Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7eec2e51-3508-3079-8c63-ee163ca97eb6.roa
File:                     7eec2e51-3508-3079-8c63-ee163ca97eb6.roa (raw, json)
Hash identifier:          1djC6b+QCwjdih9opENJXMlq/DmpouhWwXDKpT5KYLc=
Subject key identifier:   7D:25:B8:E8:E4:84:A0:41:A1:D0:B8:45:37:B0:9D:6E:D0:92:F6:D0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849B149E74C1C2039F8D6FC5240
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7eec2e51-3508-3079-8c63-ee163ca97eb6.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     3360
IP address blocks:        130.174.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:e7:4c:1c:20:39:f8:d6:fc:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=45e41781-c4dd-4f0f-9624-813d97298352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:9d:2c:44:79:0d:d4:d4:de:fd:8f:b8:cd:
                    06:03:ec:2a:64:80:fc:ae:0a:f8:ba:aa:dd:77:0b:
                    0a:fa:23:42:b7:44:c5:eb:78:8e:1a:d1:09:b6:d2:
                    3b:de:a1:5f:8f:5e:55:29:40:1b:75:97:9f:97:d9:
                    46:e7:cf:36:18:33:9d:03:04:cf:2b:9e:b6:43:da:
                    ba:61:fb:c6:ac:f0:ad:42:f1:2f:f2:85:0d:72:61:
                    e3:a5:cd:87:f2:0e:37:8a:a6:e5:74:40:d1:53:fc:
                    aa:9d:ba:ea:2d:20:25:7e:fc:f9:a5:d5:1f:17:61:
                    f0:9b:ed:27:ea:7f:89:35:e9:b7:0a:a5:51:3e:62:
                    b8:89:7d:7a:d6:5c:5b:76:cc:f6:9a:47:16:9f:18:
                    fe:f0:96:2c:f2:ea:14:75:a6:52:18:51:89:fb:83:
                    b8:36:33:5f:c3:46:bd:c9:d0:2a:1f:3b:b9:b0:d4:
                    43:35:3e:41:19:b9:22:b9:0e:16:56:f1:9a:e7:dc:
                    b0:d6:1f:9b:4f:8d:b7:5f:5c:d6:49:2d:11:11:48:
                    a3:64:e2:63:31:11:0e:1b:3d:a2:26:e0:ff:f0:a5:
                    52:f1:1e:eb:dc:78:78:0a:b0:ef:a6:c4:76:32:13:
                    d3:f2:40:9c:59:ef:20:e6:74:4a:7e:f2:48:56:70:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:B8:E8:E4:84:A0:41:A1:D0:B8:45:37:B0:9D:6E:D0:92:F6:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7eec2e51-3508-3079-8c63-ee163ca97eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:0e:55:9c:7c:d6:52:65:c0:b6:b7:aa:7c:aa:24:f4:69:
         0b:7c:c8:44:12:ba:82:b3:11:a2:da:c8:6f:73:03:9d:fa:59:
         39:96:28:3c:1e:0a:fb:0f:18:32:1c:79:86:76:de:a5:fc:6f:
         a3:73:47:9e:6b:57:95:3e:23:a7:b7:0b:2c:b9:36:c6:5f:20:
         ab:34:e5:af:d7:88:10:d5:ba:82:3a:ec:2b:d6:4a:61:a5:46:
         f7:6e:b6:65:7c:55:1d:45:c8:a4:e2:58:4f:01:a3:86:45:01:
         d8:64:33:65:77:a7:b3:df:68:02:8a:d6:93:f1:3d:92:29:78:
         27:32:a5:fc:93:ad:f5:e3:b5:59:64:19:78:75:13:8a:c9:12:
         78:73:23:15:17:f4:de:62:26:ca:e1:26:a1:1d:65:a7:51:53:
         ae:4d:db:dd:e8:df:c5:1f:ef:a2:c5:08:c4:fc:b4:67:89:93:
         3b:6b:52:97:16:67:15:45:38:da:2c:90:63:91:b2:78:88:d7:
         ee:75:eb:14:c5:ec:01:c6:4b:05:08:c7:36:64:03:4b:05:fc:
         26:21:90:f6:09:19:87:d5:b3:8d:0f:f7:9a:30:92:02:30:02:
         c9:da:92:f8:f4:82:79:d6:d5:57:53:f6:2b:02:0c:b0:94:d0:
         dc:4e:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:08:44 2025 by rpki-client