Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa
File:                     6732bb33-89b4-3063-b515-c3f9e2515ca0.roa (raw, json)
Hash identifier:          fMOV6Daiz6Q/psnHGHJegB/qesPoFzObyEcJ6h7t1pI=
Subject key identifier:   5E:ED:CF:AE:F5:99:07:C8:6A:C7:A0:80:13:5C:40:68:DE:AC:AA:D3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246C9B882733B1143CFC5B0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3356
IP address blocks:        192.208.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c9:b8:82:73:3b:11:43:cf:c5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=6ddf6628-2a78-4cf9-b527-bfc601a9335f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:f7:3c:9a:fc:7c:74:fb:c5:99:0d:37:37:
                    38:66:f7:7f:8a:ef:0c:7a:06:6c:ce:ba:3e:7f:85:
                    3f:81:b4:46:47:44:a6:38:34:72:33:24:79:c8:48:
                    28:22:85:12:df:75:f0:7a:8a:68:16:67:2f:55:81:
                    a9:0b:a3:ec:e5:b6:83:7b:dd:aa:8a:17:23:44:c4:
                    d7:b8:e3:cc:59:f4:63:17:3d:12:99:9d:6f:cc:68:
                    21:3c:38:91:f1:51:bd:7c:44:54:9d:46:27:b2:0a:
                    8b:13:9f:62:ae:d1:a6:6f:40:35:0b:ac:59:2d:88:
                    b2:2e:ef:7d:56:37:28:49:2a:64:21:52:48:42:22:
                    0d:eb:84:93:7f:1f:ba:2d:25:4d:0f:b4:16:34:55:
                    bc:e1:94:d9:63:83:58:54:c8:75:d0:38:13:26:7e:
                    15:fd:cf:b0:a1:c1:48:d5:ee:59:a0:28:69:87:f4:
                    3b:3e:02:eb:85:84:91:77:1c:38:cd:71:74:b1:51:
                    c9:f7:89:91:28:35:85:e6:10:68:f9:bc:0c:8f:6f:
                    17:49:34:da:51:8e:63:59:ba:82:85:da:77:00:29:
                    5d:8b:b3:98:f4:7d:82:6f:3e:87:17:fe:a1:05:95:
                    20:ea:f6:4d:b8:b2:e2:97:95:47:82:4c:3a:04:0f:
                    b9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:ED:CF:AE:F5:99:07:C8:6A:C7:A0:80:13:5C:40:68:DE:AC:AA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8a:1e:81:da:1a:4b:80:8f:84:35:3e:b7:56:80:f7:49:59:
         41:62:3e:52:29:59:98:bc:6b:f3:f7:dc:63:b1:fb:1a:4e:2e:
         75:46:c3:70:63:6b:4a:b9:43:ef:f5:7c:af:c8:25:fb:fe:6f:
         08:e2:7f:cb:06:a9:a7:10:ba:73:64:d0:c5:44:04:ba:57:d6:
         32:83:d8:c3:7f:79:66:84:3b:86:23:f3:54:be:35:82:fa:68:
         ef:e0:79:83:4f:5a:7a:da:67:84:9b:c4:dc:df:07:24:b0:bc:
         0e:13:fd:9a:59:79:30:93:20:74:69:33:65:e1:c8:f2:6a:34:
         5b:15:03:2f:ba:92:a6:5c:1b:10:dd:ed:17:df:f3:26:ae:10:
         13:a5:bd:ae:78:06:15:f9:80:ac:d8:51:68:01:8e:61:0b:9e:
         d1:89:8c:bb:55:75:7e:ac:61:c3:58:9d:b9:9a:3b:93:12:2e:
         21:c0:cb:8f:c0:92:77:63:0a:9c:f2:b2:12:80:3c:c7:d7:8d:
         e5:18:f7:37:75:a8:d4:f2:42:ca:70:bf:39:02:f2:f3:b3:e1:
         6e:45:9c:4f:64:73:2e:97:68:b2:a3:c6:1f:db:1a:93:88:c2:
         b1:18:66:52:f8:3b:cb:56:0d:5f:6d:95:0b:4a:75:62:6d:d4:
         0b:eb:64:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsm4gnM7EUPPxbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NmRkZjY2MjgtMmE3OC00Y2Y5LWI1MjctYmZjNjAxYTkzMzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6r3PJr8fHT7xZkNNzc4Zvd/iu8MegZszro+
f4U/gbRGR0SmODRyMyR5yEgoIoUS33XweopoFmcvVYGpC6Ps5baDe92qihcjRMTX
uOPMWfRjFz0SmZ1vzGghPDiR8VG9fERUnUYnsgqLE59irtGmb0A1C6xZLYiyLu99
VjcoSSpkIVJIQiIN64STfx+6LSVND7QWNFW84ZTZY4NYVMh10DgTJn4V/c+wocFI
1e5ZoChph/Q7PgLrhYSRdxw4zXF0sVHJ94mRKDWF5hBo+bwMj28XSTTaUY5jWbqC
hdp3ACldi7OY9H2Cbz6HF/6hBZUg6vZNuLLil5VHgkw6BA+59QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7tz671mQfIaseggBNcQGjerKrTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjczMmJiMzMtODliNC0z
MDYzLWI1MTUtYzNmOWUyNTE1Y2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNAlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuKHoHaGkuAj4Q1PrdWgPdJWUFiPlIpWZi8a/P33GOx+xpOLnVGw3Bj
a0q5Q+/1fK/IJfv+bwjif8sGqacQunNk0MVEBLpX1jKD2MN/eWaEO4Yj81S+NYL6
aO/geYNPWnraZ4SbxNzfBySwvA4T/ZpZeTCTIHRpM2XhyPJqNFsVAy+6kqZcGxDd
7Rff8yauEBOlva54BhX5gKzYUWgBjmELntGJjLtVdX6sYcNYnbmaO5MSLiHAy4/A
kndjCpzyshKAPMfXjeUY9zd1qNTyQspwvzkC8vOz4W5FnE9kcy6XaLKjxh/bGpOI
wrEYZlL4O8tWDV9tlQtKdWJt1AvrZMA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:35:13 2025 by rpki-client