Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa
File:                     6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa (raw, json)
Hash identifier:          zqGfVtbpW2WElASXsgZZjGXDDJ/ceiCf71xajgkoyMk=
Subject key identifier:   6B:19:C6:88:35:E6:2D:69:B5:1E:3D:F7:6E:80:FF:4D:71:79:40:58
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5D4BC7CBC5E0AA6068780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     396591
IP address blocks:        209.112.127.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:d4:bc:7c:bc:5e:0a:a6:06:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=8e21da27-cc30-46d7-9824-4e20c5f37857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:42:70:27:02:41:45:fb:13:7f:35:02:01:
                    a6:b7:d2:01:36:42:20:2c:6c:83:e5:02:3c:58:e9:
                    ec:d9:78:50:af:72:d9:04:1f:ee:f3:d3:17:dd:09:
                    d4:6c:ee:ed:27:43:0b:9b:07:f2:6b:1e:5e:17:0c:
                    e8:53:24:27:89:9a:e8:b8:c2:96:e0:ca:63:af:63:
                    63:22:c5:80:80:8d:ed:a5:cb:89:49:5b:94:f2:d4:
                    f5:f3:73:1a:ba:fc:81:dd:dc:da:f2:85:29:77:5e:
                    2b:a2:90:55:6d:1e:ab:5f:ec:9d:24:71:b4:7c:35:
                    9b:66:bc:ff:9b:db:f4:f9:e7:28:d1:20:2a:29:25:
                    7e:8b:f1:9c:40:85:38:04:9d:d6:48:a0:fe:e5:99:
                    fd:f1:65:20:94:c6:87:35:f4:d4:0a:0d:44:84:f4:
                    5b:8a:78:e7:ea:a5:75:7d:83:18:48:3d:02:68:f9:
                    04:1f:87:fa:b4:2a:b4:b1:34:73:a4:e1:fd:09:cb:
                    f8:df:1a:0c:37:68:48:2b:bc:d4:90:86:29:6e:ef:
                    e9:50:6f:79:6e:4a:6a:2b:bc:11:ec:e1:58:37:6d:
                    9e:27:42:44:6e:b5:b7:ee:d2:84:8f:d5:51:c9:37:
                    96:a4:fc:87:d9:5e:b5:25:37:52:a8:15:0f:c7:f4:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:C6:88:35:E6:2D:69:B5:1E:3D:F7:6E:80:FF:4D:71:79:40:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fa:31:91:8c:6f:b3:85:3a:4d:1a:a0:78:8d:b1:d2:f4:c3:
         dd:3b:c0:ba:d4:f9:38:26:0b:23:db:c3:42:67:e1:04:e7:b0:
         7c:f9:05:d8:4b:11:e7:1e:08:db:bf:8c:4e:6f:90:33:69:0d:
         f6:71:b8:8f:72:14:23:43:ae:b8:df:4c:15:a7:d3:4c:4f:ca:
         c5:c9:44:87:60:af:ae:32:34:88:dc:0a:41:56:6a:8e:23:36:
         4b:49:3c:5c:82:6c:12:4d:00:e5:8f:ee:b8:cf:d0:d8:f2:c3:
         51:e9:fc:75:36:32:29:d0:13:c0:84:5e:2c:62:ee:18:50:bb:
         e2:34:db:80:ad:1c:c4:47:c0:80:bc:6a:37:1e:28:38:dd:9d:
         20:94:1f:9d:a1:22:09:67:98:03:7f:b3:a8:22:db:03:e8:cf:
         07:60:61:2b:c5:38:4e:04:e0:d5:7c:9e:7e:50:54:33:99:93:
         0e:69:b2:52:9a:33:d0:70:f8:3a:a0:ae:95:e2:ca:98:da:3a:
         4b:3c:cb:25:23:da:c9:43:f4:86:0d:4b:c4:44:6b:6a:d3:1a:
         4b:c0:51:d9:96:e6:5d:53:e1:75:ef:66:b0:c0:40:c4:7a:ca:
         35:f8:d4:af:9c:49:7e:e8:df:2c:1b:02:cc:72:6f:93:a4:fb:
         93:24:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:38 2024 by rpki-client on console-fra.rpki-client.org