Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2e993a25-10b0-309b-a178-cc66181ff5dc.roa
File:                     2e993a25-10b0-309b-a178-cc66181ff5dc.roa (raw, json)
Hash identifier:          249/E+N19cGeBxvCHEhLwco546wbsJpitoTQb2FWUbk=
Subject key identifier:   5D:11:1E:40:48:2F:2E:B4:72:A1:4E:13:E6:96:7F:6B:5E:15:5C:F2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B626173E9816A43B8FE807E0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2e993a25-10b0-309b-a178-cc66181ff5dc.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        207.102.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:17:3e:98:16:a4:3b:8f:e8:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=1b039874-6927-4ac9-9039-946c45319451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:40:89:46:f3:8a:50:1d:3f:32:0e:96:ab:
                    3b:04:2b:70:57:7e:3e:45:9b:81:1d:91:eb:fc:5c:
                    8f:8b:26:f4:48:32:d2:19:13:59:74:41:b2:4c:d9:
                    e6:1b:03:5a:9f:24:e4:72:d2:ed:29:a5:5d:95:bc:
                    fe:9d:fd:ab:d7:1f:59:16:f4:7c:ae:4d:44:14:66:
                    4e:8f:e4:3a:41:25:58:ca:3e:d3:c2:87:90:bd:5c:
                    65:85:cb:50:2d:cb:a4:f9:c6:2c:07:31:bd:3a:14:
                    0c:8b:73:2f:45:91:4b:49:0a:cb:9b:6a:29:3f:4b:
                    a2:f4:a1:33:18:6c:7e:dc:11:b5:a9:c2:78:4d:86:
                    9a:26:38:fa:54:cb:49:84:1b:9d:9a:5d:e1:23:4a:
                    40:ce:dd:58:50:c0:52:2e:de:91:0d:e0:2f:c6:e5:
                    eb:bb:f5:af:25:a6:03:f1:87:41:69:d3:98:47:50:
                    25:79:d5:43:e1:1b:11:80:47:5a:2b:ce:c8:92:c0:
                    8a:a5:14:dd:02:85:e9:32:a4:f6:70:4a:6c:d6:b5:
                    88:4f:83:09:98:15:39:5f:26:4b:f9:48:2b:d2:25:
                    c5:38:14:db:ac:e7:9d:4a:04:21:fa:df:fb:1b:1f:
                    fe:0c:79:9b:47:be:c5:eb:5a:17:b7:c1:32:9a:8c:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:11:1E:40:48:2F:2E:B4:72:A1:4E:13:E6:96:7F:6B:5E:15:5C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2e993a25-10b0-309b-a178-cc66181ff5dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:f5:07:87:ed:6c:06:7e:aa:e2:0a:a6:bf:dc:16:90:b1:
         0b:da:5f:a8:03:d8:51:e9:68:80:e3:45:98:a6:be:19:0c:ca:
         8e:ea:1a:19:2e:22:15:b3:e1:0f:dd:c9:4a:63:30:9d:42:32:
         9b:a5:bc:ed:5c:a7:f3:49:2a:44:0a:72:48:89:45:b8:c5:84:
         80:e7:1d:86:09:1f:60:7a:be:71:af:14:a2:81:56:34:54:1b:
         c2:4f:c3:73:4f:8e:cb:4a:b0:97:62:e6:3f:26:88:31:b7:29:
         cd:05:b6:3f:58:ac:c3:71:e4:e8:bd:24:2b:b5:e7:85:5a:47:
         e8:c7:c1:ba:5b:94:a4:28:b0:f0:f5:24:ce:02:50:00:00:90:
         57:d0:69:43:a3:a2:92:97:6a:d3:47:eb:e2:ff:2e:b5:69:92:
         a0:df:1a:e1:bf:da:d9:37:76:da:7c:75:b8:8c:bc:35:5c:85:
         2a:b0:1f:d6:e3:01:e8:e8:81:e6:67:31:ec:16:86:2f:88:41:
         fc:2c:db:b5:8d:7f:91:f6:b0:a2:c2:d9:80:68:9c:74:37:5b:
         92:bd:a4:36:93:01:cd:9e:e4:1d:32:39:03:bf:d7:85:7a:da:
         85:07:ce:e7:da:5d:35:81:80:68:74:8e:74:57:14:01:7f:60:
         eb:ab:2e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:46 2025 by rpki-client