Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa
File:                     82670539-bfff-3308-b662-a1acd7aa0b03.roa (raw, json)
Hash identifier:          d1Z3Q5ogUVEHtiWB+BRg5rO5YA9CXt5FdsB9pVc/4eg=
Subject key identifier:   EE:D2:9E:51:C0:9A:87:8E:35:51:84:1E:3B:CE:62:06:E1:5F:21:A3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5CD6FD682FB30970D4B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     396549
IP address blocks:        209.112.127.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:cd:6f:d6:82:fb:30:97:0d:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=24224374-4b62-4ab1-84ac-927cc1b828bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:95:b1:c1:1d:88:0f:01:54:f3:0c:e4:2f:
                    97:02:67:f7:2b:cf:23:15:42:ae:5b:63:d6:40:97:
                    e0:fa:bd:5a:73:1a:44:13:7c:6e:f7:2c:99:59:53:
                    5e:29:37:c3:bb:e8:62:a7:61:67:4f:d3:b8:c5:df:
                    60:cc:db:89:98:ae:2e:d9:9d:dc:9b:f0:cf:d0:6b:
                    c7:50:00:6a:1b:74:49:94:44:0c:51:c6:38:51:42:
                    6e:17:1a:83:38:46:6d:d8:bf:56:e9:ed:5b:ed:89:
                    4a:db:84:19:13:cf:25:c5:46:66:ca:93:0b:d0:84:
                    af:a5:7d:d1:4b:f9:00:ad:e8:42:c7:99:a0:f0:84:
                    b7:af:22:76:21:13:33:bf:42:18:08:a3:24:35:0d:
                    31:19:fe:6f:3e:a5:00:6c:db:27:ef:4f:f1:81:59:
                    9d:a8:9d:d8:2a:ce:b0:74:63:4a:f1:23:63:96:0f:
                    80:f2:3f:ea:77:7b:aa:af:b8:fe:05:11:4f:9a:a6:
                    54:86:c5:d1:c3:35:b8:ad:af:8d:55:2f:87:ea:8c:
                    00:25:8d:37:e4:23:cb:3e:af:51:8a:86:a5:ff:b7:
                    02:64:76:0a:cd:30:0b:f8:90:ef:63:bd:9f:3b:e0:
                    8d:28:27:b8:ba:05:cc:dc:f3:8f:14:fc:d4:2b:eb:
                    5a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D2:9E:51:C0:9A:87:8E:35:51:84:1E:3B:CE:62:06:E1:5F:21:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:f8:c2:24:48:bc:f0:c4:b5:77:75:af:32:e0:12:95:22:
         b0:5f:8d:7e:71:66:3b:3c:b9:91:73:c8:1d:a6:b6:cc:bf:9a:
         63:dd:ce:c8:e1:5c:ce:3a:c7:d9:00:b1:ba:77:b3:52:28:f5:
         51:ec:d3:1d:34:eb:4a:39:6b:9b:80:50:bf:80:4a:93:ae:cf:
         c0:5e:a1:0a:0e:1e:8f:64:6f:8e:be:29:ff:34:58:2b:1f:e7:
         53:0e:c4:54:7f:c0:46:fa:bc:d8:4c:47:c5:c8:8d:ae:42:11:
         80:c8:69:28:db:ae:46:fd:3c:40:85:b0:1d:e2:75:23:1d:ad:
         a1:be:cb:b0:a5:42:49:dd:67:dc:ff:37:24:35:b8:71:6a:69:
         46:bc:8f:b4:e7:42:6a:d6:7d:dc:22:fb:80:b0:2a:42:64:3f:
         72:df:b9:1f:7f:a0:5d:2e:70:32:b3:2d:e6:da:17:06:a9:f7:
         64:da:f2:66:29:ca:50:53:e8:be:bb:57:7e:27:02:4f:03:f1:
         4f:fc:0a:25:42:6e:70:50:e0:bb:c7:76:4b:b8:56:78:a1:83:
         f9:54:e7:b8:f6:7a:ad:a5:b0:03:8b:42:ca:09:aa:f4:6a:aa:
         be:cb:3e:cb:41:01:3f:d0:25:a4:12:2a:8d:ec:51:92:37:e7:
         a4:60:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:39 2024 by rpki-client on console-fra.rpki-client.org