Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a85847e-fa46-365e-8eec-7684731fe13c.roa
File:                     1a85847e-fa46-365e-8eec-7684731fe13c.roa (raw, json)
Hash identifier:          3ElY/CaBiihnWhs5A1ht58pemr2LiFa7kvSBlGwSeGg=
Subject key identifier:   D7:A6:C7:09:8C:E6:3E:1A:35:1B:05:7E:40:31:D0:5B:3E:1C:D6:16
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B68FCAB3C575EAEEC52226C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a85847e-fa46-365e-8eec-7684731fe13c.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     202
IP address blocks:        15.176.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:ab:3c:57:5e:ae:ec:52:22:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=c96d8e13-b5f4-46bc-98ee-2ef0840b491f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:d8:e1:af:fb:5b:82:3d:6f:46:1d:c1:af:
                    b7:af:69:06:c5:ff:46:db:1c:8d:6b:78:b6:bb:83:
                    5c:5e:c0:81:bb:8a:7f:04:d9:cc:49:47:49:a9:f2:
                    84:2b:f5:0a:c4:ed:8b:32:78:86:87:6d:66:7c:04:
                    c1:f3:05:ee:32:4a:da:8f:17:22:a9:80:80:9a:c8:
                    07:81:bf:0f:8c:66:95:4c:2c:1b:ae:33:5b:2f:d7:
                    89:8f:a1:a0:5d:01:7f:44:7a:1e:4f:e2:bd:e8:b4:
                    eb:9e:11:80:18:2e:21:14:dd:70:cb:c2:a3:76:e9:
                    0a:36:93:78:2c:fd:45:8b:4e:48:22:7c:46:bf:3b:
                    64:ce:0b:4f:4c:f5:78:d4:1f:83:6c:7a:99:a4:c5:
                    55:b3:a7:47:81:81:92:8a:03:4d:9c:36:ff:94:e8:
                    0e:21:18:f7:79:6f:47:30:b1:76:64:7f:2a:a9:dd:
                    99:17:99:a5:27:c7:40:56:36:c0:41:b6:f2:aa:0a:
                    af:56:a5:64:c3:57:a2:0f:87:7e:f8:d7:f4:be:82:
                    3c:01:5b:bd:7e:61:a8:bc:b6:cb:4a:48:4e:8f:3e:
                    6b:69:2c:25:4b:9c:f6:6c:28:3b:d8:f4:6b:fa:77:
                    39:93:8d:c2:9e:29:e4:4b:cb:c3:0d:9c:99:9b:e1:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:C7:09:8C:E6:3E:1A:35:1B:05:7E:40:31:D0:5B:3E:1C:D6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a85847e-fa46-365e-8eec-7684731fe13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:25:41:0b:7a:e8:0e:d3:5b:cf:a2:4a:f7:7e:96:20:bd:
         4e:4c:5c:0a:71:23:d3:a6:0e:72:75:e3:29:b4:d9:06:56:17:
         82:2f:f2:ed:46:f7:02:76:3a:f2:e1:4f:a6:a3:47:c0:d4:60:
         d0:3e:39:88:64:2e:a4:44:05:0b:dc:10:92:9d:c8:7c:a8:e7:
         38:5b:7a:c5:2f:dc:2c:e9:1c:4a:7f:c6:70:0b:6e:4f:de:b3:
         b5:8b:b0:79:24:f7:c9:ed:86:33:4f:77:67:58:61:f7:c1:3a:
         20:b5:8c:e5:66:6c:d1:31:91:df:63:af:5b:de:18:9e:82:46:
         0b:9b:4f:aa:7e:9f:09:c2:13:2a:41:9d:b5:74:d6:66:c5:71:
         5c:f8:ca:4a:16:62:dc:40:51:6f:67:31:c2:a5:bb:49:17:0a:
         78:77:86:61:42:87:d1:c5:f7:e9:fe:9c:17:4a:38:0a:12:39:
         2b:89:7e:13:74:ba:f4:b9:b4:ff:52:08:d7:3b:b4:a3:17:85:
         0a:91:84:9f:4f:a9:d3:da:9c:1c:f9:4f:dd:82:e3:84:0e:58:
         e5:44:29:8f:7e:f0:1e:5a:8c:19:51:3f:f2:80:ec:b5:c5:a9:
         99:bc:e3:ea:60:8d:09:33:9f:df:75:4e:46:99:60:b8:ba:fc:
         90:4a:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:51 2025 by rpki-client