Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/154dca8b-a25b-3ea3-b4d4-84aaa518e1c7.roa
File:                     154dca8b-a25b-3ea3-b4d4-84aaa518e1c7.roa (raw, json)
Hash identifier:          hKFUiB6UrQ8Qo0Z0eSFqKDt3U8kENPUsvR8EM7TICeU=
Subject key identifier:   AA:F4:7E:21:4A:17:F2:03:6A:61:B1:20:E1:41:27:0B:82:8D:C4:B7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FCB946786D19431DC8F00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/154dca8b-a25b-3ea3-b4d4-84aaa518e1c7.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        130.174.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:cb:94:67:86:d1:94:31:dc:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=20ca9c0d-a0d4-423b-acf1-d6dd2c630cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b8:17:32:72:93:78:73:ad:b3:6e:32:7d:07:
                    24:d0:30:9f:0c:52:35:b3:4d:a6:f1:5b:c9:1c:cd:
                    3a:f3:bc:27:db:16:2c:95:c5:b4:b2:f8:97:71:74:
                    8f:25:fa:2e:54:19:9e:6a:da:cb:66:89:5d:9e:e7:
                    33:71:65:01:36:45:f2:cd:20:de:07:68:0f:bd:fe:
                    d8:c1:0b:c7:2b:69:27:21:94:dd:c1:5f:11:12:42:
                    a9:a6:47:28:f3:85:92:3e:fb:10:16:c7:b4:90:70:
                    5e:c7:03:db:18:17:75:42:fe:f0:90:aa:f6:46:29:
                    aa:2a:a4:7d:da:80:c3:14:61:4a:49:70:c7:82:d6:
                    c5:b0:df:13:21:d6:60:3c:de:d1:12:40:47:6c:74:
                    ad:f0:96:fe:82:ee:55:02:d0:e5:fb:f7:b2:57:67:
                    1c:84:d8:4f:ad:c2:df:42:c7:8a:b2:4c:bb:66:fc:
                    8b:ad:84:8b:82:27:9b:60:f6:6f:c6:9e:a4:fd:29:
                    19:57:95:2c:eb:92:f6:ea:1d:22:65:ea:6a:f0:87:
                    b1:72:73:3d:ff:fe:21:37:a1:2a:ae:c5:bd:bb:96:
                    c2:78:cf:36:b3:49:15:46:26:55:2f:9a:da:ef:69:
                    e6:0b:4a:e4:51:04:f4:49:4c:95:52:93:83:55:10:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F4:7E:21:4A:17:F2:03:6A:61:B1:20:E1:41:27:0B:82:8D:C4:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/154dca8b-a25b-3ea3-b4d4-84aaa518e1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:5d:44:f4:39:c4:9e:35:94:b0:f6:d9:24:d4:25:ed:34:df:
         39:85:40:c6:49:f4:91:04:ec:81:d2:36:bf:cc:91:cd:b0:79:
         de:7e:fd:41:c6:58:5c:03:92:35:bf:d7:1c:cf:ec:34:a7:70:
         a6:0a:f1:05:22:ac:af:f6:96:e2:05:79:e8:3e:7e:2c:3a:19:
         14:6c:68:9d:88:93:58:40:0c:90:ca:89:bb:d7:7e:29:ef:d5:
         af:5c:fa:94:b6:ac:43:c1:4a:a7:77:7f:65:16:05:62:8c:4e:
         c7:84:ee:50:63:d3:ae:41:98:b4:56:3b:2e:a7:f6:2b:2b:d8:
         27:c7:9f:15:93:40:7f:ff:59:93:04:5b:ec:7d:86:a8:75:ea:
         5f:1e:5f:6f:f3:77:b2:8b:14:82:74:14:4f:f7:30:ca:86:1c:
         56:9b:fa:42:ac:00:5c:02:df:dc:54:ec:ce:dc:42:b7:39:30:
         f2:94:f7:91:e1:24:10:51:50:b0:d3:df:cd:d2:5b:c6:fc:a3:
         e2:96:f3:fa:d2:9f:d8:0b:70:8a:dc:66:b7:56:3f:2a:2e:88:
         5e:27:43:1f:21:99:3f:b8:e4:a6:a7:f2:ec:30:77:13:17:75:
         62:c6:7b:09:fd:36:cd:fa:79:e4:cd:f0:6c:0b:98:35:46:ae:
         57:a2:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:02:42 2025 by rpki-client