Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a1815e0-ac44-3f67-b773-28a2250fbced.roa
File:                     0a1815e0-ac44-3f67-b773-28a2250fbced.roa (raw, json)
Hash identifier:          EYPaYFKha1l78XAtZZcBgbp6fyuUu2fXotfRwXA9YRY=
Subject key identifier:   03:94:EE:A3:69:0D:98:EF:15:83:1A:C0:DB:51:A7:AF:A2:8A:EB:32
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E53766B60FF91CEF278680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a1815e0-ac44-3f67-b773-28a2250fbced.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     203
IP address blocks:        130.174.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:37:66:b6:0f:f9:1c:ef:27:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=2d06680c-98ac-4572-a7d9-42ac5fdb7b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:01:18:46:cf:74:79:80:fb:15:8f:84:28:
                    a8:12:c9:55:b0:c4:9f:6d:53:d0:9b:35:e6:94:dd:
                    4a:49:2c:3c:9a:39:80:49:4a:9e:c7:da:10:65:05:
                    79:5b:53:4b:d5:ec:63:98:57:15:4e:6f:a9:a8:7a:
                    59:49:6a:01:23:a8:d4:fc:aa:4e:fa:08:b3:09:01:
                    1b:e2:af:a5:70:50:5b:77:54:ab:66:21:fa:9f:24:
                    ea:53:18:5e:e7:3d:f7:99:c6:02:52:50:f3:d1:67:
                    52:ec:47:cf:12:92:98:95:d5:ee:30:22:da:37:98:
                    d6:10:a7:44:95:c8:93:ea:9a:1b:ec:8e:ab:35:95:
                    7c:23:ca:7f:c3:e7:8c:3d:8f:50:0f:3e:22:dc:d1:
                    45:96:57:1a:39:84:56:ce:a2:44:e7:ee:4f:73:d2:
                    a5:aa:11:82:73:6b:16:20:dc:6f:ea:31:88:7e:ef:
                    11:48:27:d6:30:45:d5:83:3c:14:1e:bd:33:f0:61:
                    c1:78:f2:fa:60:66:40:b9:da:0a:99:0d:31:46:63:
                    96:87:25:46:7a:7f:89:b3:e1:e5:a4:08:62:37:d6:
                    36:04:82:72:07:ea:99:58:6e:8c:72:3f:38:1a:a0:
                    78:b7:95:b3:25:a4:5a:69:ed:42:60:66:d4:e8:74:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:94:EE:A3:69:0D:98:EF:15:83:1A:C0:DB:51:A7:AF:A2:8A:EB:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a1815e0-ac44-3f67-b773-28a2250fbced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:dc:a1:b9:cd:8d:ee:c2:a7:1e:ac:b3:6e:3c:39:ca:a2:55:
         fd:d2:30:6a:fc:f0:32:99:e0:2f:bc:22:d3:00:aa:a0:2d:f5:
         cc:cc:cd:49:96:27:a8:ac:20:0d:ac:04:1e:1d:5c:76:d7:4e:
         c5:42:65:33:ae:4e:ce:6d:b1:0b:17:a4:a9:ff:1e:6f:98:02:
         66:88:0e:36:aa:7d:aa:e8:26:7b:df:21:d2:32:0f:9e:d1:eb:
         9e:44:c2:60:75:df:59:1c:3f:62:5c:7d:26:96:1e:9a:21:01:
         45:79:3d:44:57:9c:31:55:f2:49:c2:72:34:1e:3a:47:c9:31:
         2a:e1:59:97:9d:a4:1b:c2:40:47:08:c1:fd:eb:4c:27:ab:8f:
         e5:27:be:90:07:3f:cf:98:29:ff:ee:2c:f5:83:99:62:a4:a7:
         20:1e:2e:72:90:5d:d8:69:57:3e:be:2a:59:d2:77:5b:c0:ce:
         85:29:26:96:bc:31:39:1f:19:70:17:7e:28:1b:00:9c:2d:45:
         68:85:6b:8e:fc:c7:e7:51:5d:d9:7d:06:48:51:d5:9d:99:65:
         d1:ab:ab:ad:6f:93:32:e3:c2:a8:bc:32:95:10:81:e3:91:8b:
         8c:b4:f5:64:c5:fe:9c:07:60:2b:94:48:c2:4b:55:97:27:4c:
         50:55:5a:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5Tdmtg/5HO8nhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk
MmQwNjY4MGMtOThhYy00NTcyLWE3ZDktNDJhYzVmZGI3YjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwcBGEbPdHmA+xWPhCioEslVsMSfbVPQmzXm
lN1KSSw8mjmASUqex9oQZQV5W1NL1exjmFcVTm+pqHpZSWoBI6jU/KpO+gizCQEb
4q+lcFBbd1SrZiH6nyTqUxhe5z33mcYCUlDz0WdS7EfPEpKYldXuMCLaN5jWEKdE
lciT6pob7I6rNZV8I8p/w+eMPY9QDz4i3NFFllcaOYRWzqJE5+5Pc9KlqhGCc2sW
INxv6jGIfu8RSCfWMEXVgzwUHr0z8GHBePL6YGZAudoKmQ0xRmOWhyVGen+Js+Hl
pAhiN9Y2BIJyB+qZWG6Mcj84GqB4t5WzJaRaae1CYGbU6HS/sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOU7qNpDZjvFYMawNtRp6+iiusyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGExODE1ZTAtYWM0NC0z
ZjY3LWI3NzMtMjhhMjI1MGZiY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/cobnNje7Cpx6ss248OcqiVf3SMGr88DKZ4C+8ItMAqqAt9czMzUmW
J6isIA2sBB4dXHbXTsVCZTOuTs5tsQsXpKn/Hm+YAmaIDjaqfaroJnvfIdIyD57R
655EwmB131kcP2JcfSaWHpohAUV5PURXnDFV8knCcjQeOkfJMSrhWZedpBvCQEcI
wf3rTCerj+UnvpAHP8+YKf/uLPWDmWKkpyAeLnKQXdhpVz6+KlnSd1vAzoUpJpa8
MTkfGXAXfigbAJwtRWiFa478x+dRXdl9BkhR1Z2ZZdGrq61vkzLjwqi8MpUQgeOR
i4y09WTF/pwHYCuUSMJLVZcnTFBVWmw=
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:05:03 2025 by rpki-client