Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501064de-eeac-3774-877f-84188a5307ac.roa
File:                     501064de-eeac-3774-877f-84188a5307ac.roa (raw, json)
Hash identifier:          XoiuRCIicZHQtDSHcDhOjG5zuTJ+chNTPwL9YO+SSjg=
Subject key identifier:   D4:E4:01:B3:D3:41:C9:76:34:E1:D2:12:1A:B8:2B:21:70:10:9C:7D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5D36805D0C100F758EA40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501064de-eeac-3774-877f-84188a5307ac.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     36620
IP address blocks:        209.112.127.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:d3:68:05:d0:c1:00:f7:58:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=d04876ea-10a1-46cb-bd2c-6019983eab56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:a4:65:cb:22:1b:ef:c7:e2:f6:43:05:6f:
                    d6:94:9b:36:cf:f7:46:af:c7:24:8a:42:73:6e:78:
                    ac:d4:eb:6b:fb:14:cc:a7:0f:68:0f:dd:6b:e4:c8:
                    e3:7d:44:26:77:01:79:b8:55:af:22:6b:bb:dc:b6:
                    59:8a:6c:8d:c1:26:67:ed:99:97:ad:2c:98:41:43:
                    d2:5a:cf:4a:3c:43:08:fa:a7:cd:7d:c5:7c:f6:c7:
                    3b:73:47:6c:dd:79:33:3e:a7:06:3b:de:39:a3:1a:
                    0f:39:48:17:f6:e6:c7:3d:66:b3:9d:6c:f6:20:fd:
                    d6:3b:7d:91:2e:eb:90:65:53:b8:60:3c:1e:a1:b8:
                    a4:c1:e5:bb:69:fe:b7:bb:98:ed:66:29:fc:80:55:
                    cd:96:a2:59:13:dc:a7:a1:41:09:d7:f9:e6:bc:eb:
                    c4:10:0b:f0:3d:f5:ac:68:e6:12:3e:02:24:0b:2a:
                    7e:5e:aa:e3:69:74:0e:11:2d:f5:36:51:80:3c:2b:
                    68:82:f2:b9:02:5c:d9:2c:3f:6b:cd:00:7b:fe:c2:
                    62:c5:25:97:56:80:00:88:81:04:1c:05:7e:6b:7d:
                    f3:13:4e:e6:90:81:31:9d:cc:b0:3c:db:dd:93:04:
                    60:40:09:5e:0a:df:ec:4a:3f:bd:32:01:04:99:da:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E4:01:B3:D3:41:C9:76:34:E1:D2:12:1A:B8:2B:21:70:10:9C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501064de-eeac-3774-877f-84188a5307ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b7:ab:a2:07:72:6b:16:d1:d2:f3:29:ee:06:17:c9:b4:ae:
         39:0b:3b:12:11:d5:2f:49:9c:1b:46:be:77:a1:88:33:02:31:
         28:f8:cd:cd:bb:6c:9e:36:81:d4:89:50:29:63:03:f1:2a:de:
         df:1b:bb:98:50:33:60:7c:72:00:52:a2:52:a8:63:52:62:ec:
         ac:49:0f:cf:ad:be:4f:44:2a:d1:32:22:c4:36:3f:cd:31:f0:
         f2:73:63:81:ef:bc:ff:cd:54:b6:bd:aa:35:e3:37:78:f8:ca:
         ef:27:a2:57:65:70:a3:c7:1c:b5:53:91:6d:c6:70:b7:2b:bd:
         77:10:0e:a5:8d:fe:15:5c:b6:6f:71:33:d1:76:e5:0c:26:8c:
         a7:08:f1:1b:60:eb:7f:20:03:8e:94:c8:f6:52:51:4d:80:04:
         87:0f:15:3d:14:5b:93:45:2b:9a:39:e7:08:23:c2:63:0c:78:
         e0:3e:5e:89:5a:77:20:1b:f9:66:df:98:8c:21:09:74:2e:62:
         72:b3:08:d2:73:ed:ca:f4:49:3e:97:8f:1f:07:82:30:4c:e5:
         e8:5d:6d:4f:3c:07:cf:e7:c1:1f:3c:9b:ae:06:61:64:ae:3c:
         8b:ac:8e:77:5c:2c:df:bf:fa:cb:99:d8:b4:7b:32:e2:86:d3:
         62:87:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:34 2024 by rpki-client on console-fra.rpki-client.org