Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032260f9-f204-33f8-b54b-8e9499aac226.roa
File:                     032260f9-f204-33f8-b54b-8e9499aac226.roa (raw, json)
Hash identifier:          6oepZXILxFhvYl5Ic5L3pROzTzHJYUWrDuf3StTr2WU=
Subject key identifier:   76:26:D7:3D:D5:07:CA:F0:B1:F0:18:C7:FC:A5:8E:A5:27:40:15:BE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849BF3F8C02B42D3617DEF37000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032260f9-f204-33f8-b54b-8e9499aac226.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     397209
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:8c:02:b4:2d:36:17:de:f3:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=95f0f2ae-8b99-4995-8883-b0ffe4442f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:ba:13:ff:32:e2:87:72:01:b4:f6:dd:0c:
                    5a:11:07:23:08:40:e3:85:ad:da:37:82:46:10:ca:
                    6e:94:3e:3d:9f:64:e9:4b:40:fc:8b:f0:5c:f2:dd:
                    14:c5:e6:28:b0:48:43:bc:be:f1:0b:b3:7b:5f:51:
                    0d:5b:b9:2c:79:ff:88:07:23:43:92:2a:8c:e7:5d:
                    a3:e1:f7:b6:57:6c:45:16:60:cf:29:e6:d8:54:81:
                    e4:aa:70:e3:d0:bf:a4:01:1f:8b:eb:26:73:93:8e:
                    91:d0:9a:1d:17:ec:93:e0:77:74:c9:92:3c:b1:0a:
                    1f:fb:f6:3f:89:5b:9d:d6:23:7c:d6:34:66:2a:cb:
                    10:2d:4e:e8:11:08:7b:f6:ce:c8:82:2a:06:08:22:
                    d2:ee:92:12:3c:f1:5f:a4:8f:9c:c9:9e:be:54:96:
                    6d:d2:e8:b5:f0:89:23:bb:74:0f:98:f9:df:e2:23:
                    db:2a:0f:85:fc:04:85:24:6c:cb:e3:c4:60:e0:a7:
                    de:21:ce:ba:d6:08:30:d5:af:94:27:d4:fc:ea:13:
                    40:7b:82:48:1d:82:aa:98:d7:32:e6:31:3a:fb:aa:
                    41:2c:85:54:5d:06:5e:8a:63:f4:de:ad:c7:ba:c5:
                    7c:a2:f2:1b:64:88:f6:f6:78:96:71:d1:5f:27:33:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:26:D7:3D:D5:07:CA:F0:B1:F0:18:C7:FC:A5:8E:A5:27:40:15:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032260f9-f204-33f8-b54b-8e9499aac226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6b:6e:f2:f4:e5:19:b7:fc:48:f6:d2:0e:b8:5f:e1:c0:f3:
         8b:4a:db:be:26:a4:75:10:2d:92:6b:70:4f:da:eb:12:71:90:
         5a:85:03:9c:37:44:d8:43:91:51:e4:6c:6e:e3:ba:ae:80:02:
         0b:61:c8:81:9b:fe:d1:c8:71:4e:06:21:5b:16:4d:a8:e6:46:
         81:e3:97:99:cf:84:9c:bd:6f:17:18:44:0c:79:0e:25:5d:08:
         e7:23:4a:b3:84:3b:e2:92:1e:a9:ba:1c:75:aa:ac:3c:04:a6:
         46:63:c6:f5:f7:05:04:2f:c1:d4:b1:95:ad:1c:f0:1e:e8:c1:
         38:d9:67:04:a6:9a:79:5b:6c:5b:ae:2a:46:1d:7b:54:bd:17:
         d2:58:6c:b9:80:30:22:83:c2:e1:c3:80:12:3d:3d:9c:25:97:
         3b:cf:00:53:58:44:1f:39:80:c1:30:48:69:f8:07:03:d7:9a:
         57:ea:5d:5f:2b:3a:ab:45:e7:38:13:1c:16:9e:67:44:07:f3:
         95:52:15:02:8a:9a:04:ea:9a:e7:e5:61:ae:4b:70:57:c5:25:
         2c:cf:cf:1c:ee:95:95:3a:b2:4c:e4:77:a8:91:54:58:8e:35:
         24:b9:97:fc:45:21:10:07:43:23:0d:b4:a3:97:de:8f:c6:25:
         a8:ca:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:43:00 2025 by rpki-client