Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c94c604e-699a-3c78-8835-6a4e60954ebe.roa
File:                     c94c604e-699a-3c78-8835-6a4e60954ebe.roa (raw, json)
Hash identifier:          DKqRLdDgkHVoK/pteXEbICu/VSOIN5dNFnXjHglP3Ys=
Subject key identifier:   70:27:59:B4:75:D3:11:13:10:F5:74:B7:7F:FF:AB:21:ED:BA:0A:8D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FBE5EC3E26982E0949980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c94c604e-699a-3c78-8835-6a4e60954ebe.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        130.174.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:be:5e:c3:e2:69:82:e0:94:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=153da800-01a0-4983-b5a0-dace731692fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:a8:e7:c7:91:fa:9b:07:b5:66:4d:89:64:
                    c4:2c:26:74:d6:cf:3e:80:c9:c3:68:77:4c:2f:1e:
                    a8:7c:b4:0d:ec:42:0d:08:aa:f4:be:3c:c9:93:14:
                    10:ce:bb:2b:d1:71:3d:e6:fb:f5:bd:a6:67:f6:c9:
                    ae:19:80:9f:89:61:75:e2:9d:33:f5:5e:3c:39:c5:
                    fd:de:28:3e:be:30:7a:95:4d:da:54:e2:60:89:f6:
                    c2:84:c3:9a:07:94:9a:11:87:ca:93:55:21:60:e4:
                    bd:15:e6:e6:e7:55:1b:b3:16:fc:63:4a:69:fc:8d:
                    ba:b7:f4:b6:6e:21:e5:48:48:5e:f0:1a:27:59:26:
                    c7:6e:24:5e:ad:b0:c1:4d:06:d4:37:88:c9:8c:20:
                    21:9c:6b:ad:74:ad:d6:a1:1a:7b:6d:da:3c:95:9d:
                    33:da:76:64:ca:6d:30:a4:f1:a0:3d:8f:7b:80:b2:
                    e9:b9:2e:1b:b3:a5:8a:82:e3:c3:2e:be:48:31:d1:
                    6b:fa:22:46:86:37:f8:4a:47:92:7b:53:cd:6a:a3:
                    5c:b0:ba:8c:19:54:d1:99:dd:76:38:4f:e6:20:86:
                    8a:33:27:e8:08:0a:50:c8:d8:95:c6:19:f7:6a:67:
                    de:2d:ae:13:58:06:c7:85:46:76:a6:0b:84:bd:03:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:27:59:B4:75:D3:11:13:10:F5:74:B7:7F:FF:AB:21:ED:BA:0A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c94c604e-699a-3c78-8835-6a4e60954ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:25:80:59:72:c3:09:49:e7:28:b6:4c:63:bb:8a:69:50:3d:
         4f:ac:52:41:00:67:9b:cb:a6:3d:76:95:08:e2:ec:f2:1a:cb:
         1e:70:79:57:45:d7:a6:1f:43:b3:b3:29:d5:50:89:0e:3f:45:
         d3:b7:83:23:6b:eb:f5:8e:23:ee:d3:fe:2f:4e:de:12:f0:37:
         08:35:8e:e3:94:c4:e0:72:87:b6:a0:1c:6f:3b:2d:96:21:7b:
         83:86:d5:a5:77:eb:d1:74:b1:e6:21:bc:0c:83:60:b1:11:38:
         b4:ca:70:d6:4c:8d:e1:c4:de:00:04:1c:87:77:91:82:10:f2:
         70:1b:07:9b:d5:fa:47:eb:ee:7f:4d:28:4f:6f:15:99:e7:79:
         27:47:2a:67:ce:dd:d3:c2:ba:14:55:92:7a:7c:40:b7:fb:c8:
         fb:c4:23:b3:67:08:d2:46:92:3c:5b:23:9c:e2:c2:bc:4b:cb:
         d3:d9:4b:74:6d:7a:e6:dc:4d:e5:9f:2c:62:87:21:cb:e5:82:
         0e:b2:9f:bd:79:de:21:09:eb:ec:2d:ba:60:bd:e4:39:71:47:
         42:b1:eb:0a:48:b4:53:e2:73:ec:57:3c:51:0e:b6:58:a4:3d:
         af:7e:b0:ef:50:72:d6:0e:b5:0b:d9:8b:60:50:f2:ac:f5:86:
         20:de:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:01:18 2025 by rpki-client