Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95a0cdb7-d09f-3ea3-9c3d-82320ad222f6.roa
File:                     95a0cdb7-d09f-3ea3-9c3d-82320ad222f6.roa (raw, json)
Hash identifier:          f53B0q/yORPF7zbrG23Lfxva+UuOrA9aFpCrtDy9XxQ=
Subject key identifier:   00:39:8D:24:AD:7B:E9:48:6B:BF:4C:90:3F:6E:5B:A8:C3:34:58:8E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FC5D2F029A8E651DD3B60
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95a0cdb7-d09f-3ea3-9c3d-82320ad222f6.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        130.174.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c5:d2:f0:29:a8:e6:51:dd:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e24ba75c-e549-471e-8b56-1d3049ab45ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:19:3d:b1:96:94:1b:00:0e:4c:0e:25:4c:
                    f2:9b:5b:e3:13:a5:c4:95:a4:67:fd:ba:fd:5d:21:
                    65:3d:da:ba:8b:13:1f:0b:bf:98:13:53:9b:d5:a5:
                    26:02:79:96:ca:c3:74:ec:66:6c:8c:3a:b8:9b:d3:
                    a7:44:48:91:21:4a:ff:d4:3b:d9:ea:b2:1a:8f:00:
                    15:4a:b1:37:c0:30:56:cb:15:71:44:e9:49:ae:c0:
                    a1:86:97:c5:1d:a3:57:c6:57:7b:a5:6c:3a:bb:1e:
                    8e:92:9e:2f:68:a2:58:25:3b:63:e2:23:3f:3c:4b:
                    ba:88:4b:14:1c:e5:2e:c1:fa:9b:84:3d:db:5c:88:
                    0b:7b:0c:f6:22:f1:3b:06:63:60:c5:16:f0:0d:5d:
                    a0:ce:58:90:20:ee:b6:6a:9e:b4:8a:bc:58:2e:f9:
                    6f:a5:6b:04:06:5b:b9:b7:ed:43:76:99:10:67:08:
                    1e:70:95:b1:5e:04:a0:76:a9:4a:1d:16:36:96:f9:
                    4e:d7:88:91:f2:6c:a5:ff:81:92:4d:8e:2b:ec:5d:
                    e0:0c:6b:82:36:95:34:fb:26:56:ff:5c:b3:f9:27:
                    70:88:2e:a1:82:05:e1:4a:92:0c:84:69:2d:cd:98:
                    85:f4:7a:b5:ac:db:3a:91:d2:63:db:15:6d:f6:5a:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:39:8D:24:AD:7B:E9:48:6B:BF:4C:90:3F:6E:5B:A8:C3:34:58:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95a0cdb7-d09f-3ea3-9c3d-82320ad222f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:02:cf:a9:79:e9:e2:09:c5:6c:8b:85:4b:eb:b4:f5:51:dc:
         aa:a5:30:83:f5:79:f6:e8:28:d9:3e:66:be:32:43:fa:61:1c:
         38:d6:66:af:ca:b2:dc:78:65:4e:bf:03:30:a1:c6:ee:65:ac:
         cd:70:2f:71:0b:a5:a8:e1:ed:5c:d4:22:03:2d:f3:3f:67:8f:
         89:26:8b:58:47:91:65:50:fa:da:0e:f3:3f:ac:87:7b:18:be:
         ff:5f:f0:2d:e4:de:2b:ff:b9:1f:9e:a7:b9:1b:87:79:da:a3:
         ba:1b:81:1d:b6:25:6a:1a:ec:86:b6:9b:70:29:fe:8d:13:8c:
         3f:a2:70:fa:9b:9a:e0:eb:5e:c9:ee:f4:e1:1a:c4:bc:dd:8a:
         18:8c:ca:59:67:7b:22:72:71:6b:ff:c0:05:97:bf:0d:61:ea:
         f9:29:3c:96:ed:14:e4:c9:b4:5b:2c:37:d8:3f:76:83:68:12:
         9a:4a:d3:99:ab:11:55:8d:b5:c0:0f:dd:f6:4f:f1:6c:ea:f8:
         dc:39:b6:23:77:97:01:7f:54:3f:41:35:5d:fa:e0:49:4a:03:
         3e:5d:48:4d:99:f6:e7:ec:dc:19:bb:3e:99:65:e9:67:f9:2e:
         8d:f3:fb:56:c0:9f:11:33:e0:0c:ac:99:55:aa:ec:86:b8:18:
         9f:c2:c2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:47:23 2025 by rpki-client