Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa
File:                     037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa (raw, json)
Hash identifier:          mWewaNhhTX3oIJH/U7ZJ9QJ/d5h/hHjEez0ZV/DOEcU=
Subject key identifier:   A1:C6:75:AB:3D:5F:19:50:61:87:10:E2:79:FE:91:56:EC:8F:0D:61
Certificate issuer:       /CN=eb327032-4e1e-4c38-9cae-206da2d15d25
Certificate serial:       010D0C9F43285845407A1C146646A8333E12CE80
Authority key identifier: CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa
Signing time:             Mon 18 Mar 2024 20:03:51 +0000
ROA not before:           Mon 18 Mar 2024 20:03:51 +0000
ROA not after:            Sun 16 Jun 2024 20:03:51 +0000
asID:                     8075
IP address blocks:        157.207.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:7a:1c:14:66:46:a8:33:3e:12:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb327032-4e1e-4c38-9cae-206da2d15d25
        Validity
            Not Before: Mar 18 20:03:51 2024 GMT
            Not After : Jun 16 20:03:51 2024 GMT
        Subject: CN=31f88efc-6daa-4863-88f1-730638199242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:51:d1:8e:25:be:9c:f3:0c:7b:71:56:93:
                    e3:de:94:55:03:f2:4a:4a:95:9c:ea:58:dc:48:66:
                    92:80:9d:bc:a3:e9:62:3a:17:48:1c:40:24:d0:95:
                    78:39:5c:26:e4:9d:01:04:a6:52:a5:ed:bd:6f:d2:
                    aa:06:16:19:08:f5:53:61:57:1f:c8:e2:f2:ab:56:
                    ed:18:d5:c3:0c:15:42:53:8f:a3:dd:0e:e4:50:7c:
                    31:a1:47:0e:27:33:6f:19:d8:87:7b:ef:55:b6:a4:
                    77:18:91:99:ff:a9:0e:18:5b:ae:02:69:3d:63:f8:
                    a8:58:8e:7f:cb:ad:c2:2b:38:72:d1:de:0b:6d:5c:
                    66:9f:8a:11:de:1b:01:f3:58:a3:de:3f:a3:2c:c9:
                    5a:be:25:90:50:9e:eb:17:0f:dd:48:f0:34:c8:f9:
                    22:3b:90:a1:3d:81:d9:05:08:9c:41:ec:4c:1f:a9:
                    55:34:a9:27:1b:88:7c:a8:86:b7:23:8f:a3:37:2e:
                    1f:8d:58:8f:aa:f2:1a:87:96:06:87:c5:a0:56:52:
                    2b:a6:ba:9b:f1:d6:8f:db:22:2f:83:7e:03:a4:6a:
                    e7:5a:86:cc:13:10:3a:a9:68:df:32:44:b1:2d:73:
                    d4:9b:9f:d3:94:0f:8c:8f:de:46:68:1b:fb:57:d8:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:75:AB:3D:5F:19:50:61:87:10:E2:79:FE:91:56:EC:8F:0D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl

            X509v3 Authority Key Identifier:
                keyid:CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.207.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d5:71:49:0a:bb:d9:33:46:19:45:af:6e:ee:96:f9:a8:42:
         c3:d7:42:45:13:9b:01:c9:d1:3b:40:6b:83:04:9c:c9:cf:6c:
         75:66:e6:81:00:80:5e:ee:6d:33:7c:63:52:cd:48:aa:d8:e6:
         57:db:d4:4d:84:38:ee:bb:ed:78:ae:a3:3a:23:a6:29:d0:38:
         5e:21:43:d9:02:8c:37:d5:83:da:7b:58:5a:a1:a0:f3:60:3e:
         b4:46:4e:f0:97:3c:11:5a:39:a4:16:41:15:2d:59:1e:2a:7f:
         75:58:84:ba:12:1d:2c:32:ea:d2:af:c7:e4:9b:c1:8a:e3:2c:
         fb:51:0c:08:ec:fa:e1:e3:2c:0b:13:c5:63:f0:b5:1a:6d:79:
         16:4b:f3:d5:37:9d:46:7f:d6:06:62:14:68:54:19:2c:55:02:
         20:c1:d5:7b:ab:e4:90:cd:87:f3:e2:b0:a3:3c:9f:5a:c1:4f:
         c8:2b:f6:18:a2:07:f1:01:f9:2d:a0:a7:e6:aa:a6:12:08:85:
         b1:96:a5:aa:8f:a4:d7:9d:c0:31:8d:df:57:eb:a6:ba:ed:57:
         be:88:df:58:46:c2:0d:3c:7b:09:7a:5b:2e:6c:f4:62:01:1e:
         81:89:1e:a3:42:dc:ef:16:89:81:2f:0f:75:ed:de:20:27:c5:
         b5:e2:6d:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAehwUZkaoMz4SzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIzMjcwMzItNGUxZS00YzM4LTljYWUtMjA2ZGEyZDE1
ZDI1MB4XDTI0MDMxODIwMDM1MVoXDTI0MDYxNjIwMDM1MVowLzEtMCsGA1UEAxMk
MzFmODhlZmMtNmRhYS00ODYzLTg4ZjEtNzMwNjM4MTk5MjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2tR0Y4lvpzzDHtxVpPj3pRVA/JKSpWc6ljc
SGaSgJ28o+liOhdIHEAk0JV4OVwm5J0BBKZSpe29b9KqBhYZCPVTYVcfyOLyq1bt
GNXDDBVCU4+j3Q7kUHwxoUcOJzNvGdiHe+9VtqR3GJGZ/6kOGFuuAmk9Y/ioWI5/
y63CKzhy0d4LbVxmn4oR3hsB81ij3j+jLMlaviWQUJ7rFw/dSPA0yPkiO5ChPYHZ
BQicQexMH6lVNKknG4h8qIa3I4+jNy4fjViPqvIah5YGh8WgVlIrprqb8daP2yIv
g34DpGrnWobMExA6qWjfMkSxLXPUm5/TlA+Mj95GaBv7V9hQ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHGdas9XxlQYYcQ4nn+kVbsjw1hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjMy
NzAzMi00ZTFlLTRjMzgtOWNhZS0yMDZkYTJkMTVkMjUvMDM3ZjVkNzUtNGU5YS0z
MjY3LThhMDMtYTM0MDM0YWEwYmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzMjcwMzItNGUxZS00YzM4LTlj
YWUtMjA2ZGEyZDE1ZDI1L2ViMzI3MDMyLTRlMWUtNGMzOC05Y2FlLTIwNmRhMmQx
NWQyNS5jcmwwHwYDVR0jBBgwFoAUz3EKyzldXUNqpsLL08zLzSi1RHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lYjMyNzAzMi00ZTFlLTRjMzgtOWNhZS0yMDZk
YTJkMTVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnc8cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbVcUkKu9kzRhlFr27ulvmoQsPXQkUTmwHJ0TtAa4MEnMnPbHVm5oEA
gF7ubTN8Y1LNSKrY5lfb1E2EOO677XiuozojpinQOF4hQ9kCjDfVg9p7WFqhoPNg
PrRGTvCXPBFaOaQWQRUtWR4qf3VYhLoSHSwy6tKvx+SbwYrjLPtRDAjs+uHjLAsT
xWPwtRpteRZL89U3nUZ/1gZiFGhUGSxVAiDB1Xur5JDNh/PisKM8n1rBT8gr9hii
B/EB+S2gp+aqphIIhbGWpaqPpNedwDGN31frprrtV76I31hGwg08ewl6Wy5s9GIB
HoGJHqNC3O8WiYEvD3Xt3iAnxbXibes=
-----END CERTIFICATE-----
Generated at Sun May 19 16:43:23 2024 by rpki-client on console-fra.rpki-client.org