Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f3ad0dd-b64b-3666-a3be-d8b547ffb72f.roa
File:                     9f3ad0dd-b64b-3666-a3be-d8b547ffb72f.roa (raw, json)
Hash identifier:          YuVNPYTmVnYeNRe9PBjKyEp+sD+wWx0JXcACNOb3aN8=
Subject key identifier:   20:06:28:5B:7B:D9:D5:76:AB:16:14:03:F5:0C:4A:CD:8F:18:08:DB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858486530393EFD5CA78A52D38B40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f3ad0dd-b64b-3666-a3be-d8b547ffb72f.roa
Signing time:             Wed 01 Jan 2025 02:00:40 +0000
ROA not before:           Wed 01 Jan 2025 02:00:40 +0000
ROA not after:            Tue 01 Apr 2025 01:00:40 +0000
asID:                     3356
IP address blocks:        15.176.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:30:39:3e:fd:5c:a7:8a:52:d3:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan  1 02:00:40 2025 GMT
            Not After : Apr  1 01:00:40 2025 GMT
        Subject: CN=1f4a596e-600b-4b44-b434-83a3ab04c53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:fd:19:3d:b9:85:c6:2c:1d:61:32:7c:a2:
                    ce:39:b4:a9:69:81:2b:d3:33:b3:77:ea:2b:47:50:
                    76:2f:71:b3:d7:9f:d0:b4:e7:ee:57:e7:c4:89:eb:
                    39:d4:9a:f9:af:83:c2:e9:d0:06:e8:50:aa:bc:8c:
                    06:ae:06:a3:6c:9a:ae:7f:5d:a1:35:4f:2c:c6:87:
                    83:c9:5d:93:b6:ff:97:f2:04:49:43:1f:f9:49:1d:
                    08:35:09:b5:83:d3:fa:da:1f:cc:f9:ce:97:1a:a1:
                    cf:6e:d4:67:4c:5a:c5:a9:90:82:24:5e:c8:a3:d6:
                    07:ba:fc:6e:69:77:59:41:ad:cb:ba:4c:71:c2:1b:
                    96:86:38:98:58:ca:f0:00:26:ed:c9:07:b8:2b:74:
                    6f:5c:c7:e3:9f:5b:41:83:4b:15:0c:9c:7e:1a:6c:
                    f4:b4:be:9a:07:35:6a:b8:5f:0c:bf:c1:17:71:84:
                    18:05:97:88:96:f2:87:f1:d2:64:33:4e:c8:c1:88:
                    bf:bf:fe:6c:06:84:8a:d4:f8:c7:ca:49:30:65:e5:
                    3b:42:31:5a:5f:0f:68:ca:f0:44:98:6e:16:cb:0a:
                    af:dc:98:5f:97:59:50:19:c0:27:7a:d8:ea:98:c0:
                    46:dd:09:db:a0:2b:47:fe:07:d9:f0:50:1e:25:c8:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:28:5B:7B:D9:D5:76:AB:16:14:03:F5:0C:4A:CD:8F:18:08:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f3ad0dd-b64b-3666-a3be-d8b547ffb72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:be:ee:ab:c4:a0:46:af:a2:e6:6d:1b:f8:0e:be:48:45:6c:
         f7:a1:18:79:2a:6b:5c:a2:4c:0d:d2:6b:bf:ad:6c:48:c8:06:
         1d:34:7c:0d:85:87:4c:57:09:ac:6a:33:c2:6e:66:5f:33:95:
         af:e8:57:d3:fd:60:20:1d:49:65:f3:98:98:a0:cd:9d:3c:69:
         79:e1:63:81:e1:8d:68:49:c0:f6:82:b6:e8:1f:48:b2:9e:fd:
         e5:fc:63:34:ed:47:df:49:e0:26:96:3c:78:99:a3:23:f8:e1:
         a7:61:c6:f4:4b:f6:9a:d6:04:1e:b5:27:80:b4:27:c9:35:ed:
         e0:33:1c:b0:37:38:56:e6:a2:4e:c5:93:b0:7e:81:c1:00:a0:
         2e:77:b2:b3:39:d9:c9:2f:1e:b3:02:df:75:82:d1:de:28:ca:
         00:1f:14:97:c0:32:54:8c:e0:c5:68:9e:ec:f4:cc:14:ec:eb:
         ba:a6:d1:26:62:41:03:f6:a3:9b:86:cb:b1:66:cd:b1:49:34:
         dd:7a:d6:9f:68:73:5f:c5:db:1d:e9:b1:67:0e:69:8a:52:04:
         c8:2f:b0:a6:95:31:c7:27:e1:a6:74:c5:80:35:dd:e5:cc:50:
         3c:80:ee:2a:d0:3c:16:9e:08:1e:7d:b9:e2:31:40:ab:fb:1c:
         54:b8:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:50 2025 by rpki-client