Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855c86c4-8a3f-3138-957a-46a5e78472a4.roa
File:                     855c86c4-8a3f-3138-957a-46a5e78472a4.roa (raw, json)
Hash identifier:          ZRBcIfOHlTjV3YG7wM2JtYy9ctykqSpTGXr9s+sylLc=
Subject key identifier:   7D:B6:5F:B9:12:AC:A7:3C:9B:C4:81:67:27:2D:4B:D5:B7:AE:64:1F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DE6AFBDE4BECDB54E71D83B4
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855c86c4-8a3f-3138-957a-46a5e78472a4.roa
Signing time:             Wed 13 Nov 2024 19:24:58 +0000
ROA not before:           Wed 13 Nov 2024 19:24:58 +0000
ROA not after:            Tue 11 Feb 2025 19:24:58 +0000
asID:                     3356
IP address blocks:        207.37.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:de:6a:fb:de:4b:ec:db:54:e7:1d:83:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 13 19:24:58 2024 GMT
            Not After : Feb 11 19:24:58 2025 GMT
        Subject: CN=15b728a0-f975-43c5-926c-2127c74c067b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:77:5b:f2:d5:40:84:9b:41:6f:5e:fb:76:
                    55:65:0d:1e:20:ba:50:b0:26:b5:0c:d8:d5:96:97:
                    2f:57:b2:09:35:34:c8:e5:b2:8b:72:77:05:ba:6b:
                    59:de:ed:25:bc:48:62:77:33:7b:bc:02:fe:bc:07:
                    04:dc:3b:df:3b:f5:1e:99:1e:98:01:17:30:73:23:
                    7f:5a:e6:88:dc:63:24:73:22:4b:ed:a2:11:bc:da:
                    e8:5f:de:fa:79:53:ec:04:bd:19:d9:09:93:f6:30:
                    e6:33:69:1c:0b:a4:98:5e:88:3c:e9:10:b3:8d:3c:
                    3d:42:ab:52:11:e0:ea:68:05:5f:2e:e1:1e:44:ad:
                    47:63:c2:e9:87:eb:cd:52:37:a4:d0:14:40:22:2b:
                    77:70:d6:1d:d6:24:3a:57:de:22:1b:69:8a:f0:2c:
                    03:32:df:cc:f5:7d:2e:b9:de:25:0d:d0:6c:bb:f3:
                    d2:e4:97:fa:d2:20:a9:f3:8e:38:5b:34:fc:b3:72:
                    26:ae:7a:2a:86:ff:a1:4f:71:03:f8:db:ca:9d:fa:
                    2a:96:a9:3e:93:68:0c:83:10:f2:70:81:b9:23:5c:
                    00:dc:04:3c:04:84:15:50:b6:f5:30:38:68:ab:f2:
                    96:e1:11:1c:e9:10:c8:5b:f9:31:a1:a2:45:4e:01:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B6:5F:B9:12:AC:A7:3C:9B:C4:81:67:27:2D:4B:D5:B7:AE:64:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855c86c4-8a3f-3138-957a-46a5e78472a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.37.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:75:47:3a:54:e8:ab:96:a0:70:99:5e:7f:3e:a8:ad:1d:
         35:38:33:97:65:5b:65:a6:8f:92:8d:69:7e:89:f6:76:11:3e:
         7f:33:84:8b:45:38:1e:bc:a5:36:54:88:9d:3d:57:79:90:86:
         d9:d3:c6:b0:e1:11:aa:23:a3:43:9e:e4:bf:a2:74:58:f0:de:
         cd:17:22:c8:fd:98:66:f9:e4:e1:a0:72:b6:7b:fa:4d:c0:5a:
         95:d3:4a:78:e4:15:49:3d:e2:49:0a:bb:4c:d1:6c:eb:e8:0a:
         b7:e0:5d:e8:df:9d:81:48:4c:c2:b0:60:d1:c3:b7:b4:b7:17:
         28:91:08:79:42:43:72:77:6f:af:39:59:5b:50:aa:ae:99:cd:
         45:e8:83:4b:1d:4f:fb:ae:60:44:aa:b6:94:a5:d2:8c:15:c0:
         e6:90:f7:9c:45:d1:24:b7:ea:51:14:3e:59:d5:65:88:3f:38:
         dc:69:c8:2e:e8:08:44:1a:2e:ef:bc:2b:a3:e4:57:4a:0a:a7:
         c5:3b:47:a3:fe:f5:43:1a:d5:80:d6:68:6b:1b:63:08:82:f8:
         17:f0:6f:67:d9:72:77:34:8a:97:bf:ca:1f:d1:d5:72:9a:b4:
         8b:14:6c:83:87:1d:51:a8:16:f7:9b:09:11:cc:11:94:ab:14:
         e9:5d:61:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfeavveS+zbVOcdg7QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTExMzE5MjQ1OFoXDTI1MDIxMTE5MjQ1OFowLzEtMCsGA1UEAxMk
MTViNzI4YTAtZjk3NS00M2M1LTkyNmMtMjEyN2M3NGMwNjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM13W/LVQISbQW9e+3ZVZQ0eILpQsCa1DNjV
lpcvV7IJNTTI5bKLcncFumtZ3u0lvEhidzN7vAL+vAcE3DvfO/UemR6YARcwcyN/
WuaI3GMkcyJL7aIRvNroX976eVPsBL0Z2QmT9jDmM2kcC6SYXog86RCzjTw9QqtS
EeDqaAVfLuEeRK1HY8Lph+vNUjek0BRAIit3cNYd1iQ6V94iG2mK8CwDMt/M9X0u
ud4lDdBsu/PS5Jf60iCp8444WzT8s3Imrnoqhv+hT3ED+NvKnfoqlqk+k2gMgxDy
cIG5I1wA3AQ8BIQVULb1MDhoq/KW4REc6RDIW/kxoaJFTgFV3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH22X7kSrKc8m8SBZyctS9W3rmQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODU1Yzg2YzQtOGEzZi0z
MTM4LTk1N2EtNDZhNWU3ODQ3MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyX4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1TdUc6VOirlqBwmV5/PqitHTU4M5dlW2Wmj5KNaX6J9nYRPn8zhItF
OB68pTZUiJ09V3mQhtnTxrDhEaojo0Oe5L+idFjw3s0XIsj9mGb55OGgcrZ7+k3A
WpXTSnjkFUk94kkKu0zRbOvoCrfgXejfnYFITMKwYNHDt7S3FyiRCHlCQ3J3b685
WVtQqq6ZzUXog0sdT/uuYESqtpSl0owVwOaQ95xF0SS36lEUPlnVZYg/ONxpyC7o
CEQaLu+8K6PkV0oKp8U7R6P+9UMa1YDWaGsbYwiC+Bfwb2fZcnc0ipe/yh/R1XKa
tIsUbIOHHVGoFvebCRHMEZSrFOldYaM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:40 2024 by rpki-client on console-fra.rpki-client.org