Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa
File:                     44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa (raw, json)
Hash identifier:          C3NNJEqCpLBPdViC/NRlWY4J5cENZM/bze6eDnT7SeM=
Subject key identifier:   27:C8:51:C6:95:BE:6C:CF:E2:CF:8E:8A:74:E5:AD:5F:C0:8F:62:A6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E0068051E2E4ADAE6AF8BA00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     40717
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:80:51:e2:e4:ad:ae:6a:f8:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=6ade31a8-71f5-4501-9128-c588bb4ec081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:12:5f:03:b5:a8:5b:cf:49:1a:1f:b9:c9:
                    e2:52:94:40:1a:d2:5c:aa:6e:07:e5:5d:e8:03:6b:
                    88:80:38:fb:10:bc:75:74:fa:e9:bc:8f:68:e7:28:
                    06:36:f5:4f:dd:17:11:97:1d:0b:8a:5c:4a:86:4c:
                    99:ce:3f:2d:ed:92:e9:c6:66:08:02:14:5c:ff:60:
                    4b:e3:a1:7a:ff:ca:8d:c3:19:c3:e6:18:0c:2d:0d:
                    d5:1b:93:0e:94:52:91:a2:34:36:84:dc:0d:81:0c:
                    de:18:75:ed:09:53:89:d6:2d:a3:67:90:f0:33:65:
                    4d:a3:b1:ad:0b:42:55:32:c1:63:fc:8b:2f:51:8e:
                    53:dc:f9:f7:60:e1:77:68:40:d0:b8:0a:e8:3c:ec:
                    6a:21:31:2e:9c:1a:76:8c:19:7f:86:7c:e4:13:a9:
                    4a:d8:14:62:7e:71:98:d8:62:a2:c4:b2:d9:82:54:
                    1b:2f:d3:72:21:d2:bb:3f:75:ae:07:82:bc:fb:be:
                    37:37:96:53:8b:b8:8e:be:24:1b:75:c6:64:57:4d:
                    9f:59:83:16:9b:80:76:e7:04:84:60:f6:ee:0b:45:
                    50:0d:a7:ad:74:2b:ee:72:48:c2:54:6b:9c:54:a1:
                    a5:59:94:ab:d1:99:cb:0d:e5:e8:ca:76:a1:e6:fe:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:51:C6:95:BE:6C:CF:E2:CF:8E:8A:74:E5:AD:5F:C0:8F:62:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3b:c7:2e:ed:6d:d3:df:bf:53:80:af:18:2e:9e:e6:d4:48:
         ab:7e:ff:4f:fd:ee:cc:41:bb:4f:5a:aa:3b:2e:64:0b:8f:46:
         be:ed:c6:13:34:82:57:c2:65:0a:49:8b:64:a0:b4:2f:f0:a9:
         9b:d3:94:27:74:18:0b:8d:d1:0f:d4:8c:cb:a4:9f:22:f5:9d:
         b8:b5:a0:0f:23:91:80:29:19:73:aa:0f:17:2c:51:63:7b:56:
         ae:b0:94:70:44:65:93:52:58:11:79:61:2b:c0:29:13:73:58:
         60:47:5e:a3:35:11:be:31:13:6c:d8:2d:0a:1c:f8:6f:57:3e:
         05:82:f9:dc:a5:a7:61:ed:bc:72:c2:28:25:43:73:79:06:72:
         c5:5f:ec:98:42:4c:47:82:59:a1:8b:d3:be:b7:cb:0a:0e:1d:
         2b:71:37:36:5f:79:6c:fe:ac:1f:b2:6e:86:66:3f:f4:7e:33:
         69:2b:d7:b4:15:2b:d2:6f:9b:38:4b:65:2c:ee:36:7c:07:68:
         6a:64:f0:aa:70:91:3d:41:dd:22:a9:d0:62:92:b2:98:c3:bd:
         e5:7a:91:95:e3:1c:27:ce:6f:fe:66:47:61:59:7c:f7:45:84:
         fd:9a:1c:96:ab:a0:c3:6c:df:33:ef:2d:56:fb:46:32:d8:eb:
         f3:4a:fd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:33 2025 by rpki-client