Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94a5ce68-bf77-3496-a0ec-ba8510d392d1.roa
File:                     94a5ce68-bf77-3496-a0ec-ba8510d392d1.roa (raw, json)
Hash identifier:          DSpHEjrEDLl5Q3oBBCteOu4c0Y+SaqfMughZ7FOzQbE=
Subject key identifier:   B4:65:12:ED:77:92:F9:B3:A7:31:A7:7A:28:F7:A2:E0:DE:9C:A9:74
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FC8D6EBCBFC296E1BB800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94a5ce68-bf77-3496-a0ec-ba8510d392d1.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        130.174.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c8:d6:eb:cb:fc:29:6e:1b:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=9d4e0509-7d55-492e-ae25-cfacb2cf3905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:6d:91:68:2f:c6:d1:95:88:6a:be:ed:09:
                    b9:c0:1f:cd:fb:28:36:b2:a5:e0:61:26:1c:a2:23:
                    63:73:b9:58:87:37:61:3e:f7:95:48:d3:2c:d3:10:
                    8d:fc:bd:4e:03:e2:22:63:35:41:55:30:41:e0:17:
                    14:28:e9:47:44:e0:9b:aa:67:9a:60:3c:ac:cf:05:
                    69:3d:b5:0d:3a:63:79:9a:bc:46:e7:be:44:ec:55:
                    8f:99:7b:d4:e3:86:11:e9:f0:6a:95:04:93:1c:27:
                    c5:4f:e6:73:51:a6:16:d7:36:29:7e:49:bf:55:13:
                    95:8e:e4:8a:f9:91:62:30:b9:d0:8d:42:fd:ad:14:
                    e9:34:34:7f:7f:4c:a8:7f:8b:79:f1:eb:db:e8:da:
                    fd:74:04:fc:5f:2e:0f:09:dc:53:21:4d:c2:c1:39:
                    28:53:94:a7:ad:99:8c:0e:78:50:9d:bb:ee:00:fb:
                    3b:41:57:9e:ed:99:0a:ab:0e:37:9d:7b:10:9c:a0:
                    6e:2c:ad:1e:25:df:26:e3:05:aa:21:e8:b8:2c:59:
                    84:a3:e9:8e:8a:3e:3a:b6:c8:cb:fc:a8:7e:1c:d7:
                    5b:3b:8c:26:e5:fb:95:ba:28:ed:35:63:4f:b7:c0:
                    c7:49:c2:94:0a:d0:61:5d:65:75:dd:94:39:60:0a:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:65:12:ED:77:92:F9:B3:A7:31:A7:7A:28:F7:A2:E0:DE:9C:A9:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94a5ce68-bf77-3496-a0ec-ba8510d392d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:82:b6:62:3e:ef:e0:fa:a2:f5:5d:c6:9c:ed:9c:e0:80:4f:
         70:8a:76:5e:46:18:1b:c8:59:d6:19:2c:42:52:f4:01:9e:8d:
         8a:1f:ae:d2:c6:d5:f3:de:b0:1f:f0:80:b4:b9:bd:f2:75:de:
         88:95:86:72:2f:12:be:07:b9:88:0e:44:a6:e5:df:b9:8e:fd:
         f1:38:07:f5:5a:9a:9e:17:d2:a5:aa:06:e6:79:67:da:cf:b0:
         3d:78:a9:b6:ed:e7:09:df:d7:c3:e3:52:ee:e9:8e:9a:70:1a:
         96:fc:52:82:da:e7:95:1d:20:88:d4:95:ef:ac:27:bf:da:30:
         ae:3e:39:00:7d:dc:2f:b6:dd:df:22:11:a5:f6:a0:29:0b:8b:
         1a:e4:cd:e1:07:59:20:8e:9c:21:75:85:10:ef:40:21:1c:0a:
         6e:dd:d8:91:0e:c5:ce:c3:fd:6d:90:4c:60:d9:b5:ed:12:74:
         0a:66:d1:17:13:73:24:73:fa:1a:b9:cd:86:c4:ec:92:7b:3b:
         2c:64:a1:3c:d1:7b:dd:35:1c:c8:da:67:5f:e0:f1:f8:56:a1:
         7b:44:01:b3:4d:92:a0:40:2d:70:f0:0c:11:51:60:d9:4e:bc:
         cb:0e:30:15:dd:3f:2c:20:80:ba:65:53:77:04:1b:13:5b:06:
         a9:42:e9:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8jW68v8KW4buAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
OWQ0ZTA1MDktN2Q1NS00OTJlLWFlMjUtY2ZhY2IyY2YzOTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gptkWgvxtGViGq+7Qm5wB/N+yg2sqXgYSYc
oiNjc7lYhzdhPveVSNMs0xCN/L1OA+IiYzVBVTBB4BcUKOlHROCbqmeaYDyszwVp
PbUNOmN5mrxG575E7FWPmXvU44YR6fBqlQSTHCfFT+ZzUaYW1zYpfkm/VROVjuSK
+ZFiMLnQjUL9rRTpNDR/f0yof4t58evb6Nr9dAT8Xy4PCdxTIU3CwTkoU5SnrZmM
DnhQnbvuAPs7QVee7ZkKqw43nXsQnKBuLK0eJd8m4wWqIei4LFmEo+mOij46tsjL
/Kh+HNdbO4wm5fuVuijtNWNPt8DHScKUCtBhXWV13ZQ5YAqnbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRlEu13kvmzpzGneij3ouDenKl0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTRhNWNlNjgtYmY3Ny0z
NDk2LWEwZWMtYmE4NTEwZDM5MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWCtmI+7+D6ovVdxpztnOCAT3CKdl5GGBvIWdYZLEJS9AGejYofrtLG
1fPesB/wgLS5vfJ13oiVhnIvEr4HuYgORKbl37mO/fE4B/Vamp4X0qWqBuZ5Z9rP
sD14qbbt5wnf18PjUu7pjppwGpb8UoLa55UdIIjUle+sJ7/aMK4+OQB93C+23d8i
EaX2oCkLixrkzeEHWSCOnCF1hRDvQCEcCm7d2JEOxc7D/W2QTGDZte0SdApm0RcT
cyRz+hq5zYbE7JJ7OyxkoTzRe901HMjaZ1/g8fhWoXtEAbNNkqBALXDwDBFRYNlO
vMsOMBXdPywggLplU3cEGxNbBqlC6Wk=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:06:30 2025 by rpki-client