Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b2e9bd60-a065-392f-b584-def7a902d50a.roa
File:                     b2e9bd60-a065-392f-b584-def7a902d50a.roa (raw, json)
Hash identifier:          sk7dTQ3zr4negbxKifkWEdBkqaiThaWRsQ4IDanAE40=
Subject key identifier:   A7:BF:88:83:40:63:A3:74:D5:AF:BF:A7:9A:E4:4E:95:79:19:19:3C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584824FA80A160DFA5AF7317C900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b2e9bd60-a065-392f-b584-def7a902d50a.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     834
IP address blocks:        74.49.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:80:a1:60:df:a5:af:73:17:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=e1802ca3-bb45-45c6-9575-9eb1ce7b1ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:86:73:63:20:98:21:23:5a:36:4b:05:45:
                    26:03:5b:3b:64:41:d7:3a:0b:43:ec:42:f3:1e:80:
                    ff:94:53:94:8e:e2:01:f8:f5:25:09:98:e9:e7:c5:
                    bc:f0:1a:50:d3:6f:51:81:30:4f:65:2f:60:9d:07:
                    d0:d1:5b:4e:db:4b:fe:4f:6e:b3:35:53:c5:57:a7:
                    ec:e3:01:d4:fc:ba:58:6a:f8:9e:55:2b:3f:9c:43:
                    5f:13:08:22:f6:4d:cd:33:88:3f:a2:3b:8c:9c:c3:
                    ac:e5:88:4e:35:c1:de:c6:fb:48:7c:84:35:13:f7:
                    45:dc:ee:bd:05:ff:82:59:43:fb:22:7d:51:04:02:
                    60:c4:0e:59:4a:23:fc:60:0e:99:34:b1:e1:8d:22:
                    dc:75:de:4b:e1:f2:14:e6:6c:38:ba:7a:d2:37:a8:
                    99:25:d3:bf:41:e9:87:cd:ec:71:ac:6e:98:33:22:
                    f7:9e:1f:b2:e3:7d:81:a1:55:d5:a9:ac:9f:77:e9:
                    35:e8:98:d0:23:bf:14:25:f4:15:6d:5c:6b:86:71:
                    ff:c5:b5:9e:ee:cb:18:09:4f:6d:aa:31:ab:95:85:
                    58:10:de:14:ba:e6:b5:00:13:68:e8:cc:7a:60:9a:
                    d2:93:14:b8:60:49:7f:dc:56:c7:7a:d4:0e:cd:6b:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BF:88:83:40:63:A3:74:D5:AF:BF:A7:9A:E4:4E:95:79:19:19:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b2e9bd60-a065-392f-b584-def7a902d50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e7:1d:49:3e:01:80:f1:6e:b8:eb:b3:bd:df:3d:bb:42:0a:3c:
         37:63:4f:58:a5:fa:8f:8d:80:b6:45:3f:d8:d8:0a:49:4f:1c:
         66:80:52:d6:df:15:f8:e0:fb:cd:34:63:b0:62:99:8b:ec:81:
         50:26:61:6a:3e:5e:77:8a:d6:9f:47:a7:81:ba:b8:fa:d5:01:
         e3:c6:84:1e:c1:76:26:b1:b2:fb:13:cb:2d:6a:72:ae:3b:56:
         e5:7d:c7:96:7f:76:ae:f7:d5:75:7b:d1:21:d2:24:c6:ff:c4:
         3a:c5:3c:24:eb:e5:43:0d:f0:99:2d:fe:dc:74:4c:1c:dd:fb:
         23:39:09:4e:7f:b7:de:c3:95:be:04:f9:b1:f9:cd:6e:24:eb:
         2d:f9:37:92:88:f7:5b:45:7a:6e:a8:14:f6:31:41:9f:ad:eb:
         ae:9e:91:18:9c:13:76:a1:a1:96:06:d1:32:04:2b:7c:5e:8b:
         1a:0d:3f:3d:19:47:7b:c8:d9:f6:4a:52:58:aa:b8:e8:cf:be:
         8b:fc:7c:f0:46:45:78:f8:3e:e2:81:b5:3d:b1:f0:c8:92:d6:
         36:d0:b4:21:98:8e:d1:33:cb:70:fc:8e:b6:48:35:32:33:8b:
         e7:a7:a3:b2:c7:d2:36:c5:1f:15:11:60:42:ea:8e:9e:b9:9e:
         b1:fc:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:55 2025 by rpki-client