Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa
File:                     037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa (raw, json)
Hash identifier:          8tItwUtq/sZBZnKiIisDa77zfZC0Bqxv6BkwONwftUs=
Subject key identifier:   24:8E:38:86:F7:DA:C4:07:D7:F0:78:2F:0A:9D:AF:36:96:89:93:50
Certificate issuer:       /CN=eb327032-4e1e-4c38-9cae-206da2d15d25
Certificate serial:       010D0C9F43285847E094C3B510C8C938B22EA880
Authority key identifier: CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     8075
IP address blocks:        157.207.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c3:b5:10:c8:c9:38:b2:2e:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb327032-4e1e-4c38-9cae-206da2d15d25
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=cbfc1d3d-019a-41df-a762-a3ae46ad9ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:4a:89:5a:5b:f7:87:e6:7f:73:f1:c5:f5:
                    82:53:ed:89:2a:f9:a4:68:6e:ca:51:8b:31:c9:a0:
                    bd:5f:d6:35:7c:05:30:96:27:f4:a5:65:67:4e:c2:
                    23:f6:3e:dc:a3:85:7e:ad:86:67:bf:b7:72:e8:a8:
                    57:7c:04:d4:30:72:9b:f5:b5:9a:04:7e:96:15:dd:
                    54:3b:ee:b0:79:b7:b2:af:de:d0:69:34:68:2a:fc:
                    15:df:d9:97:01:a0:90:78:44:fb:c5:39:52:77:b2:
                    91:74:5c:d0:89:ec:af:b8:c8:d7:a3:e0:8b:11:c0:
                    12:3e:d6:15:35:ee:4a:7d:db:f2:b7:bc:92:73:c7:
                    e0:bf:2f:f2:e3:6f:51:1e:7a:76:26:5a:28:09:bf:
                    62:83:b5:3d:cf:ff:ab:97:dd:d2:10:91:45:ae:39:
                    68:ec:5e:06:91:54:3f:da:77:00:b8:4d:11:88:f2:
                    e3:d6:99:60:98:2e:39:17:b9:c6:01:3d:59:b8:03:
                    14:03:43:e8:29:1d:3f:ff:3c:6e:ec:0b:da:80:77:
                    dc:e6:bc:22:3a:b8:bb:7e:e3:91:c8:96:3c:f5:0e:
                    e2:cc:a6:d9:25:4d:f1:cf:39:f4:0b:4c:9b:4f:46:
                    3e:ed:eb:5c:7f:4e:08:2c:3a:0f:3b:17:fa:67:5f:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8E:38:86:F7:DA:C4:07:D7:F0:78:2F:0A:9D:AF:36:96:89:93:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl

            X509v3 Authority Key Identifier:
                keyid:CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.207.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:1b:31:09:1d:4b:30:48:51:c2:a1:1f:86:13:3d:35:74:
         97:48:1d:f3:3e:bf:cf:db:f5:ff:6e:0b:ae:e0:8d:e2:0f:2b:
         4f:5b:80:c0:fd:d6:5f:3d:a8:98:21:49:01:90:fb:d8:2e:5f:
         a0:ab:b6:b7:d8:4d:65:bc:8c:2f:29:ed:35:48:82:b4:37:6c:
         58:4b:c6:bf:3e:d2:b0:cf:32:4e:ee:27:8c:ef:0f:ad:cf:79:
         30:12:24:57:7f:26:f9:e8:5b:f2:cd:27:12:6b:04:bb:39:2c:
         15:89:da:85:e7:1a:89:4c:8b:0c:33:cd:97:cf:f1:88:2b:17:
         c9:08:9f:66:95:90:f6:1d:e2:ee:3d:1a:a6:1a:f3:d4:0d:10:
         79:d7:ed:15:16:02:d6:9e:3e:60:77:3e:5a:93:7c:f0:2f:f2:
         56:97:f3:12:5e:9d:70:72:07:d3:08:68:1f:07:52:c3:09:2c:
         74:7f:d7:90:47:c0:64:f3:12:98:3c:63:5d:1e:92:12:4a:db:
         0b:12:af:6f:90:a9:2d:f2:ce:76:67:f4:87:ee:a9:cb:6d:fa:
         e2:25:96:e6:67:f7:27:ab:f8:6f:d7:8b:f0:ee:61:08:3f:bd:
         51:8c:42:84:45:ac:ca:c3:c6:20:2f:b2:b5:e0:82:4f:5d:3d:
         66:e1:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:59 2024 by rpki-client on console-fra.rpki-client.org