Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/509d4b5b-4f50-39ba-a1bc-64325743d7a5.roa
File:                     509d4b5b-4f50-39ba-a1bc-64325743d7a5.roa (raw, json)
Hash identifier:          UNJk768mu7sFJRLLRByw2kJTzFuBnNSaZ+mxmoMwO1o=
Subject key identifier:   13:77:7D:98:60:0E:23:8D:0D:FD:D7:76:41:7F:F8:F2:B4:6E:5B:BA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E00680BFE62F58121ED7CA60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/509d4b5b-4f50-39ba-a1bc-64325743d7a5.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     396572
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:80:bf:e6:2f:58:12:1e:d7:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=ea686160-9690-4763-b7e5-ea94e975d580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:54:ad:32:2f:9b:01:10:ac:37:f9:14:43:
                    b4:ec:5b:5d:4f:4d:5c:30:0d:0e:43:d2:47:d8:aa:
                    c8:0a:24:97:68:24:fa:12:48:da:a9:8a:c4:17:9b:
                    80:7b:9b:b4:95:18:4a:5d:7f:f7:85:5f:59:ba:0c:
                    a6:81:d7:81:02:a7:80:28:9e:1f:8c:58:7c:6b:3e:
                    0d:9e:53:99:11:ee:51:31:14:b8:9d:6d:4e:ee:7c:
                    03:24:e8:bf:ae:0b:9e:f9:68:35:f3:39:3b:c7:d1:
                    31:61:0e:99:a5:c4:10:36:3d:f9:5c:12:96:f1:09:
                    41:3c:bd:b6:40:94:c1:31:07:1c:46:cd:80:d1:d3:
                    5c:65:69:d1:cc:14:df:61:8d:4e:ec:4c:07:2f:0c:
                    df:21:da:75:42:f4:34:7b:84:6e:c8:a8:c0:ad:45:
                    1f:ee:b3:94:af:c3:52:ae:ba:61:27:29:bd:25:ce:
                    01:fc:8e:12:30:a3:47:2e:49:7f:85:64:e8:8e:27:
                    9d:ed:7a:2e:fd:96:76:9d:26:25:78:60:16:b3:7e:
                    9f:f3:bb:70:f2:4a:f4:73:dc:43:14:76:25:24:fb:
                    d5:c4:d4:1a:5d:99:2a:8c:d2:8c:c1:69:cf:fb:8c:
                    fe:67:a2:ed:5a:d8:c6:1d:c7:2c:a0:5a:53:91:35:
                    a5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:77:7D:98:60:0E:23:8D:0D:FD:D7:76:41:7F:F8:F2:B4:6E:5B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/509d4b5b-4f50-39ba-a1bc-64325743d7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:b9:4b:a6:b0:21:27:ae:57:ba:cd:6f:be:1d:ab:04:82:
         76:91:05:18:98:44:51:be:96:2d:63:1e:cc:37:df:cb:db:51:
         ef:5f:d7:b8:5a:0c:b4:24:43:d1:e6:79:a3:3d:fa:41:57:6a:
         75:fa:68:67:5b:70:71:91:01:5e:33:54:6c:af:8d:1c:c1:a7:
         c6:41:dc:70:1a:fd:87:07:b4:58:52:6b:cc:5f:44:89:15:38:
         64:2e:a2:ee:23:a8:01:9c:7f:21:b3:9b:e9:60:3c:a2:ee:df:
         48:75:e2:07:71:a7:e2:0c:49:22:c1:b6:72:56:fa:98:ac:98:
         68:22:2b:15:b3:8b:47:2c:9a:d7:d7:69:6f:fc:c1:68:71:ba:
         a0:62:9f:03:50:7a:ee:d9:d3:60:86:02:72:4e:67:90:fa:f4:
         d5:47:7b:0a:be:b3:26:5b:c7:fa:fa:04:61:39:ea:6e:4f:c7:
         a5:c6:dd:56:79:a1:9d:82:61:2e:06:0b:53:64:04:af:dc:8c:
         3a:db:ce:28:ad:39:19:d2:40:8d:e1:17:81:4a:77:ba:19:be:
         33:34:58:ff:d2:77:74:f8:a2:17:1d:80:55:5c:66:4c:f8:3c:
         a5:e3:38:55:c7:1b:21:06:d2:c3:20:9a:1b:3d:19:da:01:c7:
         40:4d:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:30 2025 by rpki-client