Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fccc2d9a-e0e4-398b-8660-c027d0e50e9c.roa
File:                     fccc2d9a-e0e4-398b-8660-c027d0e50e9c.roa (raw, json)
Hash identifier:          qxDUx8kNURYPnu3DB4Y/AeiNvCB05Jhlo6KFmHC9ECo=
Subject key identifier:   85:F2:86:70:12:23:2D:2A:AE:3D:FE:1A:94:47:63:83:FC:19:CD:08
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FB98080372C845015B500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fccc2d9a-e0e4-398b-8660-c027d0e50e9c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     203
IP address blocks:        130.174.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b9:80:80:37:2c:84:50:15:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=173d7799-fe67-4fae-a1cb-c3ed9eb556c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:82:c6:4f:bb:2d:7d:60:fa:e9:a8:95:a9:
                    13:77:69:64:84:0a:35:05:c1:a9:02:49:3d:94:da:
                    b8:b7:84:e4:e0:dd:4c:c4:db:b3:c1:95:01:bb:0c:
                    0b:2c:50:a2:3d:9a:f7:30:3f:bb:9f:9b:4e:90:2f:
                    61:04:e2:16:bf:7d:ba:02:a1:31:ef:f9:5a:ec:7b:
                    e3:0c:d5:84:e9:f1:16:ca:94:02:52:bf:bd:3e:04:
                    50:5f:7f:19:cd:8e:e7:fd:8f:b9:0c:28:3b:47:7c:
                    bf:04:f9:76:09:64:d6:ac:ee:97:a9:dc:62:6d:1e:
                    07:d4:4e:17:22:51:eb:cc:e1:e9:2b:f6:f9:8d:b2:
                    a9:fd:65:ed:26:5f:1e:9b:69:1b:7b:9e:6c:3d:b9:
                    4b:44:8a:aa:92:0a:2a:c6:82:0a:18:cf:93:80:88:
                    3b:68:2b:c9:c7:99:9e:d4:ec:19:dc:ea:29:26:5c:
                    30:0f:a0:7f:38:15:07:21:98:68:b2:03:08:4a:8a:
                    9d:5f:82:30:2d:67:3b:bf:2c:e2:50:34:49:75:b0:
                    f2:71:01:52:63:b5:a5:41:7e:a4:ce:32:ba:32:49:
                    91:7d:c9:23:a9:fb:ed:d5:5b:18:89:5f:7a:4c:cf:
                    3b:47:8e:11:11:c5:0d:ce:5e:f3:4d:fd:24:38:cc:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F2:86:70:12:23:2D:2A:AE:3D:FE:1A:94:47:63:83:FC:19:CD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fccc2d9a-e0e4-398b-8660-c027d0e50e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:70:d8:6d:ae:96:18:94:fc:d7:09:02:0b:ec:97:34:69:
         23:9a:74:f1:eb:54:66:2a:82:41:63:ef:0d:64:be:80:d1:3f:
         d2:5d:09:3b:27:f0:c4:86:bd:3b:f5:5d:7b:3c:14:f2:7a:a4:
         05:9c:db:4c:ab:bb:73:96:7f:55:f3:ae:35:65:95:e0:ac:f9:
         3a:df:36:42:70:e5:64:f3:0e:53:f0:7d:60:62:a6:d9:37:a9:
         8a:13:35:42:4e:21:bf:7e:23:a8:26:09:01:06:48:f0:ab:d2:
         2d:32:85:3b:42:52:5b:66:90:e7:8a:db:f1:1c:5c:1f:48:c9:
         7c:25:6f:46:05:6e:b3:c7:03:1e:38:fd:1f:35:fe:5f:93:40:
         15:d9:dd:e5:3f:f6:9f:57:61:fd:79:b2:5b:ac:b0:0e:fb:c8:
         fc:f1:e1:c3:40:64:1c:d5:fc:8c:e8:b7:b3:29:98:d8:56:7e:
         8c:9e:66:03:14:a7:de:9f:39:6e:6d:be:16:33:91:6a:eb:7e:
         81:aa:29:96:5e:c0:f0:d7:fe:41:8f:7f:ca:4f:d2:3d:3c:3e:
         3a:56:91:39:52:6f:97:d0:f5:79:a6:ff:4b:eb:4f:ba:0c:78:
         1c:4f:4f:f8:18:a3:8e:4a:21:c6:f1:93:f7:79:2d:a0:66:ae:
         59:6c:e1:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7mAgDcshFAVtQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
MTczZDc3OTktZmU2Ny00ZmFlLWExY2ItYzNlZDllYjU1NmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2SCxk+7LX1g+umolakTd2lkhAo1BcGpAkk9
lNq4t4Tk4N1MxNuzwZUBuwwLLFCiPZr3MD+7n5tOkC9hBOIWv326AqEx7/la7Hvj
DNWE6fEWypQCUr+9PgRQX38ZzY7n/Y+5DCg7R3y/BPl2CWTWrO6XqdxibR4H1E4X
IlHrzOHpK/b5jbKp/WXtJl8em2kbe55sPblLRIqqkgoqxoIKGM+TgIg7aCvJx5me
1OwZ3OopJlwwD6B/OBUHIZhosgMISoqdX4IwLWc7vyziUDRJdbDycQFSY7WlQX6k
zjK6MkmRfckjqfvt1VsYiV96TM87R44REcUNzl7zTf0kOMw3SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXyhnASIy0qrj3+GpRHY4P8Gc0IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmNjYzJkOWEtZTBlNC0z
OThiLTg2NjAtYzAyN2QwZTUwZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQ+cNhtrpYYlPzXCQIL7Jc0aSOadPHrVGYqgkFj7w1kvoDRP9JdCTsn
8MSGvTv1XXs8FPJ6pAWc20yru3OWf1XzrjVlleCs+TrfNkJw5WTzDlPwfWBiptk3
qYoTNUJOIb9+I6gmCQEGSPCr0i0yhTtCUltmkOeK2/EcXB9IyXwlb0YFbrPHAx44
/R81/l+TQBXZ3eU/9p9XYf15slussA77yPzx4cNAZBzV/Izot7MpmNhWfoyeZgMU
p96fOW5tvhYzkWrrfoGqKZZewPDX/kGPf8pP0j08PjpWkTlSb5fQ9Xmm/0vrT7oM
eBxPT/gYo45KIcbxk/d5LaBmrlls4SI=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:06 2025 by rpki-client