Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a60ad87b-3ee5-3d50-a0f4-f163dcfa37df.roa
File:                     a60ad87b-3ee5-3d50-a0f4-f163dcfa37df.roa (raw, json)
Hash identifier:          shU6+LhtETPefoIM9IaTl6ftJ+dIRrtudjR8EUtGJTw=
Subject key identifier:   1C:25:8F:68:96:89:5A:E6:9E:06:63:0A:56:DD:3E:A8:EB:67:7C:B6
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F432858474850C66D92AA07846EBC4380
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a60ad87b-3ee5-3d50-a0f4-f163dcfa37df.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     11693
IP address blocks:        72.15.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:c6:6d:92:aa:07:84:6e:bc:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=83613308-5e89-4765-9773-dd99a49ae78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:88:a7:07:39:e3:e2:14:fd:dd:00:57:7e:
                    6c:43:71:f6:50:dc:5e:cb:37:76:30:95:d5:64:16:
                    22:93:9a:1a:3e:c4:e9:d2:be:b9:b7:ea:9d:06:0d:
                    68:d1:cc:dd:b6:c0:89:da:44:4b:1a:f6:25:60:f0:
                    15:29:33:33:9e:38:d4:e6:e7:f6:3b:cb:84:2b:cc:
                    e5:d6:f5:48:d6:30:af:45:56:b6:50:b0:cc:67:2c:
                    9b:fe:54:8a:2c:9a:83:a3:6e:71:27:7b:6e:89:b7:
                    81:c9:1c:6b:c1:46:a1:02:fc:36:39:d5:30:0e:37:
                    f8:24:7f:ea:02:e6:a1:0d:ff:61:6c:f7:cb:f2:ae:
                    fc:c0:90:7e:12:f8:74:01:cf:15:2e:18:b4:a4:d5:
                    3b:95:26:6f:47:41:37:0a:e6:c1:37:65:5f:38:f4:
                    09:54:42:c2:df:47:79:5d:17:89:a3:5c:0c:af:91:
                    19:c4:cb:ba:d9:42:04:ee:13:7e:89:8c:7a:02:ce:
                    35:d6:da:2c:03:61:8d:90:d6:f0:0b:e4:4e:70:76:
                    ae:47:23:03:ca:65:70:87:c2:04:bb:62:79:47:99:
                    ae:78:20:88:13:f4:a0:ea:b5:ca:31:92:a7:fa:c1:
                    8f:09:38:26:ee:0e:32:82:93:d4:23:47:07:69:f1:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:8F:68:96:89:5A:E6:9E:06:63:0A:56:DD:3E:A8:EB:67:7C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a60ad87b-3ee5-3d50-a0f4-f163dcfa37df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4d:cf:5e:47:5b:e4:55:ea:d4:9a:7f:6a:ee:66:c9:66:22:
         54:ef:e4:b1:63:1b:b4:17:a6:38:19:bb:eb:10:57:27:f7:91:
         a7:53:74:ba:38:c4:ed:cd:e6:99:74:09:17:1d:03:0d:83:7c:
         e2:26:45:c2:55:fc:c9:9f:6c:ab:cf:02:9a:2f:1a:bf:fa:6a:
         03:64:96:15:d2:b4:45:68:92:bb:85:aa:cc:88:91:b6:15:13:
         71:ac:3c:24:f6:22:e0:d6:c8:48:f6:b3:fa:ea:00:7c:6b:f7:
         67:b1:f7:0f:da:54:36:77:4c:8a:56:4f:a0:f2:2b:02:a8:bf:
         8d:a2:bd:c9:35:98:9f:17:eb:69:73:6e:86:4f:f2:a2:04:c6:
         92:8a:67:98:b0:f6:81:48:ed:d7:c5:0a:2d:39:29:3e:a9:56:
         ef:fa:90:f1:66:d3:b4:4c:40:ac:00:ce:52:3b:a1:10:5a:e2:
         d3:bd:15:d7:4a:6f:87:d7:e1:6f:a0:29:1e:c8:ab:43:ec:4e:
         4f:6d:aa:ae:64:41:61:ea:49:fe:5c:ac:28:9f:01:87:32:0a:
         2d:0d:f1:ee:ea:81:8c:06:b0:e0:5a:21:ae:02:55:90:97:98:
         3f:68:d0:f3:95:e6:46:26:c4:8e:5a:c4:26:0b:f2:d0:53:98:
         20:2c:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:58 2024 by rpki-client on console-ams.rpki-client.org