Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa
File:                     ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa (raw, json)
Hash identifier:          TzBEYbF9dcQKUKSv4q9gza6I9Tx0yxlB6877Gg2Y6FE=
Subject key identifier:   45:0C:9D:C9:46:C3:74:BD:FF:94:50:C2:9E:27:02:AE:84:C6:DA:3C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5DA860DC948AC27D84E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     397195
IP address blocks:        209.112.127.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:da:86:0d:c9:48:ac:27:d8:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=05b1e2d2-f877-43fa-80ee-920a7032f7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:d8:79:45:02:17:bb:ad:3b:a0:f7:ba:2a:
                    71:ab:44:72:db:42:4d:bb:4e:b7:6c:88:87:17:49:
                    0a:ac:f7:ec:52:ca:c8:cd:2b:60:c0:a0:c1:87:85:
                    c7:51:8a:ab:40:d9:ca:57:a1:31:f7:e6:83:6c:32:
                    60:90:cb:51:3d:f3:60:a7:d5:c2:1d:5e:03:4d:83:
                    0f:db:47:90:8b:ee:fa:5f:d7:62:5e:b2:78:00:04:
                    39:e1:59:1c:39:b6:7e:71:4f:ab:0d:ac:22:19:f8:
                    c7:61:d9:9e:84:c4:55:8c:36:8c:31:d4:e1:ab:2d:
                    50:28:b1:a6:44:a1:e0:94:38:f0:fc:96:4b:25:a0:
                    38:f4:6f:12:db:aa:59:3b:3b:7d:42:6d:d7:5b:13:
                    0d:0e:1e:bf:a7:3a:96:68:25:90:07:3f:72:fa:df:
                    b3:28:e5:a7:82:11:d7:8a:db:10:76:e0:84:32:da:
                    bb:86:34:e8:65:7a:91:ef:ad:55:3b:f7:0d:b6:62:
                    07:e8:c4:90:63:1d:34:57:71:3a:e6:0b:bf:f8:0e:
                    12:a7:d6:e1:8e:d2:c0:6b:c8:80:9c:df:9e:75:e2:
                    12:25:b0:31:75:a6:19:20:e2:11:72:94:8b:11:47:
                    09:3d:db:ff:88:d7:3b:77:66:05:c1:10:1e:62:6d:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0C:9D:C9:46:C3:74:BD:FF:94:50:C2:9E:27:02:AE:84:C6:DA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3b:2d:a2:13:d9:e0:1f:49:60:3a:c0:74:9d:fd:96:1d:f6:
         06:f7:11:91:71:39:d1:64:02:ca:a1:e3:2a:0a:63:20:40:92:
         9a:2c:97:6b:ca:1b:30:75:49:8e:8c:99:d5:3f:91:7c:2c:27:
         e5:cc:af:73:25:d4:ec:65:5d:14:b1:80:34:21:7d:ac:de:60:
         66:35:da:03:fa:56:d2:d5:06:9d:08:26:fd:99:b9:20:21:89:
         8e:f9:4a:da:10:16:f8:1c:5f:20:37:98:92:fd:ae:4e:d7:08:
         9c:a1:5a:f0:c5:03:e5:c8:21:57:0c:d2:b4:c4:9d:bf:38:94:
         c0:67:a0:ef:58:16:b0:24:51:7b:43:e7:c8:06:3b:a1:eb:42:
         52:ee:15:22:52:b9:8b:f4:0f:ee:6f:6d:87:f3:1e:21:bd:7b:
         01:ce:0f:3b:00:30:a0:7d:36:f0:70:97:38:a5:57:11:b9:6d:
         c8:9d:6a:d6:2c:d1:e4:f0:11:24:ac:f1:2b:8c:32:92:ea:59:
         c9:65:9b:f5:ce:1d:95:8a:59:db:bc:eb:6e:f6:43:99:e1:f7:
         08:c0:83:47:08:d1:67:ce:c2:d0:c8:06:d9:97:44:6c:77:08:
         3b:b8:2a:65:c2:74:78:f8:4f:eb:6f:83:ba:94:9a:10:5d:eb:
         bc:c4:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:26 2024 by rpki-client on console-ams.rpki-client.org