Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/861a6fc1-e8f9-3f57-a941-46c40bb24936.roa
File:                     861a6fc1-e8f9-3f57-a941-46c40bb24936.roa (raw, json)
Hash identifier:          DvOn25Ip09UOJM0zNVhZ3Ctmy0yDfCMSz1OXCeEST4E=
Subject key identifier:   1D:E4:55:AE:78:08:09:B2:F0:26:FE:20:0F:14:02:25:15:7E:22:8F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FC9A23A03F30F562AFC00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/861a6fc1-e8f9-3f57-a941-46c40bb24936.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     203
IP address blocks:        130.174.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c9:a2:3a:03:f3:0f:56:2a:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=f42075eb-2e8d-44f3-af60-6dada37c52a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:97:93:b3:5d:7a:37:b5:1d:04:b8:34:f9:
                    dc:b6:16:7c:97:cb:64:d1:06:da:e6:ec:b9:f1:ab:
                    47:be:aa:76:84:05:8a:f9:c7:39:df:64:be:24:f1:
                    99:23:ba:cf:2b:e1:e5:70:c5:e0:d7:a4:7d:88:c3:
                    1b:1e:47:44:4d:5f:0d:82:c2:e6:b3:77:00:aa:74:
                    6b:96:66:f0:be:76:a3:b4:35:53:e5:aa:0c:72:32:
                    49:1f:ae:f8:92:ed:74:f8:78:7f:5d:b6:e0:e0:6b:
                    60:b0:2e:31:bf:f6:d3:f3:9f:af:bf:8d:ed:c6:51:
                    3d:bc:40:cf:65:c7:b1:44:89:f6:df:6b:df:64:fb:
                    02:88:23:ee:8c:81:c8:42:23:74:ea:0e:b9:cb:0e:
                    c3:26:d6:3e:46:9c:e1:b2:66:3d:39:71:07:9a:1e:
                    2a:6b:6a:4b:54:c9:31:fa:1a:81:21:ed:47:c5:e3:
                    96:4d:b0:44:4f:45:f5:3a:c2:98:2e:45:32:18:b1:
                    43:5c:5a:06:d6:7a:be:4f:57:ab:c4:e8:d5:4e:3c:
                    21:3a:c9:c6:6f:76:6d:5e:56:60:67:10:c3:99:57:
                    97:5a:6a:37:bd:f9:40:f5:84:72:cb:2f:d6:96:de:
                    5a:75:3f:87:ea:96:c1:d8:39:11:37:e2:3b:47:94:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E4:55:AE:78:08:09:B2:F0:26:FE:20:0F:14:02:25:15:7E:22:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/861a6fc1-e8f9-3f57-a941-46c40bb24936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:1a:20:6f:60:f0:ba:89:78:b0:56:a8:ec:2f:11:61:4b:
         69:e8:dc:84:7e:0b:e6:97:b9:d3:ac:79:0a:60:f0:d5:f9:7e:
         ee:28:0d:66:8e:f4:47:c2:4b:2f:2a:65:c7:1d:c8:39:65:7c:
         ce:c1:fc:d1:8f:5a:5f:57:cd:8f:c4:3b:71:30:5e:d5:46:01:
         eb:03:79:6f:76:a7:fb:b8:7f:c0:12:7a:78:e9:bf:e8:5a:b3:
         35:e8:42:f1:84:d6:7c:d6:38:d3:92:0c:ad:64:d4:ba:cb:3c:
         fd:b2:a3:37:33:7a:de:d1:e4:e1:df:d1:2d:4e:86:7b:dc:b0:
         5d:10:1b:6f:cc:99:a0:d9:0f:5a:85:ea:22:bb:10:69:fb:d7:
         f4:b7:16:d4:50:f7:96:b0:f4:45:85:bb:6f:e3:09:fd:d8:86:
         99:fa:8d:04:4f:8e:c0:38:cd:1e:84:bb:fc:d1:c1:fe:35:54:
         66:e4:6b:54:90:36:32:07:7b:33:a0:12:bb:c6:9c:f8:b8:1e:
         30:f8:dd:16:82:2e:55:e6:fc:38:80:47:bb:3e:52:e7:61:ef:
         fc:11:1d:eb:04:16:b1:73:59:76:61:48:b7:30:a4:b1:e2:f0:
         95:5f:64:05:cb:65:3c:4d:13:88:6f:49:43:8b:46:cf:4a:90:
         dc:52:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:05:00 2025 by rpki-client