Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/92a42d2f-d8c4-3493-9256-22160f70d53b.roa
File:                     92a42d2f-d8c4-3493-9256-22160f70d53b.roa (raw, json)
Hash identifier:          pIKjgg+wgwxmnuI7eWrv4Ib1YDJ+cJJpo5dlViEoM+k=
Subject key identifier:   CA:95:35:24:92:52:91:3F:4A:21:9F:01:BF:B2:D2:EE:05:5B:9E:6C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848BE86237628A4AA2257E6AE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/92a42d2f-d8c4-3493-9256-22160f70d53b.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     3356
IP address blocks:        207.37.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:23:76:28:a4:aa:22:57:e6:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=4ece3a2c-6878-4fa8-92de-6306a58c96d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d3:3c:43:84:ed:2b:e4:e7:0b:e8:6e:89:97:
                    3d:85:a3:ee:4d:5a:50:d3:fa:22:32:82:db:c7:1e:
                    d7:37:68:93:a8:7c:78:f7:a8:d5:5d:b9:99:ee:62:
                    8d:0f:22:e1:cc:9c:c7:2b:e5:eb:51:87:28:17:eb:
                    2c:d8:e9:86:20:eb:bd:d0:fc:09:d8:fd:73:37:b1:
                    f4:9f:23:71:6e:8b:c6:b5:49:08:df:74:2b:29:2d:
                    50:5a:88:4a:7d:3e:80:01:53:12:da:bb:de:ef:96:
                    c9:d9:39:01:6c:b7:77:e1:91:7d:28:d1:53:a3:fb:
                    0a:3d:40:53:be:ba:0d:0b:64:61:3f:82:23:f3:37:
                    6d:b3:3a:c6:8f:f0:96:26:e6:f8:5c:aa:dc:3e:8e:
                    c3:b4:15:20:c0:e9:56:7a:c0:3f:79:78:b2:95:3e:
                    b9:c6:28:70:f4:51:77:13:dc:26:2b:4d:94:d9:1b:
                    2e:41:de:e5:3e:ed:4a:92:48:80:6c:f8:e7:da:98:
                    09:18:0b:38:c6:9f:6a:f4:e6:87:d7:a8:a0:3f:f3:
                    07:f3:e6:22:7d:c1:11:32:94:33:e8:e4:b2:1c:8f:
                    02:db:a3:8d:31:b9:d4:90:cd:10:f5:c8:65:c6:12:
                    45:54:c3:55:64:76:fd:19:76:b6:8c:49:98:d6:94:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:35:24:92:52:91:3F:4A:21:9F:01:BF:B2:D2:EE:05:5B:9E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/92a42d2f-d8c4-3493-9256-22160f70d53b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.37.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:02:07:a8:e3:6c:f6:d7:e5:d8:be:d1:08:7d:1f:8b:75:fd:
         8e:3e:3e:b6:88:cf:3c:d8:af:26:f7:2b:2c:79:14:de:b2:bb:
         7b:b3:f3:be:bb:f5:a7:c8:4b:1c:20:31:98:d4:51:9c:23:67:
         5f:53:3b:f1:a8:fe:ba:e7:9b:b0:a1:76:05:7e:4a:e5:8d:d1:
         83:d3:fe:a5:ed:5e:bd:72:c9:c1:01:ee:a0:79:f2:49:07:af:
         38:fd:6a:4c:39:da:80:94:bc:c7:0b:91:b7:f4:e5:c7:9a:f9:
         d5:25:b4:9b:fe:13:49:9c:d6:92:f9:63:cc:85:6c:c7:ad:83:
         0f:ba:d7:5e:c6:8e:63:2d:bb:f0:36:e9:79:0b:2d:4c:57:f3:
         fc:dc:d5:9b:22:f4:9c:5f:c0:74:21:d5:b8:e1:0a:8c:42:60:
         33:68:91:90:f3:e5:b8:aa:9f:39:48:45:cc:b4:23:d0:21:da:
         74:c8:2a:26:29:15:0a:9f:c6:91:b2:23:46:3c:41:60:f5:c1:
         88:14:08:06:ee:f5:85:6f:07:21:4b:c1:fa:a8:7b:64:de:b0:
         3b:53:d8:0b:07:bb:20:20:bc:15:2b:57:17:f9:53:17:fd:51:
         19:c2:61:d6:4e:1a:91:8c:57:ac:df:89:12:99:a8:8c:93:ce:
         fb:94:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:39 2025 by rpki-client