Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71c98c9b-ee4d-3851-aec6-41ca62f53cce.roa
File:                     71c98c9b-ee4d-3851-aec6-41ca62f53cce.roa (raw, json)
Hash identifier:          g1RVhEklB7hUcaStWIdjYOpahFPk+enn/vMm5sYWthY=
Subject key identifier:   AA:A2:1C:05:F7:45:61:B4:2D:0A:11:CA:20:E7:41:C1:BC:3E:E0:64
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E006794EFC7F155D20929B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71c98c9b-ee4d-3851-aec6-41ca62f53cce.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     396592
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:79:4e:fc:7f:15:5d:20:92:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=adf3c59b-3f22-49f4-985e-8e75c7684139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:3c:17:f5:43:d6:7a:74:e9:a5:63:d3:a2:
                    a8:04:fb:cb:62:b3:d0:e6:70:fb:e2:22:e7:fe:ef:
                    66:9e:23:18:ed:e6:ac:ac:84:d3:3e:23:d4:63:75:
                    cf:89:26:2a:f4:37:b8:8f:1c:7f:e9:6a:a7:06:d0:
                    60:46:b3:1b:22:ff:aa:89:d5:af:72:a1:d9:4b:e6:
                    05:bc:41:33:d3:c8:20:4c:a3:8d:dc:94:a2:53:b2:
                    84:bd:d2:ab:64:22:19:46:ad:25:5d:cb:33:05:97:
                    41:33:84:ce:a1:c3:f9:71:04:b8:25:73:32:05:d7:
                    e1:d2:42:c5:94:25:be:ac:f9:64:87:8e:2b:c5:47:
                    40:90:9d:9e:f3:53:80:e2:eb:0c:a5:cf:7a:9e:1a:
                    d3:19:63:39:06:e3:16:35:cd:8e:f4:8d:5b:26:82:
                    ec:42:16:22:bd:61:2e:b8:1a:05:b4:e2:cd:cd:a7:
                    cf:05:46:50:7d:e1:a3:69:29:2f:96:e7:e7:43:e0:
                    35:ee:1d:a1:73:ce:8d:2f:9c:7c:ff:aa:13:5b:27:
                    2f:3c:2d:32:c5:a2:50:6e:d9:80:e0:41:9d:32:60:
                    41:87:1e:bf:9f:2c:b6:cb:fb:22:eb:d0:5b:12:86:
                    4e:f9:6c:57:26:3d:51:eb:dd:8f:d2:02:7c:24:98:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A2:1C:05:F7:45:61:B4:2D:0A:11:CA:20:E7:41:C1:BC:3E:E0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71c98c9b-ee4d-3851-aec6-41ca62f53cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:8a:aa:2d:3b:77:8e:87:91:80:29:19:e5:6e:aa:37:3d:
         3f:bf:64:af:f8:d0:b4:f3:1d:05:dd:e5:e0:2f:4c:fe:e2:a0:
         54:c0:b8:ea:55:25:6c:6a:3a:f2:2f:df:a4:4c:70:03:eb:47:
         62:0d:ce:ac:4a:7e:8f:12:99:0e:5b:aa:bf:0c:8d:cd:3e:5c:
         10:f2:f9:06:32:35:91:db:6b:2a:ca:e5:7f:ab:10:42:e1:c9:
         a4:be:d6:92:91:90:bc:14:26:1a:9c:da:45:e4:70:63:40:0b:
         72:46:75:19:26:1f:d8:be:73:93:5f:af:4a:46:92:dd:01:fe:
         f2:92:3e:d8:fb:c2:5c:b3:dc:cc:22:bb:1a:e6:8e:75:3c:54:
         c6:ac:ff:61:66:ff:78:c9:cf:a9:a6:c5:d1:ef:67:72:a9:ba:
         d4:bf:0a:7f:b2:30:0d:da:d4:70:0a:58:88:09:71:7b:e4:73:
         87:8e:2b:f3:63:54:2a:d4:da:1a:71:7b:11:62:28:44:50:95:
         c8:a4:31:98:8d:6e:01:31:08:08:0c:40:61:33:95:ea:43:ab:
         4a:d5:ae:73:05:08:75:2d:1a:6c:a2:e6:8b:61:11:77:b3:ca:
         d3:ea:55:9a:02:1f:8b:87:e5:ea:bd:42:ff:f4:7d:80:fd:fa:
         f1:38:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:09 2025 by rpki-client