Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa
File:                     665189d6-ce51-375d-9fcd-5cdadec449ec.roa (raw, json)
Hash identifier:          dhLHqYKqlU9MToDWnI8BfN/8dT+xVOT7GYkXDfI1O8M=
Subject key identifier:   BB:13:5E:C7:8E:1B:B1:C4:7B:E6:63:F8:E3:F3:0C:11:6E:7E:52:A0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FC6BC9EDC3D40ED54D800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        130.174.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c6:bc:9e:dc:3d:40:ed:54:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=1cf75bf5-4f02-47c2-9b9b-ec3548b7e872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:25:0e:d1:97:b3:46:8a:58:ef:3f:fa:2b:
                    92:11:61:df:e1:99:fb:00:16:0a:fe:ed:66:27:d2:
                    2d:b1:14:30:3c:c0:de:44:63:3e:fe:f4:17:7e:95:
                    16:34:d4:c4:ec:e4:ee:c2:09:42:b9:8b:1c:03:ab:
                    6c:d5:76:f3:90:7b:4f:b7:47:b7:8c:50:25:37:67:
                    3c:dc:2a:d8:c2:a7:00:c5:71:06:d1:d0:7f:a0:d4:
                    3d:ce:0a:48:39:c4:be:d2:9f:6d:f3:98:cb:f5:06:
                    f3:5f:07:d7:4b:1e:c7:19:ce:d4:25:7a:e1:7d:57:
                    01:35:30:d4:f7:db:e0:7d:59:c5:02:ff:44:f4:77:
                    e3:bd:22:f3:c1:da:76:6f:46:13:40:06:24:1b:c1:
                    b7:c5:ee:12:05:ef:87:5a:54:c2:3e:5e:87:4a:8d:
                    4d:57:9a:71:55:c8:cc:07:79:3b:aa:9c:06:fe:19:
                    ed:80:7e:4e:2d:30:2c:df:7f:0e:cf:80:e1:42:d8:
                    75:0d:d2:0e:e8:66:36:8f:85:46:54:28:58:43:d0:
                    8a:f4:75:ba:fc:da:99:8e:09:96:ff:42:f8:b8:6a:
                    73:1f:ac:5a:b9:34:f3:92:82:b0:4e:c8:dd:f4:6a:
                    11:a3:2b:fa:a7:31:e1:1e:55:0e:43:d6:01:d2:d4:
                    4f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:13:5E:C7:8E:1B:B1:C4:7B:E6:63:F8:E3:F3:0C:11:6E:7E:52:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:22:3e:85:d3:d6:2d:85:4a:9f:74:ab:0f:30:81:4f:ce:
         93:1a:b1:e3:b2:e6:5a:57:7b:34:e7:d4:72:64:87:2c:8d:fa:
         f8:08:04:4c:31:f8:03:d4:1f:76:84:9d:99:b8:19:57:51:d9:
         43:b0:1c:97:32:e2:d0:5c:b9:b5:01:6c:ba:1b:c8:94:24:7a:
         3b:1d:0a:a0:60:dd:09:ba:bc:dd:12:1e:c3:86:09:0d:fa:b0:
         63:e6:99:da:db:da:28:33:89:fe:cf:16:38:08:f1:f8:26:16:
         d7:7c:ef:e4:35:04:7c:66:1e:26:7f:94:04:04:f0:17:13:f0:
         e7:fb:73:35:1c:2d:4a:74:47:ad:be:67:25:e7:c5:29:49:64:
         28:87:61:78:24:75:fd:cb:9e:2d:a0:dc:74:69:72:a6:c8:a6:
         b1:81:03:78:db:d5:ae:4f:f4:e0:ef:01:57:43:eb:a7:8f:04:
         a2:8b:b3:cf:a5:de:da:1b:f7:e0:56:00:68:b2:c4:c1:d6:71:
         d0:c5:01:66:d1:ce:5d:55:12:dd:b0:e0:f7:47:14:5e:a5:04:
         fe:99:69:c3:5b:4e:02:e8:c0:9d:10:8c:8b:74:bd:2a:0f:92:
         7a:57:77:91:5d:80:13:07:02:ed:99:1d:87:09:ec:7f:8e:a1:
         14:c4:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:32:39 2025 by rpki-client