:25:84:81:a0:3d:b9:75:2a:8f:39:94:e8:67:01:59:
         18:7d:5e:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VWxTVQMcZduQbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ODAyMzMzMGUtZThkZi00MjJjLWIyMzktMTg4NDQ5MDY2MGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolbvEh7ndU8xGsaLjyfzL3GOOcO3MUBj76/N
P6zrcQ08QNVfk6pieIFB8tw+dRVLfgiRBRIz/JBguv+H3ZPFQrrer1qtMTyWWPWi
VisMPledMNw+uP2fQ0muJqVAX9cBGZnt52JZAaOShd18j6uQQpbi6SltTnIQfUgd
eTy+NMyMVNQUUObiX4/V0/ZY9UIZdrpB74U/AED0u+b2FUK/5dFpBbQS7AzJhrrv
sInlTbTp9GjFoncazLwvj06oxH5kXVEK/2rkCNn8lkkkl6WFLQ8fuGgktPFeXMgD
aGcJOPBKIdGfnofVR9rhhb6um8wwlDwQ24kTB7unD3NWO33ghQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDofyZZiVB/vEEBymrgsXUdhiBbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWRjZDM0ZWEtNjFmYy0z
MzVkLTgwNDItN2Q3NmU4MWM1OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfMOAuwzvPAOdwLSWn+hKy6ccL4Bmt4H1cCkUIhy1mgOyvMEy2L9Tn6
mTvT0DGhyLl7je2Yb1fTvYgW/JMLTWwqKazp33/TBEFMHgcQZIc5/nQ87RGr7ST3
ur3LNG92Y7z3hLrMxgiVQwvnXpEvGXaJ0f90oyhWsJsVyUz944NurUFVLaaEoTGD
S/Ph+GkRgosDeyqJqoaUcwFpz5a2Wc52Vz1HWihvXxmldNtLxCrMpfDnIw8Rzjt5
vX46g2sflTnBGZaFvRbXTFpfAQA+MuG/tFImE8+vnFsthc32u5nplS4hSIzLQb7X
Xzg6gyWEgaA9uXUqjzmU6GcBWRh9Xnw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:21 2025 by rpki-client