Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/bf8efb3a-c6c1-3cbd-96e2-23c6043ab799.roa
File:                     bf8efb3a-c6c1-3cbd-96e2-23c6043ab799.roa (raw, json)
Hash identifier:          KMmmaGMllN30e8gIHyK6tTgzc5qqlSGn8bBo2mx5rGY=
Subject key identifier:   52:93:03:19:30:C0:C0:18:64:94:46:8E:05:FD:42:B7:17:7F:84:53
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F43285849CAE26D61623CF4F61479C020
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/bf8efb3a-c6c1-3cbd-96e2-23c6043ab799.roa
Signing time:             Fri 09 May 2025 05:03:20 +0000
ROA not before:           Fri 09 May 2025 05:03:20 +0000
ROA not after:            Thu 07 Aug 2025 05:03:20 +0000
asID:                     209699
IP address blocks:        207.2.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:e2:6d:61:62:3c:f4:f6:14:79:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: May  9 05:03:20 2025 GMT
            Not After : Aug  7 05:03:20 2025 GMT
        Subject: CN=8d384757-4aba-44e0-9b9b-76edb5e6f516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:5e:1f:31:8b:8f:84:e2:82:d2:74:57:c4:
                    ec:d8:ae:3e:a7:e6:21:ac:4b:a1:7a:52:7c:b3:52:
                    19:c4:79:45:0a:fc:c8:3b:b4:63:a5:64:67:29:89:
                    b1:01:c4:63:a1:f1:ab:02:40:ea:e7:02:7e:99:73:
                    ae:04:ad:23:40:0c:92:b3:1d:a6:a6:1f:9b:ca:ed:
                    d5:ab:5d:6b:62:25:28:0e:c0:73:39:e0:98:ab:71:
                    23:3d:c1:a4:f1:e1:7c:9d:9e:60:35:95:f7:e9:14:
                    cd:9e:7b:21:81:72:81:3d:be:8c:60:db:6d:33:6b:
                    41:bc:ef:22:fa:cd:f6:6b:9f:41:c2:cd:bc:bc:d1:
                    24:b9:9e:66:b6:86:59:df:8d:8d:93:97:8e:ea:dd:
                    20:75:bd:e5:95:6b:9e:8d:5c:8f:fd:a5:a4:79:5f:
                    77:16:d7:fb:d4:34:6f:fc:3d:b4:71:ca:e3:f3:ba:
                    a5:a4:b7:4c:ef:0d:0c:12:ba:b3:6d:4c:69:7f:f4:
                    2b:a7:88:75:1a:af:e7:fa:9b:07:af:f2:38:33:3e:
                    57:bc:db:92:72:6c:9e:6f:36:11:e2:4f:d5:13:f7:
                    65:2f:63:0d:11:5a:30:2c:41:24:57:87:66:2d:e1:
                    1d:2f:e7:8a:20:3b:82:0f:18:d9:8f:d9:28:77:cd:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:93:03:19:30:C0:C0:18:64:94:46:8E:05:FD:42:B7:17:7F:84:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/bf8efb3a-c6c1-3cbd-96e2-23c6043ab799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:65:cc:11:36:ce:87:02:e6:f5:dc:a7:47:19:a7:4a:14:
         e9:47:d3:11:c3:73:81:7f:84:a9:96:52:e8:37:67:1e:02:7b:
         f6:b9:8b:83:cd:27:94:ce:20:71:33:ea:9c:27:38:47:9b:1a:
         8c:4d:d5:88:5b:59:13:54:c7:b4:f2:cb:f7:f5:a5:70:ad:de:
         9d:82:ed:96:44:da:37:d2:0d:b5:6a:0b:d5:f6:8a:30:cb:c8:
         e3:8c:b5:52:e5:92:7e:b2:7e:14:dc:61:18:cb:a3:5d:4e:c7:
         00:20:55:b1:c3:1b:5b:c0:9e:cb:4b:92:88:b0:5d:52:a1:a6:
         2d:56:f7:23:73:4f:74:d0:08:14:55:79:b8:81:e9:72:c3:ae:
         72:19:6d:94:f6:cd:fa:db:7e:3e:f3:8d:67:73:f4:a1:75:89:
         2b:b1:83:91:86:e9:de:1a:87:9e:5e:24:2c:e0:20:14:d3:ec:
         b4:52:eb:98:ce:33:0f:92:33:fd:05:32:0a:d5:72:fe:7f:04:
         82:6d:a1:fb:da:88:3f:a3:94:33:23:c1:e2:b0:83:b4:33:a7:
         3f:c3:b5:ce:a0:8f:2b:3b:5b:84:46:78:b1:3b:93:d5:68:26:
         2a:66:24:fc:2e:dc:37:2d:1b:de:ff:4a:54:15:69:b3:75:e5:
         f8:f4:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:10:56 2025 by rpki-client