Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa
File:                     da6984b9-0ba3-34e3-801d-a634a21e2e94.roa (raw, json)
Hash identifier:          BSmUFZRlHwlA4b1IkOn72T8dPLGu4pInPVyKP/xD9cY=
Subject key identifier:   1A:CC:DA:DE:D9:F4:9E:40:67:A4:59:4C:80:CB:BA:0E:D7:37:C3:C8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5CD48426DD9FB6F756A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     396583
IP address blocks:        209.112.127.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:cd:48:42:6d:d9:fb:6f:75:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=aa7ebc45-0ccb-442f-8312-b4b36519f6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:1e:6a:83:c5:03:25:0d:89:15:e2:85:01:
                    23:37:df:d2:e6:b9:4d:2b:34:23:97:2e:d6:6c:52:
                    ce:96:bb:2b:64:c6:d4:71:04:d1:9c:e0:0a:9d:6e:
                    69:51:82:07:2e:60:e4:58:5e:03:1e:61:57:6c:16:
                    68:97:34:2e:5e:a0:20:65:de:8c:29:00:b5:b2:f1:
                    12:5e:8b:b7:1b:0f:03:96:e3:0d:16:6f:15:87:c6:
                    76:56:9f:5a:16:cd:03:b5:4e:c4:a0:23:62:1d:f4:
                    94:a9:f7:66:14:83:35:25:26:e1:73:e6:b0:42:10:
                    be:a2:2f:88:45:1a:d3:f7:48:c2:18:da:8c:57:49:
                    26:c6:e4:b1:81:ec:fd:f4:56:6c:3a:38:9c:81:7b:
                    c1:6e:a8:f6:00:89:c1:2f:25:92:e4:9a:4f:43:90:
                    77:3e:b3:83:c6:43:0e:11:69:0b:d6:4d:d8:21:e9:
                    77:a4:f4:d8:95:94:6b:2c:3a:33:f9:02:9d:2f:64:
                    e1:cb:8e:19:7d:6e:1a:bc:4e:00:c4:03:70:1f:f2:
                    59:65:0a:d1:30:7e:20:34:aa:7f:27:34:68:be:1d:
                    41:5f:06:65:a3:02:38:cb:3d:b4:95:84:37:ff:0b:
                    c7:e9:9d:51:84:cf:14:ae:c6:46:8b:e4:e4:8a:17:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CC:DA:DE:D9:F4:9E:40:67:A4:59:4C:80:CB:BA:0E:D7:37:C3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a6:c4:e5:e5:9f:91:4c:b1:24:3b:c7:49:ee:c4:cf:10:6e:
         cc:ed:3c:b1:5f:0e:18:36:94:ef:fb:57:62:ae:12:e9:e4:d2:
         50:f9:65:ed:07:aa:8a:5c:93:38:69:60:b1:04:49:32:e3:9e:
         36:f0:8e:89:94:cb:21:0c:02:b0:08:ab:e6:43:bb:4c:90:c4:
         1d:d8:b5:5f:90:2b:a1:47:4d:8d:3d:d7:98:45:3e:b4:71:38:
         37:7a:a1:32:15:a4:15:4e:9f:76:86:ec:39:fd:10:97:5a:ec:
         b5:fd:86:98:10:82:7c:ab:55:56:b0:75:ed:95:63:de:eb:46:
         af:ca:64:8d:16:27:54:08:43:69:d7:69:d9:4b:43:48:a2:45:
         56:08:ba:35:60:c9:2c:e1:92:e5:e0:bf:a6:d5:7d:87:24:4b:
         ea:ee:0a:54:cb:7d:b0:e5:36:3a:da:b1:fd:e6:a0:10:1d:83:
         8a:9c:60:00:6d:58:81:b0:6e:e1:08:f3:2e:67:37:94:99:0c:
         9a:76:e6:5e:3d:90:38:1e:60:da:8b:aa:f0:f2:fa:d0:63:25:
         c9:47:c6:51:82:12:00:65:c2:7d:8e:87:2d:01:88:21:eb:c0:
         ea:8f:ba:1b:7a:a3:d6:ce:a1:35:96:ea:85:08:b5:87:9c:b5:
         dc:39:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:25 2024 by rpki-client on console-ams.rpki-client.org