Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa
File:                     dbae136a-600c-3ec1-8570-5618e3baf9b7.roa (raw, json)
Hash identifier:          8fGelaNAh1wbKdq/wgBnjldpApZ1x3PC8ZCYy2bCd98=
Subject key identifier:   BB:CD:FD:1C:0A:A8:55:2F:57:05:56:FC:85:76:24:87:68:77:81:D3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5D835833A15E59D5E9400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     36631
IP address blocks:        209.112.127.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:d8:35:83:3a:15:e5:9d:5e:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=ac25676d-9073-4b81-b434-18a9f2aa5bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:3a:4f:ea:d3:2e:77:c9:32:bc:a9:20:bc:
                    5a:8f:73:b1:d7:a4:a8:a1:75:e7:81:25:c0:ad:f9:
                    32:9d:19:be:ea:ae:7e:73:e1:b4:a5:90:e0:2a:e1:
                    bc:48:1e:e5:61:e3:15:b1:26:17:e7:20:ec:41:f0:
                    62:54:c9:6b:3a:18:9c:2e:50:55:ee:2f:91:92:58:
                    5d:5c:27:ed:58:a3:28:e6:12:b7:45:6e:62:89:ac:
                    03:58:6d:b7:72:82:e6:01:5b:84:dd:78:0c:b2:bc:
                    dd:de:3c:95:f5:bd:cd:87:f0:01:dc:8d:8b:6f:42:
                    c9:b4:96:39:0f:80:1d:1c:16:f1:1b:b4:fb:49:cb:
                    72:ea:29:65:c9:61:2c:c9:e3:28:63:08:76:e9:4c:
                    03:28:9c:6e:94:3e:94:13:5a:b8:be:f4:4b:f5:a1:
                    fd:d8:73:d1:db:98:85:a9:7a:4e:46:1b:3d:50:0b:
                    b5:d5:db:b4:59:ac:20:18:6b:c1:2a:02:32:b1:28:
                    86:8e:0d:a1:4e:7d:86:54:a8:f5:8b:cd:a5:23:4f:
                    09:c6:77:20:1e:c9:d8:46:52:2f:cd:ec:a4:ee:61:
                    74:9a:09:05:76:f9:22:a1:d2:1a:a1:2e:b3:55:e8:
                    a8:14:09:77:7c:d3:ab:32:57:f0:bc:d9:bb:a0:0f:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CD:FD:1C:0A:A8:55:2F:57:05:56:FC:85:76:24:87:68:77:81:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:7d:aa:2b:d7:b2:1d:e0:77:0a:de:d3:cf:7a:9d:b6:e7:
         01:a5:d9:31:38:3a:69:69:bb:35:ef:ff:12:59:89:e2:c9:91:
         cc:b6:ea:d7:d1:4d:bc:25:ee:96:ce:87:c4:d8:00:e2:34:c6:
         e0:c4:b1:fe:08:fe:71:5f:79:90:fc:d8:d3:ab:3b:e8:4f:87:
         3f:e7:ac:60:d8:d4:93:20:76:a4:d0:20:ca:5f:73:11:29:56:
         14:36:25:de:33:7a:73:80:0f:82:3f:28:ba:61:a5:b4:81:1b:
         28:53:a8:99:e0:d1:ba:26:04:35:3b:8b:9f:3b:c7:c4:36:0a:
         9c:52:97:9b:6d:a2:d1:05:39:44:ec:3f:12:34:d4:6d:5f:25:
         d5:43:2b:ba:0a:cf:f5:cd:8b:5e:95:e4:c5:9e:e2:2b:3c:02:
         25:a7:d3:b6:23:2c:24:11:0f:bb:03:ab:0c:5e:94:cb:24:5a:
         de:14:5a:73:d6:57:1e:89:e3:8f:7c:62:35:74:49:7c:63:bc:
         fb:51:05:d8:9a:33:c0:4c:89:ae:f2:4d:82:19:9e:88:55:63:
         03:d5:d8:d5:a0:c8:ef:05:e0:54:5a:41:e9:39:06:52:ba:75:
         ef:33:84:83:3c:68:2b:d5:f8:b1:da:05:06:0d:5d:22:e8:a1:
         cc:28:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:25 2024 by rpki-client on console-ams.rpki-client.org