Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc5282a3-05ec-3f14-b013-7eb00a198728.roa
File:                     fc5282a3-05ec-3f14-b013-7eb00a198728.roa (raw, json)
Hash identifier:          Go+3XMHTxLpyZR2xy7HPkczCBn8ZA3222V8+2j5ZeLI=
Subject key identifier:   AE:61:C7:4B:84:16:1C:05:EA:5B:EC:86:1E:C4:34:B7:47:92:B8:98
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E53DA442FA04900AEF8A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc5282a3-05ec-3f14-b013-7eb00a198728.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     3356
IP address blocks:        130.174.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:3d:a4:42:fa:04:90:0a:ef:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=34284648-8457-411e-bcd1-79fde6886127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:28:97:3b:ff:36:a3:82:81:8d:92:80:78:
                    79:0e:75:fd:44:92:57:62:11:cb:6e:5e:9c:0a:a7:
                    2f:ba:66:7c:73:67:7c:a3:e0:07:ff:24:5b:ff:9a:
                    e3:11:65:5c:21:57:a1:c9:f3:0b:c7:e0:c4:41:9d:
                    a9:35:b2:9f:df:a0:c6:12:e1:f5:c9:02:ba:27:5d:
                    c2:50:07:99:fa:c7:21:70:db:df:09:f9:2a:79:31:
                    c9:90:da:29:21:27:e9:b1:75:cd:97:4d:b9:db:91:
                    b6:86:b8:a9:53:a9:c7:fd:5f:2b:c8:61:cc:19:ec:
                    16:ef:36:43:5d:01:be:8f:cd:97:b0:51:07:d9:2d:
                    c3:56:81:16:8a:c8:0c:31:33:a8:e9:8e:60:9a:4d:
                    9f:63:58:cd:5e:14:8e:a5:53:ac:05:82:91:df:4d:
                    bf:43:e9:f5:80:83:e9:df:f8:b4:aa:3f:ca:c6:38:
                    94:73:a9:16:a4:f1:d2:0e:ae:4d:bd:51:8d:ad:41:
                    f0:c7:39:bb:9f:67:b2:00:43:b1:42:f0:8c:e2:e8:
                    81:fd:02:6c:15:e3:a3:0e:84:8c:03:95:19:92:0b:
                    35:21:ca:2d:13:78:ac:8a:7c:d7:ce:fa:9d:fa:b0:
                    2a:c8:ac:4e:50:17:ae:e4:5d:90:dd:2f:f7:4f:c8:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:C7:4B:84:16:1C:05:EA:5B:EC:86:1E:C4:34:B7:47:92:B8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc5282a3-05ec-3f14-b013-7eb00a198728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8d:9b:5f:c3:50:7d:83:7d:ce:d0:1e:fe:62:6c:7c:f3:55:
         d1:05:c1:68:ea:5a:e0:d4:d0:15:55:d6:a3:1f:e3:67:ed:8c:
         75:43:96:57:f4:e9:6a:ba:20:c4:f8:80:6e:f4:72:25:8a:fe:
         ce:6e:5d:1c:43:20:6b:62:3b:1f:cd:2b:2b:7f:be:b7:61:70:
         46:98:83:9f:f7:e5:68:3b:16:e4:e5:26:88:b6:25:f3:f1:88:
         0d:c0:4c:90:80:d6:3a:ae:bb:82:4c:9b:62:ea:74:f1:31:96:
         32:15:c7:12:73:85:83:65:d3:87:1a:93:11:bd:87:b3:d2:7f:
         f0:bb:d9:9b:91:f8:24:9f:50:5b:89:5a:fa:03:aa:0d:db:32:
         5f:d5:df:cd:e6:d6:14:fa:f7:67:21:6d:09:d3:f2:89:18:9b:
         41:56:aa:86:8a:7c:32:8a:8d:b6:66:ca:b5:8b:e4:b1:0d:c7:
         69:7a:34:27:d0:bc:78:87:23:4c:9e:8b:ba:72:72:16:46:0a:
         85:6f:d2:ca:38:ab:7e:b4:82:ca:a0:87:00:86:b4:ef:7d:bf:
         a8:08:94:20:aa:67:b1:da:c4:29:ad:34:1a:c9:3d:4e:0f:5d:
         c1:6d:df:a3:31:99:df:35:8f:90:37:1a:d2:d2:62:64:2c:22:
         dc:28:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:08 2025 by rpki-client