Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/92a42d2f-d8c4-3493-9256-22160f70d53b.roa
File:                     92a42d2f-d8c4-3493-9256-22160f70d53b.roa (raw, json)
Hash identifier:          GopH1OydRwpKqYovPwoK7LRx13w2GloL1//JYV2crTs=
Subject key identifier:   5E:91:7B:C1:35:3A:FE:51:E1:29:23:4F:5B:C5:E2:8F:C0:5E:F8:30
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499DBF35BDFADDBA698C583B90
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/92a42d2f-d8c4-3493-9256-22160f70d53b.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     3356
IP address blocks:        207.37.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:35:bd:fa:dd:ba:69:8c:58:3b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=2c721890-2563-4d7c-ba63-f26327576a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fc:54:49:f4:c0:17:c3:21:cb:53:96:7c:00:
                    57:12:21:98:60:1e:2b:ad:f6:4b:b8:eb:38:30:5b:
                    2f:9e:b8:21:c6:c6:40:bf:4d:07:fe:f9:0c:68:ad:
                    71:13:f6:87:a2:94:b5:7a:7d:f5:92:e6:4a:0c:9b:
                    92:50:ca:fe:98:80:a9:89:01:99:50:b6:35:31:2d:
                    d0:81:47:a5:5d:79:40:ae:77:20:38:3a:d2:61:e8:
                    9f:42:d2:ef:85:f0:15:b8:04:83:6c:74:a7:85:65:
                    6f:0e:4e:96:39:1c:0e:87:cb:66:7a:a6:54:35:59:
                    26:79:12:49:fc:2a:b0:b9:ee:61:11:90:f1:1a:4c:
                    83:91:4b:e7:7a:0a:2d:e7:9d:1d:bb:26:e6:5a:da:
                    fe:bb:87:93:79:db:17:00:9d:c1:22:f0:3c:5c:1a:
                    2e:0d:8f:84:3d:09:59:e6:a8:f9:8e:a3:65:d7:06:
                    73:13:f2:9d:1c:84:c3:b2:43:b1:46:2d:de:75:a5:
                    14:04:34:cc:70:e5:e4:8b:79:94:1b:e1:b5:97:3d:
                    6a:f3:bd:30:ef:e1:00:9f:88:83:38:5f:8d:34:c0:
                    19:5c:b0:b4:98:61:6d:54:22:ba:22:c9:ab:2e:ad:
                    13:df:32:ad:d7:52:35:da:e9:32:3c:38:0e:d7:19:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:91:7B:C1:35:3A:FE:51:E1:29:23:4F:5B:C5:E2:8F:C0:5E:F8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/92a42d2f-d8c4-3493-9256-22160f70d53b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.37.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:44:99:5e:1f:ce:27:2f:5a:aa:49:bb:3e:aa:d1:e1:9f:fd:
         db:b6:cd:95:fe:75:ac:93:aa:22:ee:8d:a4:80:08:73:cc:9b:
         56:2e:43:b9:71:77:a4:73:23:18:f3:63:22:02:7c:49:8d:8d:
         ba:1c:10:eb:13:c1:06:9e:be:99:8a:ec:a2:c1:47:4c:99:b1:
         ff:31:f3:21:04:fa:49:3c:27:51:d3:da:8d:30:4a:e4:3c:9f:
         da:2e:b7:24:67:be:85:6d:0c:5c:13:36:51:ff:bf:cc:c0:d1:
         79:61:a5:22:d0:1f:87:7a:cc:a2:4b:b2:06:18:39:7e:f0:07:
         62:15:ea:00:af:30:22:fc:a2:54:d6:ac:48:d3:7e:4b:20:65:
         76:fb:73:78:2f:af:85:18:5a:c8:8c:62:ce:0d:d3:e9:dc:49:
         3e:4e:89:16:27:e5:0d:51:88:8a:af:f4:05:ef:7a:c9:15:62:
         2a:b2:20:ed:9a:9a:bb:b1:4c:64:59:7b:18:28:65:96:fa:15:
         3f:fc:5c:76:f8:02:ad:30:e0:85:a1:2e:7e:14:f8:aa:2e:c1:
         55:1e:03:8b:15:7e:1b:cc:e1:a5:90:40:05:e4:23:16:2c:3d:
         a0:bf:46:a2:be:03:b5:7d:26:1a:e3:14:97:72:c9:8d:50:ab:
         99:dd:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:14:45 2025 by rpki-client