Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa
File:                     0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa (raw, json)
Hash identifier:          FSgcuVh9OI0bQCoVsqv3SdFDDn981I7pxmdjYA6Kk0g=
Subject key identifier:   57:D0:8F:C7:00:26:29:85:D1:79:63:3B:B2:FA:F0:1D:32:F1:25:8F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E0068404EC42AB2464CA1B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     211369
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:84:04:ec:42:ab:24:64:ca:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=5e47976b-6e7c-4cf9-8cbd-357cfe43a3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:31:68:85:cd:2e:24:c8:60:4e:c3:7d:dd:
                    be:6f:17:a2:24:44:ad:1b:cb:e3:6a:d9:a2:1c:30:
                    a6:aa:9f:67:c1:ce:03:aa:66:fe:84:4a:c0:25:dd:
                    5a:25:7b:ce:fa:73:2b:01:73:2d:01:c4:8e:16:40:
                    99:64:53:1f:5c:49:df:7b:67:ec:26:42:30:8f:90:
                    e1:7d:b0:f4:00:b6:77:d4:53:3f:ca:fd:48:bd:16:
                    c0:8b:e9:97:59:ab:a3:bd:2a:74:c4:6b:18:d0:a7:
                    16:60:0f:78:e4:74:42:48:6f:33:70:34:9a:e8:38:
                    f7:60:11:e3:85:12:b8:92:0c:ad:7a:51:7a:de:26:
                    44:e8:d2:dc:06:9a:a7:77:7c:96:a5:ac:bc:e7:52:
                    13:4a:1e:c5:de:d7:32:7c:3e:8d:83:c4:e5:66:68:
                    6d:3b:85:7c:d6:70:7e:99:1a:a0:91:d5:31:62:5d:
                    2a:8c:39:4c:5e:f7:f9:88:75:68:f5:16:a2:0e:16:
                    05:7a:bb:1d:5d:ec:80:1d:69:89:25:53:94:8d:36:
                    3c:9f:76:15:e5:0a:d2:30:77:d4:5d:10:3c:e4:82:
                    98:1d:80:72:ed:ad:be:31:d0:66:ad:7c:b0:31:e5:
                    e4:0e:6a:15:2d:f3:72:6b:1d:87:e3:88:de:b5:90:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:8F:C7:00:26:29:85:D1:79:63:3B:B2:FA:F0:1D:32:F1:25:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3b:54:a9:c5:95:40:f6:89:92:f2:d5:46:b7:7f:99:a3:79:
         8e:a1:4c:0e:18:df:87:1c:cc:20:7a:bb:dc:b9:3e:77:d4:8c:
         ef:64:56:01:b5:75:e3:a1:64:f0:65:1f:c8:7f:8e:d9:a6:40:
         6c:57:aa:50:5d:43:5c:16:de:e4:20:b1:34:c4:ce:61:f2:2c:
         07:77:30:9a:ea:45:23:d8:41:40:58:b3:11:a8:f6:e6:31:bd:
         24:9a:fc:da:d7:dc:6d:4c:bd:14:c6:a2:54:95:bc:e9:0e:7c:
         7c:c4:a6:53:c0:b8:80:ca:5f:12:7d:e2:28:69:56:d7:04:10:
         cc:e2:0c:5d:a1:b6:a7:c5:06:29:c5:01:a4:1a:88:55:3d:4f:
         51:b2:f0:30:18:55:d9:34:50:1e:64:ae:ec:a9:6c:10:2c:a3:
         31:a6:af:e7:bb:49:32:5c:16:a1:bc:c9:23:27:b1:2b:c5:89:
         3c:24:ad:92:b2:38:0a:ac:a2:e6:a9:ff:97:14:ae:3d:d3:a0:
         6b:c5:f3:88:35:8e:0c:3a:4b:ad:44:92:ce:e0:f0:b7:3f:7a:
         ad:e8:d8:2e:df:a8:b2:09:ff:7e:30:60:f1:8f:4b:e1:5d:51:
         36:0b:c7:d9:c6:d7:77:21:23:9d:11:30:53:68:15:61:2b:12:
         24:4d:c6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:36 2025 by rpki-client