Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
File:                     15918682-1f44-3387-abb8-f7772b5f9f5e.roa (raw, json)
Hash identifier:          yLCPYSkpunKoqVT89uZRN8aje2CEXcT6+WHe6O065Co=
Subject key identifier:   1C:21:DE:EB:B8:69:CC:57:92:C4:95:9B:13:BE:E8:67:17:69:3E:B1
Certificate issuer:       /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
Certificate serial:       010D0C9F432858457D13169A8C217CD5B7AC7E80
Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        208.91.36.0/24 maxlen: 24
                          208.91.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:16:9a:8c:21:7c:d5:b7:ac:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=878681e6-c434-47d1-993d-d145c2048f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:12:6b:81:da:a2:e2:f4:ff:29:d4:9b:66:b6:
                    e7:72:cc:56:54:2c:3e:da:45:29:0c:d0:0b:c5:67:
                    b5:bc:ed:cb:ab:8f:fd:dc:0e:23:4c:f7:b8:cf:22:
                    99:71:a3:2e:fc:fe:10:c9:5c:f8:79:8d:6c:b4:d4:
                    64:ec:5b:c9:bf:13:77:86:63:76:43:50:98:4a:06:
                    5c:79:94:ee:18:d5:2b:18:38:94:97:80:ed:4a:fc:
                    74:2c:1e:dd:b5:cc:fe:59:e8:93:21:0a:23:13:f4:
                    cb:3e:30:ec:38:ea:f8:39:68:74:63:e1:48:aa:02:
                    a7:7d:84:90:a9:1c:ed:a0:ab:f8:ec:02:4f:74:bf:
                    a5:a3:a1:bc:46:25:98:23:40:24:64:a4:38:cd:42:
                    fa:69:1e:7f:7e:fd:fb:bb:e1:b9:49:f9:41:67:e1:
                    d9:5d:03:d8:1c:2d:8a:9e:f7:23:c4:47:48:64:4a:
                    0d:51:9f:b0:3e:4a:e1:a2:f8:a4:91:7c:99:58:b6:
                    ab:91:74:7b:11:bd:28:2f:44:9d:51:70:7d:e4:1b:
                    a2:6f:5f:53:4e:ea:31:69:c7:e0:a7:78:1a:da:8e:
                    79:6d:a1:1c:15:16:cc:76:c2:38:72:a6:17:b4:0b:
                    72:4b:bf:b0:15:00:d6:3d:95:a3:21:f4:3a:fe:24:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:DE:EB:B8:69:CC:57:92:C4:95:9B:13:BE:E8:67:17:69:3E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl

            X509v3 Authority Key Identifier:
                keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:01:b5:b5:77:cd:e4:7b:6e:f5:ba:8a:d8:d1:9e:2c:bd:e6:
         cb:d1:1b:76:b6:ef:9b:ab:fa:7e:6f:46:05:b1:b1:2d:6b:05:
         d0:8f:59:42:67:c2:94:75:f9:bd:e2:3d:41:3c:ce:66:8c:b8:
         67:cd:de:5f:52:c0:7b:f3:8f:68:77:23:a9:6c:77:e1:5e:c7:
         19:c0:b2:9f:4f:25:b6:d0:97:ea:1f:bf:c9:44:60:37:2c:68:
         ae:d3:71:e0:f4:eb:0d:5e:14:37:b4:4d:5f:5d:7e:18:65:48:
         3f:06:0e:92:14:14:07:29:17:f0:d7:46:7f:45:33:5a:ff:55:
         7b:42:3f:fd:1b:3d:7b:17:e9:df:b2:8d:c6:65:94:28:1b:35:
         1e:b4:59:11:0e:53:f1:88:65:8f:a1:90:94:3a:9f:f5:67:d3:
         41:02:f7:c0:f6:8b:5a:f4:1a:a2:cf:44:07:f5:87:bf:0b:3a:
         b9:f8:7e:a4:7c:97:43:4d:62:e7:28:03:0f:93:9b:60:a5:d9:
         5d:e3:df:86:1f:4c:3e:66:18:ca:ee:f7:dd:d1:27:c7:fa:9e:
         3d:bd:c3:55:8a:db:9e:5e:50:00:e6:60:21:7c:cb:4c:93:c9:
         07:4d:48:51:5a:ee:8e:95:ad:41:77:de:fb:3e:c5:ec:7b:4c:
         66:0b:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:53 2024 by rpki-client on console-fra.rpki-client.org