Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c88c17fc-d4c5-3603-bb31-1860643fec7e.roa
File:                     c88c17fc-d4c5-3603-bb31-1860643fec7e.roa (raw, json)
Hash identifier:          nHrML8Ao0y5BXirtUwY3fpBGbBXIEY7gGLYincjFpV8=
Subject key identifier:   CA:2B:4D:6D:5E:14:25:4C:69:E3:DF:2F:0B:19:74:36:91:A1:02:BB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584785BBA38D951D1B4BB3F85700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c88c17fc-d4c5-3603-bb31-1860643fec7e.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     203
IP address blocks:        15.176.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a3:8d:95:1d:1b:4b:b3:f8:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=8c27dd22-8a33-4454-9e65-c8b13ebbe01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:4e:f0:4c:95:08:92:dc:b7:40:19:fd:fe:
                    5f:7f:66:bb:9f:a5:7d:67:3a:15:2a:0d:22:6f:05:
                    58:0c:e3:f7:18:f7:13:70:1f:fd:30:2e:fe:48:d5:
                    6e:bf:ab:0b:d2:0a:c3:f6:ad:79:45:dc:96:3e:13:
                    3d:9b:e1:ce:6b:35:d8:29:8b:cc:2f:25:6b:55:39:
                    93:06:ae:39:7b:9c:ed:50:25:9f:9a:ba:37:9c:db:
                    79:2c:1f:75:5d:be:1b:80:ac:60:7e:2c:4e:ec:97:
                    5f:3d:91:5c:d9:98:38:b0:5d:3e:a9:58:f0:12:e7:
                    31:4e:cf:8a:a8:ae:bf:94:b1:ac:4a:eb:c1:71:39:
                    67:54:42:ab:76:4e:67:b1:f1:b9:6d:b4:4d:8a:95:
                    72:4f:79:f5:f0:a0:4d:b3:66:d2:4f:af:5a:24:31:
                    3e:8e:ab:4c:91:19:88:f9:fa:22:84:44:be:67:ce:
                    fb:8c:29:4e:8f:06:4f:84:a6:47:1b:61:a6:e7:96:
                    34:11:a6:d0:c7:47:6e:4c:32:86:3c:03:42:0d:d2:
                    86:c2:d7:82:0e:b4:ea:86:11:e3:6f:b1:42:e1:ca:
                    ef:70:c7:fa:2a:da:b6:71:a0:c6:41:36:59:8b:ac:
                    8e:1f:ac:27:f9:df:cb:02:e7:0a:81:21:f1:af:ba:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2B:4D:6D:5E:14:25:4C:69:E3:DF:2F:0B:19:74:36:91:A1:02:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c88c17fc-d4c5-3603-bb31-1860643fec7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:15:0c:af:d1:36:26:98:d3:46:74:6f:67:de:43:42:24:13:
         bc:8c:e6:d2:d0:68:6a:66:7a:61:f8:c9:62:04:95:f8:bb:d7:
         76:73:cb:44:c6:7f:f4:a7:dc:61:25:37:d9:0d:c2:82:53:4c:
         32:12:da:ed:87:64:8e:8f:10:0a:bf:fe:42:4b:95:3d:dc:27:
         1d:37:6c:25:fa:be:28:8b:75:4c:36:5d:c1:33:42:a9:62:68:
         66:80:e8:31:cc:96:a0:8c:82:27:ba:54:1e:02:a8:9e:69:79:
         8c:93:1f:08:eb:35:63:ea:50:5d:46:1c:6a:54:71:ec:bb:90:
         ea:a6:02:b9:c3:ca:a9:9a:bd:91:d7:11:12:3d:77:6a:a4:3d:
         3d:43:79:06:47:11:17:16:55:dc:62:51:06:f9:72:6f:9b:32:
         29:3b:8f:05:89:ed:b3:ec:58:b1:88:3e:c6:f1:22:b8:04:f2:
         58:06:ed:9f:6a:e7:6b:41:49:84:46:f5:fb:0e:11:07:18:26:
         40:8b:ab:2c:e2:d5:c9:e2:00:e5:59:4c:5b:9e:81:9d:ed:a4:
         83:62:bf:f7:69:19:b3:a7:ef:86:17:3c:11:1c:8e:6a:fa:10:
         3a:9d:72:11:68:14:93:32:a8:74:10:4d:a7:8d:8b:dd:cc:57:
         bd:e5:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:42 2024 by rpki-client on console-fra.rpki-client.org