Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16cd8f54-9a22-392d-94f9-e74075a35f83.roa
File:                     16cd8f54-9a22-392d-94f9-e74075a35f83.roa (raw, json)
Hash identifier:          g/HzknMgGyjEcCD6HI4jbMnnezXZGhSRobNPmfSNgzM=
Subject key identifier:   04:CA:2D:26:F2:C8:B0:99:F5:5E:36:B8:10:A5:EF:2D:6B:48:3F:6A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5CA667D4A8877767AA400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16cd8f54-9a22-392d-94f9-e74075a35f83.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     396599
IP address blocks:        209.112.127.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ca:66:7d:4a:88:77:76:7a:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=8ad728a2-3571-4f72-8eab-229ca7bee5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:4d:3b:c5:af:d9:63:02:b8:38:6b:18:13:
                    3c:9a:c2:bc:e6:92:92:8f:5e:40:e9:7e:71:85:51:
                    27:d4:30:11:d9:00:db:79:97:46:dd:d0:90:87:50:
                    6f:76:9c:3d:82:34:93:9b:dc:a7:c0:5b:b4:54:86:
                    89:36:c7:7c:79:98:31:1a:17:7d:f5:f3:93:26:60:
                    89:e4:97:d6:6d:2f:ba:12:d2:c5:ed:c7:db:fa:a9:
                    57:38:04:1b:1b:4a:9a:ba:7c:1d:31:ce:a4:36:e3:
                    ca:4f:f1:50:ac:da:8b:cf:a5:08:a4:82:9c:9c:60:
                    72:a9:04:05:6b:c0:63:3a:ac:04:b7:26:f8:26:80:
                    43:61:51:33:8f:e2:d6:32:8e:d2:c5:6a:83:2d:fd:
                    40:36:6f:ab:25:b9:12:dc:1d:65:3f:6a:27:31:19:
                    dc:b5:2b:dd:c4:ca:82:b0:e4:ad:21:5f:66:f6:8e:
                    9f:fb:0f:c3:b3:e2:a8:e7:e0:ab:1d:93:c8:bb:63:
                    2d:77:0e:40:0f:85:09:8a:e9:6d:91:8e:09:0a:61:
                    93:9c:8c:ba:6e:08:6b:a2:4b:18:51:75:15:6d:83:
                    36:a2:80:31:ec:9e:be:4d:bb:37:55:d3:2b:0d:99:
                    59:36:17:e0:f5:2f:34:78:c0:28:14:dd:7a:61:c6:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CA:2D:26:F2:C8:B0:99:F5:5E:36:B8:10:A5:EF:2D:6B:48:3F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16cd8f54-9a22-392d-94f9-e74075a35f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ce:63:1c:35:4d:0e:0a:d3:83:eb:1c:c4:91:49:79:1e:8f:
         78:de:31:1d:32:02:55:ac:f3:fa:17:3e:1a:ad:20:1c:ea:60:
         76:ba:62:95:fd:ef:46:67:e0:97:72:f0:a0:01:01:b4:fe:f5:
         f1:4f:29:2e:7d:4e:b5:71:29:19:b7:11:64:f5:b6:ae:1f:b2:
         cf:43:de:60:41:19:4c:29:99:81:52:ea:1f:08:99:45:35:00:
         e8:4d:27:d1:da:72:cd:11:48:3e:f0:f9:f4:5f:9c:ae:fd:d1:
         9f:f1:1d:b0:ad:df:65:0e:03:c8:7a:2a:d5:16:29:4e:b9:b2:
         8f:79:f0:44:57:be:80:56:43:93:1c:22:38:50:f6:ab:79:f9:
         ee:42:96:04:7b:2d:b9:40:73:8c:4c:b2:83:11:bc:70:23:f5:
         72:1c:97:23:4f:a7:7a:06:c0:3d:46:18:b3:e2:c9:95:57:ca:
         b5:ab:f0:fb:d3:2f:06:e2:29:8f:b8:2f:63:8b:21:e4:61:c8:
         fe:ad:33:2c:6f:dd:67:f6:2f:40:a1:4b:74:4c:12:b0:1d:91:
         79:77:5f:d2:04:dd:4d:a2:bc:9d:93:76:80:5d:a7:d0:07:62:
         52:f8:76:5f:ca:0e:a8:90:dc:95:7e:91:20:fe:4d:e9:93:6d:
         bb:31:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:07 2024 by rpki-client on console-ams.rpki-client.org