Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b9afa7-136f-3714-9c58-628cb7e80db3.roa
File:                     40b9afa7-136f-3714-9c58-628cb7e80db3.roa (raw, json)
Hash identifier:          XK6bwbIU1w5BC4UTfyDzpKy2oLpxzm14rgxuMvQOgoI=
Subject key identifier:   DF:57:8E:3F:CD:60:19:A3:E8:50:0B:4C:4C:21:45:66:57:E5:6B:70
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A23C00DF45A88A7198C1FFA40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b9afa7-136f-3714-9c58-628cb7e80db3.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     202
IP address blocks:        15.176.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0d:f4:5a:88:a7:19:8c:1f:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=5fb7ad26-b151-4292-ba1b-606b1c585a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:20:8a:0f:64:0b:c7:b3:6c:28:d0:64:4e:
                    7a:15:0a:ad:35:b2:a9:84:e8:c2:28:42:52:a9:0f:
                    16:23:62:99:c1:f2:b7:d2:71:bc:20:fd:53:bb:26:
                    40:6f:fd:d5:90:6b:14:0f:ba:56:c9:42:fa:3a:dc:
                    fe:58:6c:bf:08:70:2f:ce:27:2a:18:de:30:a6:95:
                    06:15:6c:bc:a6:b3:96:42:fd:de:e7:95:2d:d3:bc:
                    58:01:4f:03:9f:49:7c:9f:c3:4e:ba:18:59:79:56:
                    6d:a0:8e:22:18:6d:b8:a8:84:08:3b:c3:08:c1:fd:
                    ab:ee:4c:11:89:4d:0a:74:91:a9:c7:5f:d9:ba:b3:
                    43:40:7b:e1:cb:6a:92:28:a6:7e:09:d0:ef:a1:d3:
                    69:51:6d:7f:a4:61:91:f5:d9:ad:6f:73:4c:d0:6c:
                    88:e3:47:31:6e:30:bc:8b:0d:c0:79:d2:38:3b:7c:
                    13:c8:33:86:d4:1e:bc:77:a6:49:c3:1e:b2:c9:49:
                    92:fa:20:d8:11:00:16:50:56:fc:f7:88:01:6f:29:
                    c1:2b:8a:f6:e2:e2:90:22:f2:bf:e2:b0:ab:42:82:
                    1a:d2:d9:c1:4c:01:fb:6f:c7:f8:1e:27:56:be:39:
                    0a:54:6f:15:88:21:f2:b4:4b:d8:58:8f:a8:80:85:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:57:8E:3F:CD:60:19:A3:E8:50:0B:4C:4C:21:45:66:57:E5:6B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b9afa7-136f-3714-9c58-628cb7e80db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:72:69:be:3a:3c:b5:a7:fd:f8:86:b3:cb:7f:d4:2f:c2:
         20:8b:01:70:47:09:7e:9e:6f:9e:38:0b:3a:3d:f8:5f:b6:91:
         9f:e9:94:bb:3b:db:56:22:ed:1c:ef:b8:68:c3:b9:14:65:10:
         51:96:32:d2:ac:e2:18:8a:cb:b7:37:5c:70:39:9d:ec:97:76:
         bb:a5:0f:c4:d0:83:e7:95:18:f3:a6:50:2c:7f:7c:49:f6:32:
         e2:dd:e7:c9:6d:70:c3:83:24:94:76:a1:8a:09:c0:ad:95:95:
         1a:e8:81:60:2b:2e:43:f7:85:c7:08:63:4e:87:05:7e:30:a0:
         34:02:9b:34:87:ba:84:a8:30:56:c8:7d:96:dc:9f:21:db:e2:
         27:e6:ab:ec:2d:e9:22:a0:f3:db:39:35:0b:1a:6c:0d:c9:38:
         92:f2:ab:7d:f4:75:3a:d2:bf:20:5f:cb:fd:2d:09:5f:fc:d7:
         3b:52:1d:f6:e2:80:d8:53:14:37:5d:ab:37:06:6b:7a:35:82:
         60:d6:77:21:71:96:1b:02:a9:f9:5e:23:fc:7b:1d:a7:28:df:
         f4:38:9e:75:47:e6:83:a9:b9:58:f7:b5:17:ec:fd:40:2a:2a:
         9d:9b:fe:39:8b:a5:ef:f4:43:96:83:e6:7a:2f:22:6d:e5:61:
         e0:74:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:48:54 2025 by rpki-client