Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4e3ac08-2cb0-3b5d-978e-5d200cf32527.roa
File:                     f4e3ac08-2cb0-3b5d-978e-5d200cf32527.roa (raw, json)
Hash identifier:          Nuqb3AIt62Xc84DjxrIFGdZ32SwJMWM83DFldbxDFiM=
Subject key identifier:   FE:E3:07:44:B6:67:99:E1:E5:9C:1F:8C:B9:20:E1:7B:AE:61:F2:52
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0D73EA038B0AB64892680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4e3ac08-2cb0-3b5d-978e-5d200cf32527.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3356
IP address blocks:        130.174.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:d7:3e:a0:38:b0:ab:64:89:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=9fa46ac8-8094-4d8b-9899-a98519681afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:09:67:65:90:f1:c9:ff:b1:f5:ee:ff:44:
                    0a:8c:e5:7b:b9:e4:9b:ee:56:0d:93:ba:ed:43:eb:
                    95:2c:cf:04:33:9e:b5:c3:21:a4:5f:ef:48:da:3d:
                    ca:80:81:91:c6:89:5a:ba:78:c6:4d:cc:66:d4:a2:
                    e3:1f:31:65:de:1a:71:64:4b:7a:72:ba:b4:ed:ba:
                    0a:b8:83:24:7f:df:4c:1f:06:e3:c0:37:28:9b:73:
                    6b:22:28:82:c8:3d:5b:00:27:5b:95:36:99:6d:03:
                    45:f8:86:aa:15:c2:25:ae:a8:8e:a1:59:b4:e2:2d:
                    e3:cb:db:5e:8b:4e:46:ad:63:51:27:58:75:e0:a2:
                    23:a3:c7:ae:06:bc:eb:93:e4:5b:fb:f9:9b:24:7b:
                    a6:e1:37:20:04:1e:ee:4b:60:26:a9:56:f8:fb:83:
                    a6:a1:7c:ee:96:e7:78:63:3a:48:9f:35:be:72:8c:
                    dd:04:f9:31:72:e4:60:82:a9:9f:81:1c:5d:46:6b:
                    25:72:96:1f:80:c7:00:74:3a:b8:d1:b2:2c:ce:36:
                    d9:d1:56:70:84:23:d9:84:de:f6:11:30:33:43:9a:
                    7c:8e:0e:18:c1:e1:af:d9:1f:ed:93:48:aa:af:a5:
                    56:0e:0c:1d:d6:3c:5b:df:48:41:fb:da:f3:92:af:
                    3b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E3:07:44:B6:67:99:E1:E5:9C:1F:8C:B9:20:E1:7B:AE:61:F2:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4e3ac08-2cb0-3b5d-978e-5d200cf32527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:27:da:ce:eb:1d:ef:2e:66:00:54:f1:96:74:2d:c7:30:56:
         5f:6d:34:61:5a:d0:59:7c:27:c7:94:db:26:7a:61:1b:56:f7:
         b9:19:f4:6c:81:41:0d:54:a5:de:af:80:1b:04:91:0c:6b:8a:
         ff:49:63:19:db:cb:d6:1d:6f:cd:ae:dd:0f:e8:84:e9:46:32:
         ca:d9:28:10:1e:2f:cd:be:88:16:b8:b3:2c:e8:d8:d7:e3:91:
         40:95:ed:f3:d4:bb:f3:5b:e2:fa:77:9d:83:38:e3:8c:05:39:
         10:6d:80:b4:75:4d:07:1e:4e:fd:ca:c9:a9:fc:44:e2:73:e1:
         cf:51:a1:b5:cb:fa:d7:75:6f:29:c2:96:cd:dc:b9:a8:4e:75:
         46:b6:20:ae:93:3a:76:c3:39:9d:6f:10:ca:8e:78:3f:b0:4a:
         0f:28:83:b9:f1:56:dc:bf:8d:6c:99:47:87:c8:d2:d4:c8:2a:
         1f:58:85:66:70:83:a3:ac:32:29:55:9b:8c:b2:a4:f6:e5:e4:
         91:94:9d:61:1e:63:ca:e1:3d:54:83:82:43:80:d6:e3:7a:93:
         e9:7c:05:b4:f0:84:9f:4d:56:9c:06:cd:d3:96:04:5a:de:cf:
         e6:0a:b2:40:a6:8a:4c:ca:37:d4:2e:f0:07:8d:9e:a0:e0:c8:
         22:f1:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:49 2024 by rpki-client on console-ams.rpki-client.org