Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ce41556-7b26-3b17-aaea-cc0f7ab25ce3.roa
File:                     8ce41556-7b26-3b17-aaea-cc0f7ab25ce3.roa (raw, json)
Hash identifier:          erKbhV+G9XEjGtFy7U46eOs143hN2KMzezWxt66LOeA=
Subject key identifier:   35:EA:EF:9F:1C:EF:D3:99:E2:9A:EE:9C:65:AC:91:6C:6C:41:A6:1E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5D5A02988E058B2F56E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ce41556-7b26-3b17-aaea-cc0f7ab25ce3.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     19836
IP address blocks:        209.112.127.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:d5:a0:29:88:e0:58:b2:f5:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=439509af-fbad-4cce-8c19-710d5858bc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:f5:3b:2d:a1:f1:78:3a:03:67:5b:25:0c:
                    3a:28:1d:b4:83:d2:ef:04:41:07:ac:50:06:89:50:
                    bb:a1:d4:ac:c4:4e:94:f0:d7:6c:15:17:71:18:61:
                    4a:cc:94:97:e9:ed:29:2f:34:4c:0a:d2:07:da:e9:
                    8d:c7:da:64:bb:e4:f5:56:cb:37:61:b3:b1:10:4b:
                    3a:68:f8:41:b0:07:c0:10:cf:85:c4:a4:a7:a6:53:
                    12:bd:dd:0f:1e:e9:ce:4d:a6:80:2e:68:f7:e8:5a:
                    bc:b3:91:98:1f:c4:40:f3:a8:57:03:87:6e:13:21:
                    ce:00:62:14:d8:bb:21:f8:b3:25:7d:81:3d:1a:27:
                    5e:01:8c:13:c0:3a:41:06:2e:00:25:13:fa:97:dc:
                    b4:e0:04:61:0b:79:5c:1a:a3:00:24:1a:ad:74:b5:
                    c1:12:fd:80:1c:8a:51:b2:c3:c5:1c:24:68:a7:57:
                    40:dc:ea:69:80:c1:a2:9b:9e:aa:c1:89:da:8c:bb:
                    24:38:8d:e9:8c:35:8e:49:25:6e:9b:75:35:e3:66:
                    03:97:59:c9:8c:76:96:9a:90:1a:39:de:9c:1f:94:
                    60:29:fd:d9:07:4a:7a:aa:67:ac:c7:83:f0:d3:ff:
                    17:4f:b8:59:fa:2d:7b:2f:7c:c2:ea:c2:2a:91:c8:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:EF:9F:1C:EF:D3:99:E2:9A:EE:9C:65:AC:91:6C:6C:41:A6:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ce41556-7b26-3b17-aaea-cc0f7ab25ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:5e:cb:3a:7f:a9:9e:5a:de:4a:16:db:a2:df:c7:e3:27:
         8b:af:9f:d2:2a:52:63:18:d2:80:3d:af:59:b5:17:2c:67:8d:
         f3:72:19:04:59:69:65:c8:6b:47:6b:02:26:d1:62:ab:98:ce:
         2d:8e:45:c8:d9:af:81:1d:53:88:bf:83:60:f6:78:23:f6:dc:
         a2:f9:aa:80:a8:59:30:f1:2d:86:0b:6b:bc:33:a6:9b:65:33:
         72:31:78:b6:45:48:6c:28:be:e0:f5:fa:28:17:40:33:ed:3d:
         e9:22:db:9c:f2:97:dd:1b:08:00:dc:71:78:d4:84:be:9e:c6:
         40:0a:78:8d:ec:d9:45:8a:f5:49:d6:50:60:c0:8e:48:e3:0a:
         a3:e4:d6:47:38:d5:90:8f:b8:0c:9f:6a:df:af:59:f4:13:19:
         35:47:15:75:bb:f0:56:6b:40:c1:06:c2:5b:20:8b:3e:a1:21:
         ef:c5:b9:f8:0d:cb:3a:bd:db:e5:29:39:70:9e:f6:7d:cc:ec:
         58:33:48:ad:d0:ca:ed:5c:6f:f1:b4:1f:69:21:64:c2:f6:f2:
         b4:24:68:aa:c3:9b:d4:dc:ba:16:a0:73:92:ec:c4:19:8b:67:
         0f:98:f6:d8:16:34:a0:46:8f:cf:1c:9c:4f:1c:15:88:4b:25:
         92:85:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:40 2024 by rpki-client on console-fra.rpki-client.org