Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63b0703a-732c-3364-910f-d9d4866a9a5e.roa
File:                     63b0703a-732c-3364-910f-d9d4866a9a5e.roa (raw, json)
Hash identifier:          ofZh/tZl+EyFZaMolRtDugtBYBqmqzDFgQrbCyno+zM=
Subject key identifier:   CF:4C:A7:CB:E1:31:10:2F:E6:21:C2:22:06:01:96:7E:39:13:CA:AD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5D1DCD32526BBC81033C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63b0703a-732c-3364-910f-d9d4866a9a5e.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     396604
IP address blocks:        209.112.127.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:d1:dc:d3:25:26:bb:c8:10:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=653b5732-14ac-4090-bd82-e4d10e3af466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:56:44:72:d5:60:44:da:fb:d7:9a:16:1c:
                    e6:7c:ad:bc:9a:b4:13:e6:4e:53:e2:a4:aa:0e:3e:
                    49:1a:0e:30:46:dc:ed:09:ce:ac:6c:37:51:a1:6a:
                    25:99:c8:1e:64:0f:53:5f:8a:8d:cf:a3:73:ea:3a:
                    ca:df:b2:d7:69:eb:a6:b3:c7:80:94:44:0f:d9:82:
                    db:0b:9f:e0:e6:4b:1f:93:61:99:b9:f6:f9:dc:c0:
                    f5:ff:aa:eb:23:6f:da:f3:bb:62:51:18:ab:0c:b3:
                    84:3a:43:dc:69:47:c7:6f:c3:22:ab:94:2a:23:a2:
                    bf:66:e3:21:d0:9f:12:3a:d4:b0:d2:35:62:00:62:
                    3b:63:bd:61:d0:26:e6:25:85:3e:bd:2a:f2:1a:ad:
                    1e:23:1c:56:8a:45:a1:ee:c1:c7:69:bc:c6:33:62:
                    7b:c7:38:df:1b:5d:46:d6:af:86:97:b7:ff:39:b4:
                    42:12:8c:10:36:45:fe:65:e0:00:84:63:b1:59:2d:
                    cf:cc:67:b3:2c:b0:ac:a0:3a:ce:84:66:94:ad:de:
                    42:f0:61:2a:9d:a2:02:a6:a9:7d:50:ff:3d:9d:75:
                    02:e9:f7:2d:6b:d8:9d:0e:44:71:ac:bb:57:ea:20:
                    80:2f:3e:2e:42:e3:6e:b1:71:8d:fe:ae:48:f4:f0:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4C:A7:CB:E1:31:10:2F:E6:21:C2:22:06:01:96:7E:39:13:CA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63b0703a-732c-3364-910f-d9d4866a9a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:be:b6:3d:1c:bb:c9:b1:96:51:32:5a:21:9a:af:4d:5c:2c:
         3a:bf:5f:9a:a0:0f:36:b2:09:ee:8c:d9:fb:6d:a5:48:33:80:
         cc:83:69:c7:06:0a:66:a1:c8:12:3c:63:71:42:c8:4b:0a:81:
         4f:90:94:12:13:f5:70:af:c9:51:ae:da:4f:18:19:94:ab:f9:
         16:f4:da:b3:b0:8e:a7:63:df:52:53:19:c5:db:d9:36:79:a3:
         fa:7b:d5:0e:9e:e9:41:24:de:8d:2f:f9:6b:5f:92:03:fc:7f:
         d3:84:46:57:08:cb:8f:51:f3:00:d4:3e:5e:1c:55:6d:7a:ab:
         1f:a3:f1:88:e2:7c:1e:38:3d:47:af:05:f4:1a:bc:33:46:4e:
         f4:8a:08:34:f1:e9:50:01:dc:03:b4:82:3c:bd:f9:80:9f:75:
         3a:22:08:67:f8:6c:81:32:eb:df:9a:2d:46:36:37:fa:3f:ae:
         17:45:35:e7:cc:e9:c2:a8:48:3f:16:2b:35:b8:8a:2e:47:81:
         4f:dc:de:a2:51:dd:74:0a:de:fe:ba:a3:12:77:de:24:b5:f3:
         ff:21:3a:98:64:f1:6c:9b:6c:75:27:7b:42:a3:c2:65:a8:74:
         56:80:09:b7:32:2f:b1:b1:f4:43:b9:f0:72:ef:9f:da:e3:dc:
         b6:2c:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:36 2024 by rpki-client on console-fra.rpki-client.org