Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54ae347e-ff5e-3d65-8047-15869a18e7be.roa
File:                     54ae347e-ff5e-3d65-8047-15869a18e7be.roa (raw, json)
Hash identifier:          V5cQqxTUV6nzvY1XPvS3F33gcxITnZ9lgFMbrJ4IesU=
Subject key identifier:   35:B9:64:F7:33:59:E7:FD:AC:B5:DA:50:A4:0B:C2:99:D4:BD:47:74
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E5370F67C148E9D063C800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54ae347e-ff5e-3d65-8047-15869a18e7be.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     3360
IP address blocks:        130.174.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:37:0f:67:c1:48:e9:d0:63:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=c0660ea0-f843-4aa9-a332-9dab8b1827d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:f8:33:80:5f:89:47:e2:1f:c6:3e:30:d4:
                    70:8a:9f:1d:87:12:d7:00:09:1f:77:7c:3f:a2:af:
                    51:5c:2f:5b:87:10:79:70:57:8a:f4:76:75:54:86:
                    9f:6f:c6:a2:cc:c7:52:39:25:de:2c:a7:5d:7d:7d:
                    3d:87:d4:40:2d:06:9a:53:52:2a:da:81:eb:fc:46:
                    a0:ce:a1:1a:a7:66:17:d8:5f:11:dd:d0:7e:5f:14:
                    2f:bf:cb:72:0f:a0:97:db:4f:54:d4:2c:78:06:56:
                    c4:fc:83:83:a7:72:84:3f:5f:ce:d8:a9:82:19:9a:
                    47:06:7e:a5:0b:05:a2:c8:ae:30:aa:83:f9:91:3a:
                    b0:53:c0:fd:6b:d5:ae:2c:c8:1d:fc:6e:d5:67:da:
                    b8:b0:58:13:ec:3e:7e:bd:5c:31:e2:93:50:d8:5e:
                    79:2e:df:83:96:31:41:a2:b2:f6:ab:8b:36:0b:ac:
                    53:85:a4:3e:f3:0d:11:79:8e:fe:b4:88:9b:a6:e8:
                    38:0f:61:a3:fc:50:c1:57:3e:ae:d0:4b:9d:aa:e0:
                    51:80:28:6a:c4:01:9e:35:01:48:b1:d5:21:53:ed:
                    25:e8:6f:32:d5:ff:de:1c:b5:25:30:93:6b:af:c7:
                    86:6c:04:aa:8e:aa:2a:58:4d:3f:95:e0:0e:08:91:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:64:F7:33:59:E7:FD:AC:B5:DA:50:A4:0B:C2:99:D4:BD:47:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54ae347e-ff5e-3d65-8047-15869a18e7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:d4:58:c2:78:5f:fc:fc:41:08:74:d3:a0:2e:cf:b3:fb:
         76:68:12:ee:ec:9f:6e:18:05:59:df:d1:cc:14:56:a3:f9:e4:
         68:9e:60:d1:cb:57:3a:c7:5e:da:3a:11:f7:16:9b:f2:17:4a:
         9e:00:42:ec:3f:dd:39:4d:74:80:8d:c1:4e:c6:cd:20:6e:96:
         c5:e0:63:95:be:ad:76:df:11:fb:e4:7b:65:3a:d4:fb:ab:9b:
         e0:8b:10:3b:28:d1:69:ac:f9:65:b0:48:99:56:6e:70:59:00:
         7c:fd:6c:c0:9e:35:b0:62:30:3b:29:26:fe:8f:e4:ad:25:e8:
         30:c5:bd:12:02:53:e3:ac:97:d1:cc:c3:70:ba:dc:8c:02:29:
         1e:04:23:94:11:f8:d5:df:c2:f8:51:d8:ed:f2:d3:72:f4:cd:
         e6:ab:f4:94:00:57:0e:2c:83:11:01:e1:ca:3b:4f:8f:06:7d:
         bf:ce:22:80:4c:b7:1e:e9:9b:d5:5e:7f:e0:39:4d:11:c5:dd:
         ca:fa:df:e7:d2:10:44:29:ea:92:c3:8f:ae:9f:db:02:96:7b:
         96:9f:38:86:da:29:a0:06:37:46:87:c7:03:a5:c7:c9:1f:df:
         bf:08:3c:5e:ad:76:ca:b1:f5:1f:dd:05:59:5a:f5:4b:46:59:
         74:70:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:02:12 2025 by rpki-client