Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa
File:                     0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa (raw, json)
Hash identifier:          qAc6KdZgzP+ADazq6vumzByk2M16EkxZvQOPiP3dARo=
Subject key identifier:   B6:FA:08:D4:6F:94:C8:17:67:AE:40:E0:E1:E9:80:B5:EF:3D:67:B2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FC5DFF5E1B0822B6F15E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        130.174.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c5:df:f5:e1:b0:82:2b:6f:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=ba4c2e06-cfbe-4870-a341-796bfac7f635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:7f:b6:62:43:75:44:f0:bc:75:83:06:fb:
                    3b:5c:8c:25:18:9a:79:f0:bf:23:6a:0c:8b:c3:54:
                    7c:07:5e:a2:30:c2:7a:26:8c:3e:e8:e9:8e:e5:38:
                    d0:bc:f9:da:21:e8:a6:8c:8c:85:3a:8a:93:a8:55:
                    f6:af:3f:ef:af:5e:71:5a:cb:ba:00:10:c9:07:fa:
                    b1:f3:08:79:86:98:68:a7:fb:50:0a:cd:61:3d:e8:
                    ea:74:14:a3:57:0d:4a:26:26:ca:f6:fc:a6:aa:2e:
                    84:07:c7:cc:bd:46:62:6d:84:a6:a8:e3:04:24:c9:
                    ea:1c:b0:76:05:15:15:4c:d5:3d:e3:1c:a0:d1:bd:
                    0d:3b:90:7d:90:d9:27:77:f6:48:a5:8d:c5:b9:8c:
                    f5:a2:8f:e5:43:88:31:8a:45:78:f8:67:2e:19:7d:
                    88:7b:98:51:b5:92:11:25:b7:12:85:c4:31:92:ca:
                    de:80:50:b9:ac:8b:fb:c4:71:35:5e:17:71:64:c9:
                    16:94:d6:d0:c8:a0:0d:c1:de:39:3c:1b:6e:d5:83:
                    a4:5b:c9:49:48:5a:87:9f:ec:d7:80:2d:8e:18:69:
                    96:07:67:89:04:92:1a:d0:ce:88:9d:c7:88:f1:d6:
                    33:e0:83:54:b4:fa:71:1f:a7:82:18:fd:b2:75:23:
                    cd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FA:08:D4:6F:94:C8:17:67:AE:40:E0:E1:E9:80:B5:EF:3D:67:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9c:92:08:a9:d3:cd:a9:fa:9e:28:10:f4:8c:b3:4b:6b:2a:
         a0:8b:a1:b4:49:3d:3c:cc:ee:2e:35:c2:7d:b5:bd:b3:48:54:
         b7:69:b5:d1:a3:0a:73:69:3d:41:cf:4e:e1:eb:a8:71:b1:80:
         f1:7b:50:c3:50:f4:58:8f:81:73:45:49:7d:d4:89:42:be:b4:
         48:f2:36:70:a3:67:5e:9c:0b:c1:1b:a5:7c:d8:08:76:63:f5:
         2b:72:11:d3:16:da:45:fc:14:3a:1e:3a:af:a7:a4:46:85:19:
         c7:d6:63:be:52:f7:38:85:92:a8:26:a4:94:af:f2:bd:e2:5e:
         7e:2d:dd:f3:a2:3e:c3:5d:16:dc:49:79:88:c6:ed:b9:bf:41:
         a1:02:60:c1:ff:7f:79:85:fc:b9:cf:ee:e4:a4:0a:c7:1c:49:
         06:89:79:9b:e7:97:ae:ee:8b:d5:6e:28:ee:44:5b:63:f8:a0:
         85:05:cb:0d:8f:c4:36:44:cd:e0:04:e5:3b:3f:36:cb:0a:3c:
         f4:82:c5:5c:e7:a2:87:46:45:b4:3b:e3:38:b8:33:c1:e0:28:
         f3:96:e6:0e:80:0e:e7:66:a7:3d:a1:86:0e:3f:38:32:78:ae:
         fe:c3:36:21:ca:19:13:dc:ed:fd:be:3a:51:22:bd:42:21:9c:
         f7:f3:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:18 2025 by rpki-client