Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f63e7b15-cc3e-3ad3-9655-84762be8e394.roa
File:                     f63e7b15-cc3e-3ad3-9655-84762be8e394.roa (raw, json)
Hash identifier:          6bGzpvIdizutlDKbjoTMilK4Gx633YpbYMpwGDwVcn8=
Subject key identifier:   60:89:0E:71:7C:02:3F:69:EA:70:A6:C5:B0:46:E5:20:50:11:A8:4B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC26F222D20C4F22CEE980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f63e7b15-cc3e-3ad3-9655-84762be8e394.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3356
IP address blocks:        130.174.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:26:f2:22:d2:0c:4f:22:ce:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=2e528afd-1945-4522-bf37-40a09378a040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:a3:50:53:b5:51:fa:1d:4b:31:86:64:23:
                    a8:ec:40:7d:3d:d6:df:19:5a:26:01:61:6e:18:a4:
                    e7:12:9f:61:30:83:6c:7c:11:83:61:da:7d:22:e6:
                    13:b3:1d:9d:79:68:fa:dd:3d:5f:b2:de:5a:29:6f:
                    ea:52:4b:f6:37:d9:1f:6b:71:cb:72:0a:13:7a:db:
                    cc:a7:e1:f0:f1:13:db:20:bb:6a:50:08:12:df:e6:
                    65:15:d5:14:8d:dd:19:c3:54:17:f0:24:55:06:ea:
                    aa:69:50:ee:30:d3:0b:3b:69:4f:f3:ad:b0:3e:e0:
                    d9:c1:11:b5:e2:f3:bf:15:29:f9:4b:f0:6d:c4:16:
                    b7:60:e8:4e:d1:e9:56:b2:8c:a1:46:c7:3a:de:06:
                    44:4f:86:60:aa:02:e6:ff:87:50:7f:dc:82:bd:b6:
                    d5:c6:32:4d:7b:d3:9c:ac:87:9c:c6:5d:0a:81:45:
                    73:fc:6f:f9:58:45:90:71:3e:e2:4f:cd:35:03:5b:
                    49:4d:38:14:33:e4:36:4e:e4:0d:72:53:cb:72:9f:
                    68:40:03:d0:6d:3e:a5:86:65:ea:90:da:87:40:63:
                    f7:13:a1:fa:f2:a7:75:9d:2a:64:7b:37:2d:4d:e9:
                    ef:21:24:1c:f7:78:f9:f4:31:86:4a:92:d1:17:f9:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:89:0E:71:7C:02:3F:69:EA:70:A6:C5:B0:46:E5:20:50:11:A8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f63e7b15-cc3e-3ad3-9655-84762be8e394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:b5:7f:28:a1:3a:fc:99:02:6d:d9:69:71:0a:88:93:2d:
         ae:0b:27:4c:17:d7:6d:06:09:2f:13:1a:0c:bb:93:f4:e7:7a:
         9b:c2:74:80:15:4c:cf:48:f4:1a:d8:17:7f:0c:15:96:51:3a:
         e9:39:28:ce:3a:e9:bf:96:e9:60:fa:23:fb:56:f8:0c:26:03:
         97:63:e1:d3:28:d7:71:4c:a2:6a:08:4d:14:b7:70:25:d0:27:
         ed:e8:d2:c1:c5:aa:29:93:48:db:e7:4b:7c:1a:77:08:74:5f:
         ff:31:be:c3:9f:e0:f3:83:e6:68:86:19:d1:8c:23:aa:cd:48:
         88:cf:c0:b4:26:64:77:18:de:a6:4d:73:81:08:5c:96:2e:53:
         ae:fa:7d:aa:01:75:19:47:1c:a7:4f:3a:6b:7d:69:c2:1f:69:
         bb:30:e3:db:61:f4:d1:39:08:57:2d:59:36:9f:3a:84:16:c0:
         f9:57:cc:de:ec:93:3a:77:9d:77:6b:e2:a9:90:60:8c:8e:76:
         33:59:97:7e:00:2c:24:b5:53:e3:61:e7:65:76:3a:cd:0b:75:
         5e:13:b2:bd:64:1b:20:8e:b2:5e:4a:d7:16:0a:c9:dd:5b:a9:
         6c:86:d8:fc:35:ef:5d:c3:6f:c9:28:f0:4f:c0:21:ee:fc:dc:
         41:4a:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:05 2025 by rpki-client