Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa
File:                     ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa (raw, json)
Hash identifier:          17465B8KAsUp+GF1NdaLvtKg1JV+ZTYKETwkrsj37Rs=
Subject key identifier:   48:C0:91:E4:6B:1F:E0:FD:1E:D0:4C:A0:B1:8D:0C:17:8F:F5:FC:84
Certificate issuer:       /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
Certificate serial:       010D0C9F432858483F801911106B4F6834B3BE10
Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     36374
IP address blocks:        147.185.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:19:11:10:6b:4f:68:34:b3:be:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=c5407926-c13c-49d9-b6e8-608af9e6745f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8c:8e:f9:82:23:f2:a6:97:c1:e1:0a:e2:2e:
                    da:2e:85:f6:7f:77:c2:a4:ba:3f:96:ea:af:97:2c:
                    f9:86:24:02:2d:48:16:9a:e5:2e:63:21:3b:f7:70:
                    a8:f7:57:1e:45:de:c1:18:25:a9:a5:4a:bf:55:0c:
                    21:fa:80:c7:ee:1a:26:32:84:1a:d8:05:8a:1f:2f:
                    f2:6f:18:fd:b3:98:1b:f1:56:72:39:e1:82:19:81:
                    77:e6:97:98:da:c1:53:74:76:21:ca:54:be:ae:94:
                    fb:4e:85:fb:7a:5a:a5:dd:90:c2:aa:a8:88:f5:7f:
                    2e:6a:b0:1f:b5:80:00:68:6f:85:67:97:e3:82:51:
                    a0:72:52:be:55:1f:8e:01:85:b8:72:c0:45:64:5f:
                    18:27:a0:4e:72:89:84:b0:20:28:53:01:17:1b:79:
                    1b:0c:6f:79:ff:ea:a1:aa:8f:92:80:fc:ca:eb:b1:
                    1b:0a:fb:a0:fa:01:82:0c:76:92:a9:d0:78:bb:66:
                    2a:b9:87:e4:86:c6:f8:c1:f4:cf:22:f3:95:64:d4:
                    4d:aa:63:c1:52:b4:76:13:51:6b:c5:ee:3b:4d:73:
                    86:80:81:13:e1:1a:66:ca:fb:d7:46:e8:9f:82:1a:
                    9e:3e:d9:2d:dc:ad:49:7c:b2:6d:26:61:ca:a2:65:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C0:91:E4:6B:1F:E0:FD:1E:D0:4C:A0:B1:8D:0C:17:8F:F5:FC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl

            X509v3 Authority Key Identifier:
                keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:83:4a:ae:c4:fc:fa:d9:34:44:34:1c:24:50:6c:09:71:
         fd:dd:87:b2:7a:c0:91:fa:0b:ad:17:d0:bc:a1:04:a0:cd:83:
         26:b3:ff:c0:7a:2d:8d:5f:6a:b0:03:aa:1b:47:c9:66:84:34:
         35:be:06:05:07:23:f6:d5:89:85:24:cc:04:47:de:54:07:7c:
         f5:6b:9f:e6:65:57:fb:d8:63:99:f7:09:58:c5:8a:5c:4d:62:
         e2:38:08:96:0a:ba:ab:71:53:5e:22:42:82:53:a6:4e:58:e6:
         e2:c2:b4:bc:98:ac:47:90:8d:4c:32:e0:da:c5:55:79:25:43:
         ae:31:80:13:e9:7f:68:ae:86:79:a4:20:45:71:8f:97:5d:f5:
         c5:43:bc:a4:f7:2c:b1:1f:1e:58:44:af:f2:ca:d5:c3:7c:53:
         73:46:ea:24:96:fc:b0:bd:b9:b9:de:f8:cf:01:51:53:77:bd:
         81:e4:76:ac:e2:95:0f:67:36:9a:79:2f:52:b8:3d:56:76:63:
         09:fb:55:90:e6:a6:45:8a:3a:28:f5:b5:5c:c6:ec:23:ad:7f:
         b4:87:f0:94:16:89:bf:69:4f:19:40:18:e2:8a:e9:54:8e:c2:
         4c:d3:d0:40:57:e1:9c:a6:87:91:9a:1a:db:31:01:3f:82:cd:
         26:ad:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:55 2025 by rpki-client