Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ec4095-dc43-3fc3-a650-a92921654c7b.roa
File:                     f6ec4095-dc43-3fc3-a650-a92921654c7b.roa (raw, json)
Hash identifier:          eqgHl6UBMh7tK4J6dhgd1BS8WVLd+SDUxf31gjk3Mfc=
Subject key identifier:   6D:9D:6F:00:DF:57:C7:A9:41:42:E3:E2:A6:C9:4B:6C:6C:93:B7:8F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471FD5D93705FCBCBC2AEE8C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ec4095-dc43-3fc3-a650-a92921654c7b.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     396541
IP address blocks:        209.112.127.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:d9:37:05:fc:bc:bc:2a:ee:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=9c057127-5a0e-4a6f-9ecf-de6b05772a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7f:9e:52:d1:82:be:71:49:f0:0c:09:2f:b9:
                    c9:64:d6:8c:8e:07:0f:3f:03:60:0c:e9:ab:6b:4d:
                    13:04:9c:94:b4:31:b9:31:8b:86:82:10:67:a0:c7:
                    bb:4c:95:a8:e7:c5:b8:29:97:b1:1e:88:20:06:ca:
                    c9:8e:1f:ce:90:35:32:26:e0:89:c4:30:9b:c0:85:
                    e8:ff:95:ea:6c:20:f6:0a:a8:5e:70:91:e3:fe:a0:
                    18:e1:39:1e:4a:26:cd:b4:22:a2:fa:35:fe:5f:d6:
                    f5:38:a8:a6:74:1f:91:d3:37:65:3a:b0:3f:2e:39:
                    03:9c:10:85:7a:67:a7:b3:b6:21:81:26:f8:0a:e2:
                    a9:81:3d:b7:80:12:65:0f:2c:06:89:5f:e5:ba:bd:
                    73:3b:da:79:bb:46:be:2a:8c:fa:d3:b8:cf:f1:0c:
                    9e:96:28:26:00:bd:7c:61:0e:fc:22:2a:ff:bd:a2:
                    70:17:ac:04:29:80:6f:8d:d6:79:52:96:4e:5e:36:
                    d4:48:10:f7:d4:4e:75:2f:70:aa:de:ba:a3:9b:f4:
                    d7:73:9b:df:50:d4:20:bd:71:1e:0d:c5:1a:d2:28:
                    fe:14:b6:90:05:5f:9b:c9:a0:f1:71:42:a0:10:da:
                    30:47:49:04:34:c3:6e:9a:7b:96:52:ae:74:2a:65:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9D:6F:00:DF:57:C7:A9:41:42:E3:E2:A6:C9:4B:6C:6C:93:B7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ec4095-dc43-3fc3-a650-a92921654c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:41:20:92:85:61:dc:55:4b:20:08:fb:ba:fd:ec:7e:e3:be:
         7b:39:e1:04:38:b9:37:a9:49:fe:38:7d:5d:8e:0c:7c:11:7d:
         55:23:a9:24:ed:4c:37:ea:59:75:08:02:8d:f8:09:64:43:c0:
         0b:cf:db:4c:a4:b1:18:34:97:8c:9c:5e:81:ff:71:78:fc:07:
         8a:c0:17:ca:46:f8:4d:a9:14:6c:4d:72:a0:13:9c:d4:f4:5e:
         e0:13:2e:70:35:39:73:15:1f:ec:11:4d:c1:dd:e9:21:f6:f5:
         b7:8c:8e:58:7d:aa:1f:02:c2:07:9e:c7:68:70:40:d4:82:f3:
         a5:80:8c:f0:a3:a7:44:4d:db:df:0d:3e:6a:4b:7a:71:4d:5a:
         1f:0c:79:7b:5e:31:84:2a:51:70:32:92:f1:97:b4:f0:6e:87:
         f1:9e:4b:e9:87:28:b8:4f:94:59:5b:db:c0:56:c1:7b:0c:e0:
         f8:78:52:14:fe:dd:0f:df:76:7a:fc:6b:90:14:33:f9:fd:f2:
         6f:35:ea:05:e8:92:33:5f:8a:58:79:5d:95:9e:92:55:d6:9c:
         12:c1:66:35:77:95:ab:e6:f9:85:b7:56:f6:b4:70:3b:cb:47:
         21:95:a6:ad:0d:23:27:e9:fe:5d:e7:89:31:01:5e:b7:81:a2:
         d6:1d:57:47
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dk3Bfy8vCrujIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
OWMwNTcxMjctNWEwZS00YTZmLTllY2YtZGU2YjA1NzcyYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H+eUtGCvnFJ8AwJL7nJZNaMjgcPPwNgDOmr
a00TBJyUtDG5MYuGghBnoMe7TJWo58W4KZexHoggBsrJjh/OkDUyJuCJxDCbwIXo
/5XqbCD2CqhecJHj/qAY4TkeSibNtCKi+jX+X9b1OKimdB+R0zdlOrA/LjkDnBCF
emens7YhgSb4CuKpgT23gBJlDywGiV/lur1zO9p5u0a+Koz607jP8QyeligmAL18
YQ78Iir/vaJwF6wEKYBvjdZ5UpZOXjbUSBD31E51L3Cq3rqjm/TXc5vfUNQgvXEe
DcUa0ij+FLaQBV+byaDxcUKgENowR0kENMNumnuWUq50KmWeqQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG2dbwDfV8epQULj4qbJS2xsk7ePMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjZlYzQwOTUtZGM0My0z
ZmMzLWE2NTAtYTkyOTIxNjU0YzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCEQSCShWHcVUsgCPu6/ex+4757OeEEOLk3qUn+OH1djgx8EX1VI6kk
7Uw36ll1CAKN+AlkQ8ALz9tMpLEYNJeMnF6B/3F4/AeKwBfKRvhNqRRsTXKgE5zU
9F7gEy5wNTlzFR/sEU3B3ekh9vW3jI5YfaofAsIHnsdocEDUgvOlgIzwo6dETdvf
DT5qS3pxTVofDHl7XjGEKlFwMpLxl7Twbofxnkvphyi4T5RZW9vAVsF7DOD4eFIU
/t0P33Z6/GuQFDP5/fJvNeoF6JIzX4pYeV2VnpJV1pwSwWY1d5Wr5vmFt1b2tHA7
y0chlaatDSMn6f5d54kxAV63gaLWHVdH
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:27 2024 by rpki-client on console-ams.rpki-client.org