Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/464063bc-f3c6-38d4-80e2-09309e733012.roa
File:                     464063bc-f3c6-38d4-80e2-09309e733012.roa (raw, json)
Hash identifier:          3/TJD3UCUFdcAwu0UqY/vL+vHYKI9wCfG5fIH2L2PnA=
Subject key identifier:   AE:48:67:D6:48:58:55:F9:AB:68:17:6E:B8:4E:FE:97:41:8A:DE:9D
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F43285848424AD48C48A08D5081246A00
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/464063bc-f3c6-38d4-80e2-09309e733012.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     148996
IP address blocks:        207.2.120.0/24 maxlen: 24
                          2602:fbdf:800::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d4:8c:48:a0:8d:50:81:24:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=f74d8a37-6015-4408-ab7f-5ed562464d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:85:13:de:82:9d:56:28:64:12:d7:8c:c7:3a:
                    e2:da:0f:62:bd:f4:89:af:83:be:c6:4f:7e:74:79:
                    65:be:62:06:2b:28:12:cf:d5:d7:32:20:d5:9f:16:
                    eb:98:9a:a5:3e:33:4d:b9:6a:ec:2f:78:f9:51:3f:
                    42:16:6a:1a:88:e4:1e:ad:6d:69:4e:40:e3:e9:78:
                    7a:d7:86:0f:f8:64:81:c8:a1:84:87:8a:85:62:a2:
                    6c:c2:17:00:cd:03:29:7d:52:26:4c:54:f0:72:f5:
                    1b:6f:ed:89:64:40:9f:37:84:36:dc:4f:8c:a4:73:
                    93:13:aa:f1:17:9f:cb:f0:84:67:30:13:74:c4:bf:
                    e1:2e:ba:eb:dd:b3:62:00:06:0c:bb:96:fd:a8:01:
                    21:0f:25:3c:90:e7:59:f1:e5:98:19:ea:42:66:37:
                    01:35:48:c5:4f:19:9f:bd:ec:f4:1a:8f:69:6f:bc:
                    0e:d2:f5:66:d1:49:3b:8a:06:7b:1c:04:3b:f2:b3:
                    29:b5:a0:d7:2c:f4:7d:37:2f:94:bc:46:c0:3b:0e:
                    40:b6:03:84:80:32:16:d4:60:fc:e4:41:fe:40:6c:
                    fd:b9:9b:da:5a:76:39:67:7d:70:39:66:b4:0e:67:
                    32:df:35:9b:53:1a:d7:f3:ff:4a:76:a1:3a:5d:6b:
                    b5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:48:67:D6:48:58:55:F9:AB:68:17:6E:B8:4E:FE:97:41:8A:DE:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/464063bc-f3c6-38d4-80e2-09309e733012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.120.0/24
                IPv6:
                  2602:fbdf:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:46:81:56:d9:f1:bd:49:3f:d0:e4:3b:5d:55:24:32:b0:b5:
         17:8a:5b:5f:af:4a:1c:15:d1:59:06:59:5a:36:16:2c:4f:12:
         dd:29:57:7b:b8:01:1e:4e:fa:23:e7:fe:e9:e9:41:3c:b6:d3:
         f4:a7:2e:cc:0f:80:cb:07:66:a3:b6:9c:dc:54:c8:97:c4:9c:
         08:3e:2d:6e:03:f6:2f:c4:9f:55:2c:37:07:c8:27:fe:6a:4c:
         17:85:d6:43:18:fc:c8:fc:09:ce:cc:31:2b:75:c9:13:03:df:
         a5:a4:c1:2f:36:05:72:39:68:0e:6c:4b:37:1f:44:f9:0d:5e:
         f2:2b:f2:03:aa:2a:10:0b:86:b2:04:2d:df:c7:f8:1e:0b:f9:
         e1:13:f4:69:61:47:0a:b1:25:0c:77:a9:d2:c6:c6:a5:cc:58:
         f7:d8:e1:78:c7:6e:5b:37:19:b8:fb:14:fb:17:c6:32:3f:88:
         32:22:12:3c:4d:e4:bd:9f:2f:d0:f1:80:53:d6:d6:3b:62:5b:
         d3:fb:25:22:db:9c:b5:0b:80:0c:be:60:de:ad:34:30:56:f5:
         04:f3:7b:7d:3f:b8:63:77:3a:4f:7c:ee:a3:f8:ac:5b:71:f6:
         97:f4:59:2e:ac:07:ac:5a:76:83:a8:37:b2:79:47:2f:6d:8d:
         04:c7:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:35 2025 by rpki-client