Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70180e87-28c2-345e-9b3c-e3932374ed3d.roa
File:                     70180e87-28c2-345e-9b3c-e3932374ed3d.roa (raw, json)
Hash identifier:          x4NzkcP8/SpKOf4mVnV2SdRuC/4ySqcu+eoDRG+EY0s=
Subject key identifier:   94:8F:DD:C0:94:DF:93:E0:B2:8C:72:50:6B:AE:C3:C3:1F:11:2E:35
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5D048FC23BDAAB04CC380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70180e87-28c2-345e-9b3c-e3932374ed3d.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     396614
IP address blocks:        209.112.127.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:d0:48:fc:23:bd:aa:b0:4c:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=a235a24a-8fd7-4ce8-912a-3e7f7c56d7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fb:e2:cc:98:22:fb:4a:6b:29:1e:a2:b9:59:
                    20:5d:91:af:9b:02:6f:3b:2a:cf:d3:08:47:fa:de:
                    f5:56:a6:db:4a:06:fa:8e:e7:de:8c:d1:80:f8:2c:
                    df:d4:5e:3e:dd:f3:77:a4:2d:9f:99:08:3b:b5:93:
                    d6:e0:de:d1:e7:19:24:19:d0:e9:66:da:eb:22:de:
                    7a:62:d1:7c:74:d3:7b:f5:a6:19:c7:d4:32:0f:e7:
                    5f:ee:d9:05:0c:28:18:05:ea:a5:e8:20:74:07:b7:
                    d5:1f:d4:7d:1b:bf:c0:3b:24:a6:bb:cd:12:4a:9f:
                    c7:78:e9:86:5a:ae:9a:78:cf:2b:32:e8:0e:c8:c3:
                    96:1a:a9:15:c2:0b:37:35:02:8f:d8:2e:3e:ae:5d:
                    4d:ab:b6:55:b3:27:1e:0e:b9:fa:ee:10:1c:ef:44:
                    ef:1b:e4:01:b5:4f:96:44:cb:80:a4:76:97:32:8a:
                    20:bd:ac:ef:10:9d:65:77:a8:65:07:c0:bb:f4:00:
                    83:52:4e:dd:1c:83:11:c4:eb:34:c3:cb:d6:6f:73:
                    15:59:4d:25:b3:33:3d:d0:60:6f:56:3f:0c:9a:a8:
                    c8:3b:2e:10:45:c7:96:17:ae:30:04:af:14:cf:b8:
                    be:44:a9:7c:c7:be:f6:2f:85:b5:ab:7d:ef:b2:d6:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:DD:C0:94:DF:93:E0:B2:8C:72:50:6B:AE:C3:C3:1F:11:2E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70180e87-28c2-345e-9b3c-e3932374ed3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:77:a9:a9:4e:d2:6e:b9:93:81:f1:45:fd:22:93:8b:45:37:
         a5:67:f2:80:81:74:56:f4:97:5d:70:a2:3e:71:2e:a1:4c:9d:
         00:61:5a:46:f5:5c:88:06:27:2e:d6:57:37:86:4f:50:37:28:
         44:60:77:b9:33:07:61:c6:e6:f6:10:11:50:e3:d0:9e:a0:15:
         8e:a0:93:f8:a2:12:6e:1f:fe:22:98:7a:22:cd:d1:95:96:c9:
         4d:2a:73:d1:31:44:d1:88:ab:94:9b:8b:d7:a9:ec:97:58:bb:
         d9:75:cc:80:9c:04:20:5f:30:34:4a:4d:21:eb:f9:8c:f6:e9:
         c1:22:ed:8e:80:a2:d6:a6:e9:19:34:f7:d7:3f:87:a1:03:03:
         ee:65:fd:8f:dd:a1:f9:b5:43:e8:9d:cd:07:75:cf:88:41:46:
         43:a7:0c:4a:17:b5:ba:5f:da:08:b6:b1:ec:09:bb:db:0b:be:
         5e:08:ab:5e:88:66:cb:00:da:bb:fa:bf:ac:d3:4f:04:97:af:
         98:ca:36:92:2d:4c:f9:4e:02:bb:05:7c:47:08:16:13:fd:c3:
         42:15:5a:bc:08:e2:a9:b6:db:17:00:83:c3:30:b0:f2:27:86:
         cb:e1:0e:01:33:61:f8:a9:01:e7:ed:66:cc:6c:cc:13:f5:5d:
         2f:a2:94:37
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dBI/CO9qrBMw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
YTIzNWEyNGEtOGZkNy00Y2U4LTkxMmEtM2U3ZjdjNTZkN2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fvizJgi+0prKR6iuVkgXZGvmwJvOyrP0whH
+t71VqbbSgb6jufejNGA+Czf1F4+3fN3pC2fmQg7tZPW4N7R5xkkGdDpZtrrIt56
YtF8dNN79aYZx9QyD+df7tkFDCgYBeql6CB0B7fVH9R9G7/AOySmu80SSp/HeOmG
Wq6aeM8rMugOyMOWGqkVwgs3NQKP2C4+rl1Nq7ZVsyceDrn67hAc70TvG+QBtU+W
RMuApHaXMoogvazvEJ1ld6hlB8C79ACDUk7dHIMRxOs0w8vWb3MVWU0lszM90GBv
Vj8MmqjIOy4QRceWF64wBK8Uz7i+RKl8x772L4W1q33vstZ9SwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJSP3cCU35PgsoxyUGuuw8MfES41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzAxODBlODctMjhjMi0z
NDVlLTliM2MtZTM5MzIzNzRlZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCBd6mpTtJuuZOB8UX9IpOLRTelZ/KAgXRW9JddcKI+cS6hTJ0AYVpG
9VyIBicu1lc3hk9QNyhEYHe5Mwdhxub2EBFQ49CeoBWOoJP4ohJuH/4imHoizdGV
lslNKnPRMUTRiKuUm4vXqeyXWLvZdcyAnAQgXzA0Sk0h6/mM9unBIu2OgKLWpukZ
NPfXP4ehAwPuZf2P3aH5tUPonc0Hdc+IQUZDpwxKF7W6X9oItrHsCbvbC75eCKte
iGbLANq7+r+s008El6+YyjaSLUz5TgK7BXxHCBYT/cNCFVq8COKpttsXAIPDMLDy
J4bL4Q4BM2H4qQHn7WbMbMwT9V0vopQ3
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:16 2024 by rpki-client on console-ams.rpki-client.org