Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b2cbb20-468b-38c0-93c9-e58604132ad2.roa
File:                     4b2cbb20-468b-38c0-93c9-e58604132ad2.roa (raw, json)
Hash identifier:          es8fxzfHmNBhRNe39esZQhB0lH+RpKPLBHg4wj4Crqk=
Subject key identifier:   4B:29:EA:C6:E3:CE:38:9A:4B:D3:1D:30:D5:EC:F7:EA:36:8E:6D:46
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FCA478C9E8C07C85C5680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b2cbb20-468b-38c0-93c9-e58604132ad2.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        130.174.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ca:47:8c:9e:8c:07:c8:5c:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=d1bbee93-a37e-4fa0-be9b-0c848f968ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:03:97:d3:6a:27:1a:a5:f2:99:ca:94:4a:
                    43:b6:ef:c4:63:87:5b:28:c5:5a:2c:e0:bd:90:c6:
                    d5:8d:98:ff:12:f4:ae:2f:01:fe:f8:34:d2:0f:91:
                    38:eb:3c:6e:00:1c:17:17:0a:f9:4d:a4:6c:a3:a9:
                    12:d6:a1:e3:74:cf:22:6c:f4:a8:62:57:85:78:2b:
                    83:62:ab:7e:c1:90:d3:9d:e6:b4:c1:f4:4f:ef:19:
                    78:d3:75:d7:60:a7:d9:be:f0:22:20:af:70:34:23:
                    a6:35:13:0c:f2:07:fd:5e:2c:5f:1e:a2:31:80:79:
                    41:ab:f8:2e:6b:77:a6:8a:fe:60:f2:e2:ac:21:0b:
                    6c:e4:a7:9d:48:62:fe:39:d5:72:66:61:56:fe:c8:
                    27:94:3b:94:be:2d:eb:bd:d7:ed:5f:e1:92:1f:f0:
                    cc:64:cf:47:6b:15:88:56:43:cb:d4:f2:41:73:fc:
                    dc:c9:00:22:8c:71:71:3f:87:52:12:2e:23:bf:d3:
                    41:61:c5:ef:35:73:64:6e:01:79:0d:06:33:91:a0:
                    b7:bf:4d:24:47:15:7a:99:b8:ee:97:8f:2a:f9:63:
                    38:47:b0:1c:93:22:a9:81:91:f1:c7:a4:01:bc:70:
                    b8:13:ab:f5:19:2c:11:e8:f9:48:91:1d:56:c6:52:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:29:EA:C6:E3:CE:38:9A:4B:D3:1D:30:D5:EC:F7:EA:36:8E:6D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b2cbb20-468b-38c0-93c9-e58604132ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:6c:0a:24:27:73:d8:5f:af:3c:9f:5f:bb:83:e5:c7:94:01:
         36:cf:a9:25:f6:e4:db:dc:c1:04:a9:6d:ff:1b:f1:1d:de:97:
         84:f2:5d:1c:37:08:cf:21:3d:70:ee:91:55:52:d0:cf:8a:61:
         f3:f5:be:79:b4:33:15:0c:f2:ab:c3:ee:b1:e1:42:76:56:7c:
         24:50:ad:e1:cc:20:34:df:ee:50:1f:8f:b1:f6:9b:36:bc:5b:
         32:fb:bd:89:19:69:ac:b3:72:74:38:c4:0c:19:ca:f8:c8:3c:
         95:23:a3:9a:49:b8:af:e4:e8:59:f8:e6:e5:da:64:ad:93:45:
         eb:a2:32:3a:7e:92:a6:3c:76:ce:fc:6c:94:d3:a1:39:7f:9e:
         7f:d0:f4:51:5d:76:88:06:53:7a:b2:3b:b5:97:2d:3a:33:9a:
         64:91:2e:3c:36:a7:9d:8a:26:6a:8d:59:15:63:4d:a8:92:66:
         07:c3:cd:bf:2f:08:20:b3:eb:80:99:dd:ed:9a:e7:6b:b4:13:
         07:d8:cb:81:9f:48:b7:4f:f9:22:10:cb:d5:40:e1:ed:11:0e:
         2a:36:00:08:f6:be:f9:e8:5c:09:81:73:4c:73:4f:f6:d2:1d:
         b0:2c:72:6f:b0:fd:09:cc:c3:bc:d7:47:6d:43:6d:aa:15:5c:
         4e:6e:af:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8pHjJ6MB8hcVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZDFiYmVlOTMtYTM3ZS00ZmEwLWJlOWItMGM4NDhmOTY4ZmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAockDl9NqJxql8pnKlEpDtu/EY4dbKMVaLOC9
kMbVjZj/EvSuLwH++DTSD5E46zxuABwXFwr5TaRso6kS1qHjdM8ibPSoYleFeCuD
Yqt+wZDTnea0wfRP7xl403XXYKfZvvAiIK9wNCOmNRMM8gf9XixfHqIxgHlBq/gu
a3emiv5g8uKsIQts5KedSGL+OdVyZmFW/sgnlDuUvi3rvdftX+GSH/DMZM9HaxWI
VkPL1PJBc/zcyQAijHFxP4dSEi4jv9NBYcXvNXNkbgF5DQYzkaC3v00kRxV6mbju
l48q+WM4R7AckyKpgZHxx6QBvHC4E6v1GSwR6PlIkR1WxlKQbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsp6sbjzjiaS9MdMNXs9+o2jm1GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGIyY2JiMjAtNDY4Yi0z
OGMwLTkzYzktZTU4NjA0MTMyYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBsCiQnc9hfrzyfX7uD5ceUATbPqSX25NvcwQSpbf8b8R3el4TyXRw3
CM8hPXDukVVS0M+KYfP1vnm0MxUM8qvD7rHhQnZWfCRQreHMIDTf7lAfj7H2mza8
WzL7vYkZaayzcnQ4xAwZyvjIPJUjo5pJuK/k6Fn45uXaZK2TReuiMjp+kqY8ds78
bJTToTl/nn/Q9FFddogGU3qyO7WXLTozmmSRLjw2p52KJmqNWRVjTaiSZgfDzb8v
CCCz64CZ3e2a52u0EwfYy4GfSLdP+SIQy9VA4e0RDio2AAj2vvnoXAmBc0xzT/bS
HbAscm+w/QnMw7zXR21DbaoVXE5ur/I=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:57:46 2025 by rpki-client