Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8c0d7de1-9d37-3066-93c7-fe916f29d267.roa
File:                     8c0d7de1-9d37-3066-93c7-fe916f29d267.roa (raw, json)
Hash identifier:          VNZfx68DsfgRlVGXiDkCVV41XE03+uUcalok1zo9A1A=
Subject key identifier:   B5:0F:3F:7A:77:F4:47:E6:47:3E:52:01:35:EC:A9:92:A6:4B:C2:28
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F43285847818BC4976637C470FCA5B880
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8c0d7de1-9d37-3066-93c7-fe916f29d267.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     216382
IP address blocks:        207.2.121.0/24 maxlen: 24
                          207.2.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:c4:97:66:37:c4:70:fc:a5:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=743ad385-f5cb-4a4c-ab70-c449a93c1bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:0b:44:f3:40:8d:c3:44:82:91:6b:3d:6e:
                    9c:37:a6:2c:f4:b1:4c:76:75:f4:9d:64:7b:8c:42:
                    70:ee:a4:e7:8c:77:88:e7:c2:84:49:bf:f5:7b:45:
                    d7:77:e6:8f:9b:82:00:05:98:71:bb:c3:aa:0f:4f:
                    d2:d7:68:a7:b6:a3:6a:08:b8:50:33:c5:76:f0:6e:
                    0a:5b:61:3b:af:1c:d9:bb:6c:7f:e9:01:f0:bc:94:
                    c8:e3:07:f1:cb:0b:96:33:fb:90:76:c0:6f:15:88:
                    a3:58:30:26:f2:c9:d0:ad:4d:05:d0:d8:d9:90:2c:
                    2f:34:c1:21:2e:d4:b7:5e:a7:56:e8:3b:cf:92:ac:
                    eb:93:17:dd:5f:34:3b:52:35:90:64:e0:b4:6e:d1:
                    73:bf:7f:c6:27:ae:6c:ce:28:53:fc:47:c0:4e:cf:
                    05:78:2c:16:ae:71:ce:ea:eb:6d:bd:57:80:fc:57:
                    02:00:65:95:87:e8:45:d6:04:3e:eb:e8:19:57:6d:
                    5a:3c:55:fe:b5:f5:3d:7e:44:17:03:ec:d3:92:dd:
                    ab:66:3b:22:3c:79:ad:df:b9:dd:46:95:0e:ff:8c:
                    df:90:96:71:f2:22:1e:3b:50:af:9a:8f:94:d9:25:
                    08:30:60:5d:ff:89:80:a6:fd:3e:4d:9b:1b:b9:e3:
                    b8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0F:3F:7A:77:F4:47:E6:47:3E:52:01:35:EC:A9:92:A6:4B:C2:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8c0d7de1-9d37-3066-93c7-fe916f29d267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.121.0-207.2.122.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:16:b6:dd:ff:42:6e:99:d2:8e:b6:c7:b5:d6:0f:95:67:51:
         a1:9a:7b:53:46:83:74:b7:98:27:8a:df:c0:92:33:9a:7f:4c:
         05:c4:e7:90:9a:f9:dc:6c:aa:0a:ba:65:4a:9f:ae:75:bd:59:
         00:22:e7:79:62:d9:72:32:19:32:ae:d9:17:ec:c2:a9:fd:26:
         8c:3d:64:a6:33:a6:ec:2e:80:3a:e9:7b:8d:ee:e0:69:91:35:
         6f:91:bb:8e:0b:70:ac:81:66:e8:7b:3c:d5:7c:32:f6:7b:4f:
         33:6f:89:a2:0b:81:cd:1a:db:68:d4:58:2d:00:d8:e5:39:04:
         3d:11:bc:50:20:24:f8:8d:a3:d5:a4:c4:50:64:60:81:cf:cb:
         28:64:36:53:6c:a9:87:67:6f:20:67:55:d8:b0:69:cd:f5:ab:
         d9:02:c9:60:fa:2a:c2:9c:41:13:25:85:84:26:68:dc:1f:3f:
         ec:90:19:fc:4e:ec:97:5e:8f:45:69:ce:6a:96:e6:11:b4:2b:
         86:d5:f2:6b:de:d8:3c:fa:84:7c:19:3f:e0:16:9f:93:d8:5d:
         7e:b0:ff:dd:96:65:67:11:3b:91:f5:6a:4a:f5:5c:0c:0a:ad:
         77:ba:b9:67:cf:02:a6:a3:5c:ae:8f:30:ad:46:9f:ab:0f:7b:
         f2:95:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:56 2024 by rpki-client on console-ams.rpki-client.org