Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25b8bded-7f93-30b0-b9e6-da782d8087ce.roa
File:                     25b8bded-7f93-30b0-b9e6-da782d8087ce.roa (raw, json)
Hash identifier:          47I4SKo8VN8mDJ/elf4WwQDc4WORU8z8u+niKkKfR0Y=
Subject key identifier:   F3:5C:37:A2:AB:D2:C0:E6:49:DD:2B:40:BF:9A:74:74:27:1B:03:B0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FBEBFC88D1630DF3654D0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25b8bded-7f93-30b0-b9e6-da782d8087ce.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        130.174.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:be:bf:c8:8d:16:30:df:36:54:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=1c2e0ab1-73e2-411e-a05a-53edf0fbdbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:a2:2f:68:e0:b6:11:b5:f0:25:60:e6:70:
                    68:df:7d:a1:db:a2:5c:2d:20:bc:1c:e9:89:3f:ce:
                    63:04:a6:ae:a0:37:03:e3:d4:df:ff:c4:f2:f2:51:
                    69:bc:74:95:c8:fb:f4:d5:2c:76:3a:09:b4:f1:60:
                    d9:ce:7f:20:c6:27:0f:4f:ef:b2:58:35:0a:fb:15:
                    05:b2:ae:05:12:1c:92:e4:3e:66:47:07:2d:0c:96:
                    9c:1a:31:56:8f:53:af:3a:43:19:70:7a:1e:7c:29:
                    ac:66:a1:eb:d0:57:a4:29:07:ff:92:41:e2:2d:40:
                    9f:7f:f0:39:3e:f5:4b:ba:5a:52:e5:e4:c7:15:4c:
                    40:77:f5:54:e7:e2:0a:15:84:60:a9:50:8b:f2:83:
                    82:bf:dc:19:8a:a1:22:9e:78:8f:36:17:bd:3c:26:
                    fb:79:eb:5c:ae:00:c1:c3:04:c9:57:65:37:50:db:
                    a0:42:e2:8b:8c:a0:28:1c:8e:d2:45:7d:35:e3:5a:
                    d2:6a:bc:0e:a3:0c:1f:c6:49:00:56:c6:dc:99:55:
                    3e:21:36:73:ec:0a:e9:fc:cf:c6:6d:b5:5b:5a:04:
                    1b:b9:43:ea:6b:5e:51:f5:29:9b:81:3d:a5:13:a1:
                    5e:c4:58:60:99:aa:2e:c8:93:2b:41:ae:25:67:00:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5C:37:A2:AB:D2:C0:E6:49:DD:2B:40:BF:9A:74:74:27:1B:03:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25b8bded-7f93-30b0-b9e6-da782d8087ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:00:79:af:25:f6:d4:46:5b:9f:5b:29:eb:7e:d1:d1:89:3b:
         ec:5d:6c:cb:66:86:f9:4b:a1:75:65:06:5e:0e:4d:94:fd:82:
         bb:6f:c8:51:ff:86:17:98:e1:ca:55:c6:cf:e3:cb:8f:dd:23:
         a6:06:18:6f:b0:14:9c:41:8e:27:f3:dd:f0:0b:c3:a9:55:83:
         cb:cb:75:9e:b2:3c:ce:36:09:18:70:d6:45:0b:de:c2:d4:f8:
         50:67:73:a6:48:0e:51:09:22:9d:38:c7:88:e8:64:c8:e6:c5:
         ee:0d:b2:12:a8:ad:0c:c8:5c:5a:66:43:49:7c:73:e8:3d:77:
         be:06:d0:bc:15:79:0e:0b:10:89:0e:44:ea:b7:08:8d:83:3e:
         7d:b3:ab:9a:26:5f:a7:e6:2f:74:48:fb:06:c9:05:37:70:b3:
         cb:db:2d:cb:66:90:9d:38:7b:a4:e5:2f:03:d0:da:bf:49:72:
         3f:8c:0f:b4:24:8c:e9:fc:1b:d9:8c:1b:48:da:39:f2:1f:18:
         80:05:5f:b7:ff:38:54:f4:56:c6:46:ec:8b:45:0b:05:b5:54:
         9f:61:47:bb:33:2d:b9:b8:ee:b4:5c:e6:db:32:11:3a:ca:57:
         82:a4:32:b7:ba:fa:bc:52:b6:68:cf:ac:49:ed:c3:66:db:7b:
         8f:7e:e4:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf76/yI0WMN82VNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
MWMyZTBhYjEtNzNlMi00MTFlLWEwNWEtNTNlZGYwZmJkYmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M2iL2jgthG18CVg5nBo332h26JcLSC8HOmJ
P85jBKauoDcD49Tf/8Ty8lFpvHSVyPv01Sx2Ogm08WDZzn8gxicPT++yWDUK+xUF
sq4FEhyS5D5mRwctDJacGjFWj1OvOkMZcHoefCmsZqHr0FekKQf/kkHiLUCff/A5
PvVLulpS5eTHFUxAd/VU5+IKFYRgqVCL8oOCv9wZiqEinniPNhe9PCb7eetcrgDB
wwTJV2U3UNugQuKLjKAoHI7SRX0141rSarwOowwfxkkAVsbcmVU+ITZz7Arp/M/G
bbVbWgQbuUPqa15R9SmbgT2lE6FexFhgmaouyJMrQa4lZwBliQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNcN6Kr0sDmSd0rQL+adHQnGwOwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjViOGJkZWQtN2Y5My0z
MGIwLWI5ZTYtZGE3ODJkODA4N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq43MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkAea8l9tRGW59bKet+0dGJO+xdbMtmhvlLoXVlBl4OTZT9grtvyFH/
hheY4cpVxs/jy4/dI6YGGG+wFJxBjifz3fALw6lVg8vLdZ6yPM42CRhw1kUL3sLU
+FBnc6ZIDlEJIp04x4joZMjmxe4NshKorQzIXFpmQ0l8c+g9d74G0LwVeQ4LEIkO
ROq3CI2DPn2zq5omX6fmL3RI+wbJBTdws8vbLctmkJ04e6TlLwPQ2r9Jcj+MD7Qk
jOn8G9mMG0jaOfIfGIAFX7f/OFT0VsZG7ItFCwW1VJ9hR7szLbm47rRc5tsyETrK
V4KkMre6+rxStmjPrEntw2bbe49+5NU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:01:39 2025 by rpki-client