Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b85382ab-f619-3b14-a80c-6805bab9a604.roa
File:                     b85382ab-f619-3b14-a80c-6805bab9a604.roa (raw, json)
Hash identifier:          Q+wXo2fbiXImHB2bEhu2DFyuJEQAtGWF6DqqtRgDZp0=
Subject key identifier:   DF:49:F2:22:B4:CF:57:8A:F7:F3:67:9A:05:2A:F5:8E:2B:0F:E2:0A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858492CAE9387988087E244606F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b85382ab-f619-3b14-a80c-6805bab9a604.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        15.176.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:93:87:98:80:87:e2:44:60:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=bf5325d6-a585-4e52-96a6-6050da9ac323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:c7:00:fc:4f:c9:6c:48:a0:4d:43:a7:09:
                    d8:f1:5e:ba:23:0f:34:d3:f7:30:a0:52:b2:81:93:
                    f1:92:e0:64:d5:fb:11:7d:e2:08:b3:aa:62:56:05:
                    b3:60:be:90:5c:46:58:d4:ff:ae:94:6a:99:94:ea:
                    39:7e:6a:78:3c:cd:51:fc:54:26:d5:49:0b:8e:dc:
                    d9:f0:74:d7:82:ec:0f:aa:d9:fd:56:ee:2c:88:ff:
                    88:d4:c8:3e:d5:8e:b6:f4:ef:c8:b6:52:78:21:ed:
                    2a:d0:7e:f0:93:ae:b4:89:91:53:28:8a:26:88:6b:
                    d0:f2:8c:91:ae:06:d7:88:9b:6f:46:d2:b3:63:0d:
                    81:58:3c:cf:c3:ce:c0:e8:3e:b3:77:e1:1c:5a:a2:
                    3e:c9:d9:39:86:e6:6b:8c:b1:e1:f6:67:e6:c7:1d:
                    88:36:d6:e5:c0:41:86:52:ed:34:39:b1:94:a6:cb:
                    40:bd:4b:b0:8c:f0:a3:6c:f4:ed:74:42:01:d8:89:
                    aa:34:ff:8d:7a:6b:9f:3e:f1:37:2b:9d:31:d7:cb:
                    2c:bd:49:3d:8f:d9:7f:95:42:d9:e9:7c:d0:86:8f:
                    f4:a8:7e:f5:bd:ef:27:cd:ae:18:7f:a8:1d:7d:05:
                    ed:c5:0b:ab:67:55:29:2c:ca:72:49:59:82:10:57:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:F2:22:B4:CF:57:8A:F7:F3:67:9A:05:2A:F5:8E:2B:0F:E2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b85382ab-f619-3b14-a80c-6805bab9a604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:94:5c:74:46:ee:1e:31:fd:d0:97:9e:b6:a6:da:ed:cd:79:
         2a:33:4c:43:89:e0:3e:f5:c2:2e:b5:9e:79:b0:c2:38:f7:37:
         88:e8:da:fd:3a:ca:6e:31:09:47:2d:99:a6:ae:29:c9:2d:4e:
         f2:b6:54:7b:8c:33:cc:47:df:ab:f1:ad:7a:ba:39:ab:5c:6d:
         82:f0:20:64:4d:55:94:27:a3:8c:7e:d1:ae:8b:3e:ea:02:2e:
         2e:51:d1:c0:d8:88:e3:be:c0:62:e3:27:8e:a1:b8:19:41:4a:
         0e:c5:b1:7a:ff:8d:ca:38:bf:58:6d:62:a6:30:22:18:9f:1a:
         31:bd:c6:a5:18:ca:31:08:04:9b:35:49:aa:6c:55:ab:89:4e:
         34:2d:a4:71:dc:b7:a0:41:ef:05:40:14:fe:74:79:73:14:8a:
         11:44:29:0c:4b:03:f0:8b:65:85:46:34:3e:8d:4e:54:eb:75:
         c9:0f:79:2b:57:84:be:b6:bf:70:45:7e:ac:25:b4:5b:9f:30:
         89:a9:cf:57:fc:51:35:67:78:0e:97:af:f8:00:cc:8c:95:22:
         1b:39:9d:2a:dd:61:d2:2c:ee:9e:da:86:cc:ce:a7:40:02:09:
         52:62:4c:28:14:7e:30:1b:1d:69:ef:ac:d0:da:e0:2b:88:16:
         ee:54:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:39:19 2025 by rpki-client