Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa
File:                     037804c2-e65c-3513-b219-6bff621c810f.roa (raw, json)
Hash identifier:          QNW/XG9v4xIdnP76rPJC3Ue6zyucY7dbNXtx6mIk6Zw=
Subject key identifier:   D1:D8:3B:F2:70:82:9C:9E:D0:CE:7D:74:C9:83:AF:3C:E5:50:EB:35
Certificate issuer:       /CN=7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158
Certificate serial:       010D0C9F4328584554981A8108A6C514CC273380
Authority key identifier: 28:F6:4B:EA:12:08:2C:FE:26:90:08:15:D5:3D:99:F6:12:C0:77:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     400620
IP address blocks:        207.174.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1a:81:08:a6:c5:14:cc:27:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=b41b4e91-e28b-41e8-8a08-ae5d7dd8a8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:ae:4d:0e:09:28:45:91:2f:39:cd:c3:be:
                    d3:90:41:ba:93:5f:33:6f:06:4a:f2:de:a9:54:e4:
                    01:1d:e7:ae:ca:7d:91:a0:f3:77:5b:ba:c6:bf:14:
                    1f:fe:fe:09:63:a7:42:a0:d6:0d:6f:5c:4c:aa:c2:
                    16:08:9f:f0:54:03:d4:11:cf:e5:b0:8e:0a:a7:5f:
                    dc:cf:93:8f:d3:ec:cf:1c:6a:ab:a5:98:ea:28:b6:
                    eb:df:58:e0:e5:51:7b:06:78:97:f3:12:5b:8f:4e:
                    5e:56:51:76:a6:63:02:01:31:9b:12:4c:94:63:a4:
                    be:a6:be:be:50:7c:fc:36:51:07:6a:22:19:a6:db:
                    fa:fe:85:28:c4:b7:2e:dc:11:68:b6:07:20:dc:97:
                    41:b2:3c:d0:a0:6c:e6:90:4d:ac:e1:de:53:88:06:
                    ac:d6:90:35:2e:92:51:c9:4d:32:62:ec:26:b0:19:
                    73:11:19:77:77:11:65:55:44:6d:58:6e:e3:12:03:
                    7f:d5:8c:e3:85:8a:27:2f:25:1b:cf:17:59:20:aa:
                    1f:ee:9b:23:92:0b:98:52:be:31:90:b0:5b:94:8a:
                    26:80:98:da:1b:e0:20:9b:ad:f7:f2:17:1d:41:4d:
                    1d:de:64:dc:f5:75:81:84:cf:27:aa:a5:d4:bf:96:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:3B:F2:70:82:9C:9E:D0:CE:7D:74:C9:83:AF:3C:E5:50:EB:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.crl

            X509v3 Authority Key Identifier:
                keyid:28:F6:4B:EA:12:08:2C:FE:26:90:08:15:D5:3D:99:F6:12:C0:77:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:fc:f4:d8:9f:79:2f:17:b0:c4:9b:ea:da:d5:87:03:19:f8:
         42:e0:e9:1c:b8:c6:6b:80:ea:a7:d2:70:0c:3b:d6:5d:bc:7c:
         2b:81:34:26:f0:80:36:e1:f9:6b:79:bb:86:21:c2:f1:ce:34:
         5d:cd:7b:0a:3a:53:e9:9b:72:89:53:b4:27:8c:4c:ab:48:46:
         a5:8a:f9:6b:50:11:51:4a:19:6e:4a:e7:16:1c:73:df:d7:b3:
         e3:11:f6:69:63:af:69:e6:ed:bb:81:86:68:84:b0:41:fd:02:
         28:6d:48:cd:0f:66:d0:3a:7e:30:16:6c:0b:c1:13:31:38:90:
         7f:63:8a:c2:4b:4b:5d:cf:92:01:be:07:59:cb:72:e0:c0:17:
         0a:b0:69:22:e7:9f:bb:4b:46:f5:e2:ba:2e:35:c5:d7:38:2b:
         7b:bc:79:5d:07:b0:59:1f:b0:5b:7b:a4:a1:4e:70:df:3c:cb:
         66:73:21:f4:30:60:a6:00:a5:52:33:14:06:26:a3:ad:f8:ed:
         96:79:ad:8f:0d:47:1c:44:fd:93:2c:9c:d0:8f:f3:3f:a6:9a:
         d1:e9:e5:0e:bd:fd:66:4a:6f:c7:b3:be:fb:75:aa:6b:ba:99:
         f9:09:10:6f:92:64:d4:ef:98:85:52:78:2a:de:43:41:cf:b3:
         dc:d5:6e:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVUmBqBCKbFFMwnM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2I3NmZlNWMtZWMyYS00YmQ3LTllMGQtODYzYTJkZGYy
MTU4MB4XDTI0MDMyNjAxMDAyNVoXDTI0MDYyNDAxMDAyNVowLzEtMCsGA1UEAxMk
YjQxYjRlOTEtZTI4Yi00MWU4LThhMDgtYWU1ZDdkZDhhOGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSCuTQ4JKEWRLznNw77TkEG6k18zbwZK8t6p
VOQBHeeuyn2RoPN3W7rGvxQf/v4JY6dCoNYNb1xMqsIWCJ/wVAPUEc/lsI4Kp1/c
z5OP0+zPHGqrpZjqKLbr31jg5VF7BniX8xJbj05eVlF2pmMCATGbEkyUY6S+pr6+
UHz8NlEHaiIZptv6/oUoxLcu3BFotgcg3JdBsjzQoGzmkE2s4d5TiAas1pA1LpJR
yU0yYuwmsBlzERl3dxFlVURtWG7jEgN/1YzjhYonLyUbzxdZIKof7psjkguYUr4x
kLBblIomgJjaG+Agm6338hcdQU0d3mTc9XWBhM8nqqXUv5YRLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHYO/Jwgpye0M59dMmDrzzlUOs1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83Yjc2
ZmU1Yy1lYzJhLTRiZDctOWUwZC04NjNhMmRkZjIxNTgvMDM3ODA0YzItZTY1Yy0z
NTEzLWIyMTktNmJmZjYyMWM4MTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2I3NmZlNWMtZWMyYS00YmQ3LTll
MGQtODYzYTJkZGYyMTU4LzdiNzZmZTVjLWVjMmEtNGJkNy05ZTBkLTg2M2EyZGRm
MjE1OC5jcmwwHwYDVR0jBBgwFoAUKPZL6hIILP4mkAgV1T2Z9hLAd/0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83Yjc2ZmU1Yy1lYzJhLTRiZDctOWUwZC04NjNh
MmRkZjIxNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHX89NifeS8XsMSb6trVhwMZ+ELg6Ry4xmuA6qfScAw71l28fCuBNCbw
gDbh+Wt5u4YhwvHONF3Newo6U+mbcolTtCeMTKtIRqWK+WtQEVFKGW5K5xYcc9/X
s+MR9mljr2nm7buBhmiEsEH9AihtSM0PZtA6fjAWbAvBEzE4kH9jisJLS13PkgG+
B1nLcuDAFwqwaSLnn7tLRvXiui41xdc4K3u8eV0HsFkfsFt7pKFOcN88y2ZzIfQw
YKYApVIzFAYmo6347ZZ5rY8NRxxE/ZMsnNCP8z+mmtHp5Q69/WZKb8ezvvt1qmu6
mfkJEG+SZNTvmIVSeCreQ0HPs9zVbow=
-----END CERTIFICATE-----
Generated at Tue Jun 4 01:21:58 2024 by rpki-client on console-fra.rpki-client.org