Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20e3bf9f-e983-3def-99c9-0ed07dbcf3b5.roa
File:                     20e3bf9f-e983-3def-99c9-0ed07dbcf3b5.roa (raw, json)
Hash identifier:          16muYv3fHU6JseVJzKY8hsaROl9UecgabXCvqSOLas4=
Subject key identifier:   85:0F:CD:4A:D9:E1:DF:0A:72:9B:45:3D:73:75:02:CA:45:EE:C0:B1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499DBF36390F4F9F5083509B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20e3bf9f-e983-3def-99c9-0ed07dbcf3b5.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     3360
IP address blocks:        207.37.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:36:39:0f:4f:9f:50:83:50:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=5fb5620b-cefa-49cb-9afd-2557847157ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d5:36:29:d4:3d:48:43:4a:e9:9e:93:c8:8b:
                    98:92:58:1a:d4:eb:d8:7a:4a:aa:3f:a6:fa:74:7e:
                    4e:50:3b:c3:fa:35:a8:6b:1a:c9:b6:45:af:85:b4:
                    10:80:0d:a0:3a:e1:a2:ea:fe:74:e8:a7:e0:0d:b9:
                    47:d9:f3:a7:1f:1c:23:5f:44:a5:61:d9:ee:03:46:
                    f0:78:76:97:cd:bd:32:12:ff:98:ad:2e:09:d2:77:
                    a9:01:1d:9a:34:57:07:ab:61:44:f1:eb:13:24:87:
                    1f:91:49:14:88:d9:65:89:2d:08:23:47:17:24:2d:
                    26:95:7c:24:79:5e:d7:d9:8b:6f:56:47:0e:dc:9f:
                    e1:4f:78:97:f4:83:0d:9a:a6:1f:60:9c:a3:b4:64:
                    8e:df:09:66:a6:04:4d:f3:0d:52:16:6d:d6:b3:9b:
                    c4:15:9c:82:2a:82:9c:18:28:6d:ff:f4:c3:6f:3d:
                    dc:bc:b0:f0:e7:e7:17:c3:17:24:61:c3:a4:65:00:
                    b0:15:7d:87:bf:b3:d8:ec:06:cd:54:ef:fe:43:14:
                    a8:97:a9:ec:de:b2:dd:d9:2b:af:f1:c5:ce:10:61:
                    23:31:70:5b:fc:08:c9:18:32:2e:2e:4d:a1:a9:88:
                    40:f8:be:37:03:ab:3f:cb:50:cd:58:ba:4a:d5:2a:
                    ba:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0F:CD:4A:D9:E1:DF:0A:72:9B:45:3D:73:75:02:CA:45:EE:C0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20e3bf9f-e983-3def-99c9-0ed07dbcf3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.37.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:61:f0:da:e2:60:aa:3d:43:71:9e:3b:e4:c7:36:62:89:1c:
         65:52:b6:8c:37:2e:d4:df:a6:e5:2f:1a:4e:75:cf:2e:a2:b0:
         5f:f5:15:9f:c7:9d:e1:80:aa:7e:fa:97:39:be:4c:63:b5:74:
         86:fe:bf:b8:06:2b:39:8e:cf:02:d4:4f:a6:73:4e:ba:1d:c2:
         15:0a:d5:46:92:0e:25:89:83:c8:26:49:e0:90:03:90:15:be:
         a3:59:de:aa:78:39:69:86:cf:a9:2b:43:69:ce:e0:43:7c:bf:
         ab:dc:6e:5b:f9:b8:e7:e2:ba:c7:2d:4a:f4:7f:11:b3:db:d6:
         d3:d4:94:36:0d:1f:95:11:7f:1c:d1:75:54:43:7b:04:11:1c:
         49:0e:57:dc:a4:0d:e8:98:0a:a5:d4:06:fa:33:e3:89:24:3b:
         77:08:77:4e:0a:88:c2:63:a1:ec:c2:14:54:a0:ec:f3:c2:d6:
         3e:e6:1d:f7:40:30:19:91:b9:40:7c:02:72:c2:64:21:96:4a:
         0d:3d:cd:ef:18:f6:7c:9e:9b:7d:b7:8e:74:5d:74:d3:12:b3:
         9c:85:66:67:2e:cc:f0:0e:7e:b7:06:a1:b9:3e:4a:5d:94:95:
         b0:a1:d2:b9:56:e2:44:15:0d:66:52:7f:67:61:c0:d2:44:a8:
         86:ea:2a:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzY5D0+fUINQmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
NWZiNTYyMGItY2VmYS00OWNiLTlhZmQtMjU1Nzg0NzE1N2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dU2KdQ9SENK6Z6TyIuYklga1OvYekqqP6b6
dH5OUDvD+jWoaxrJtkWvhbQQgA2gOuGi6v506KfgDblH2fOnHxwjX0SlYdnuA0bw
eHaXzb0yEv+YrS4J0nepAR2aNFcHq2FE8esTJIcfkUkUiNlliS0II0cXJC0mlXwk
eV7X2YtvVkcO3J/hT3iX9IMNmqYfYJyjtGSO3wlmpgRN8w1SFm3Ws5vEFZyCKoKc
GCht//TDbz3cvLDw5+cXwxckYcOkZQCwFX2Hv7PY7AbNVO/+QxSol6ns3rLd2Suv
8cXOEGEjMXBb/AjJGDIuLk2hqYhA+L43A6s/y1DNWLpK1Sq6WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIUPzUrZ4d8KcptFPXN1AspF7sCxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjBlM2JmOWYtZTk4My0z
ZGVmLTk5YzktMGVkMDdkYmNmM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzyW8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlh8NriYKo9Q3GeO+THNmKJHGVStow3LtTfpuUvGk51zy6isF/1FZ/H
neGAqn76lzm+TGO1dIb+v7gGKzmOzwLUT6ZzTrodwhUK1UaSDiWJg8gmSeCQA5AV
vqNZ3qp4OWmGz6krQ2nO4EN8v6vcblv5uOfiusctSvR/EbPb1tPUlDYNH5URfxzR
dVRDewQRHEkOV9ykDeiYCqXUBvoz44kkO3cId04KiMJjoezCFFSg7PPC1j7mHfdA
MBmRuUB8AnLCZCGWSg09ze8Y9nyem323jnRddNMSs5yFZmcuzPAOfrcGobk+Sl2U
lbCh0rlW4kQVDWZSf2dhwNJEqIbqKuQ=
-----END CERTIFICATE-----
Generated at Thu May 8 16:19:51 2025 by rpki-client