Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bae8d4f0-3c3b-3425-9896-8dc5b444eee7.roa
File:                     bae8d4f0-3c3b-3425-9896-8dc5b444eee7.roa (raw, json)
Hash identifier:          JR0jN1jK+DHO7bii1y/vQCxWJoykxR2SWq1l9uRCp8A=
Subject key identifier:   57:88:8A:8E:EB:52:60:92:6A:07:1D:FB:A9:03:10:9F:93:11:41:C2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FCF969E240FFAB1BA2A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bae8d4f0-3c3b-3425-9896-8dc5b444eee7.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        130.174.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:cf:96:9e:24:0f:fa:b1:ba:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=a27c6435-1a2c-4275-a418-06a43f72123a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:00:6c:de:60:64:66:4b:f3:e0:32:41:77:fe:
                    59:89:b6:6a:00:46:3a:78:de:07:74:92:00:4d:41:
                    0d:bf:7e:61:6e:d2:3f:84:e5:b6:0b:bd:1f:f7:8d:
                    4c:78:68:6f:f4:eb:b2:0b:7c:98:65:9c:32:49:50:
                    1a:d1:9a:68:8d:49:60:3e:e0:48:45:81:17:c0:73:
                    45:eb:83:7c:14:e8:97:04:21:53:38:13:b8:e5:f7:
                    40:34:10:f4:38:b0:79:f1:7c:4b:ca:7d:aa:0d:ed:
                    4d:b9:da:03:1c:16:fe:6b:ee:25:b0:4c:ad:9f:c2:
                    20:40:03:83:7b:8f:ae:aa:62:b3:f1:fe:bb:42:f7:
                    04:f2:36:45:6e:8d:2b:7c:82:2c:3f:51:96:34:e5:
                    49:cc:c7:af:97:a9:8b:4a:48:66:bc:17:78:b0:db:
                    f3:ab:dd:6d:7b:38:cf:f7:da:bd:82:04:0f:4f:8e:
                    29:c7:90:13:4b:15:28:d6:25:17:d5:74:91:86:b1:
                    97:f6:81:3b:69:09:1c:f7:12:ea:79:1a:53:8c:54:
                    ab:b8:cc:4f:41:ad:47:fd:36:74:85:f6:c3:4e:0c:
                    d1:0c:24:dd:63:b0:59:94:4b:f8:fe:fa:c0:b0:b0:
                    a0:3f:05:d7:e9:ca:29:9a:d7:c9:d5:d1:b3:7c:77:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:88:8A:8E:EB:52:60:92:6A:07:1D:FB:A9:03:10:9F:93:11:41:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bae8d4f0-3c3b-3425-9896-8dc5b444eee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:c2:56:3c:f0:a3:12:a1:e4:2f:8e:50:81:32:6d:1d:ec:
         c8:91:fa:48:b6:42:51:bc:93:87:cd:1e:d3:9a:cf:33:02:fa:
         6f:ea:38:22:45:52:79:a0:92:b9:a3:e6:5c:0d:57:38:d4:81:
         46:b4:95:b9:c0:cb:72:02:fe:ad:5d:2b:43:90:ff:b1:00:93:
         b7:70:21:df:ec:a2:ba:af:5a:ab:70:11:b1:eb:6b:1f:cf:cc:
         d5:ee:a2:ff:50:dd:d5:cb:c1:6d:d6:3d:9c:5c:53:94:ed:97:
         fb:c0:5b:4a:d4:91:24:66:4a:32:c7:88:b2:1d:34:ee:de:3e:
         55:39:27:5d:5f:ca:f5:ac:4c:fa:ad:e4:27:95:7f:23:ff:3e:
         40:59:9e:b2:5c:5b:23:d2:77:b2:35:45:47:12:80:d8:17:2a:
         a6:c2:2a:64:44:fc:12:01:a3:b2:e3:50:2a:95:38:42:d5:e0:
         97:f9:f7:6f:4c:9a:b0:7c:c8:e5:0c:6f:8b:3e:7e:ee:d5:39:
         27:d7:fa:28:ed:07:e1:a1:cf:55:f9:5c:7c:91:d7:d8:65:3b:
         86:3c:a8:d7:59:0f:c7:c4:3d:0d:cc:a5:a6:55:37:5f:e9:a2:
         05:da:16:05:af:cd:d6:38:fa:10:ef:35:af:e8:0f:93:00:cb:
         d4:5d:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:54:21 2025 by rpki-client