Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2f40c623-4081-3f9f-bf71-ed61ef2381c4.roa
File:                     2f40c623-4081-3f9f-bf71-ed61ef2381c4.roa (raw, json)
Hash identifier:          CKN53ocpeSBsNyPx/Ao/5tuezr+AFxTwN8W+BVsikIg=
Subject key identifier:   DE:8C:B0:46:29:EF:C8:71:FD:B8:C2:4B:27:37:56:D5:5D:E9:37:AC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849BF3F813D091DE86FA3F799C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2f40c623-4081-3f9f-bf71-ed61ef2381c4.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     397194
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:81:3d:09:1d:e8:6f:a3:f7:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=8f02f3cf-373e-4fd5-a4db-bd0d43ea319e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:c2:14:ae:60:79:a1:be:ab:e3:3a:21:16:
                    b9:e4:b9:95:0a:5c:b2:60:5b:db:c1:e2:09:b6:68:
                    61:2b:b4:33:db:dd:fc:fb:0d:23:e4:df:8f:12:bf:
                    37:cd:b6:49:db:38:50:b0:46:d9:c7:9c:9d:29:9e:
                    83:a7:bf:15:9c:ca:f4:58:11:34:2d:f5:9e:8b:41:
                    21:3e:14:18:e6:68:0a:17:2f:84:f6:a1:62:45:c4:
                    68:55:af:e8:ae:68:59:de:da:e5:a9:d7:54:52:ff:
                    32:5f:c0:70:c1:a0:f7:3b:72:16:be:03:11:71:5f:
                    ff:31:03:52:11:c7:9c:86:a7:08:0d:bd:44:ed:2e:
                    96:7a:c4:f0:74:6c:98:2c:b4:6b:9c:58:d2:13:7f:
                    ed:b9:9d:dd:ed:4c:f1:e4:77:02:af:0f:59:97:71:
                    a8:ab:46:4f:37:ea:7c:b2:7a:62:2c:81:bc:fa:38:
                    6c:54:b8:3d:cc:81:3e:21:16:76:a5:fb:80:25:b0:
                    36:1c:cb:09:0f:a5:cb:a3:73:3a:0b:90:fc:aa:ab:
                    14:94:8e:3e:e1:3b:cb:07:87:98:e6:d5:0f:2d:77:
                    28:d8:e8:b1:7d:25:9d:8d:72:85:ac:1a:68:47:a9:
                    85:a2:6d:be:84:84:d1:69:0a:c2:be:e0:90:65:6a:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8C:B0:46:29:EF:C8:71:FD:B8:C2:4B:27:37:56:D5:5D:E9:37:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2f40c623-4081-3f9f-bf71-ed61ef2381c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:49:d8:96:0e:34:f6:ec:73:ae:ad:a5:21:22:27:3b:2f:
         41:b1:1c:17:7b:68:dc:9e:8b:c6:f6:4a:d0:ea:15:55:32:6b:
         e0:16:5d:db:ed:1f:6e:6e:8e:f7:66:d3:32:f9:65:3b:75:af:
         e2:b9:42:86:1d:7b:20:d8:20:c4:91:52:3e:e4:98:bb:66:0d:
         5a:a0:cc:09:e1:e3:44:43:8d:94:f0:7c:f5:9b:06:a9:c5:32:
         ff:05:49:23:b3:20:93:5e:3f:ca:62:76:03:56:c3:95:82:7b:
         b6:6a:96:27:05:46:04:a5:d3:63:b0:85:94:45:45:be:f7:58:
         bb:fc:06:69:3f:5e:f2:e9:d3:88:f1:c1:06:37:09:c9:61:e9:
         b1:b4:5c:61:31:56:fb:98:fe:6f:9e:53:0f:da:37:bf:ea:21:
         c0:92:d9:c3:e6:28:d6:22:ad:15:9f:04:2f:c0:f9:09:1c:48:
         91:92:48:29:92:06:4a:45:88:0a:6e:f5:6d:48:f1:26:fb:c4:
         fb:a4:e7:33:65:38:de:4b:da:39:c5:19:53:16:62:65:f4:03:
         ec:45:ca:cd:51:61:97:36:11:6a:ac:c8:6f:e2:1a:1e:a0:06:
         c0:8f:a5:76:5f:7b:24:fe:22:5a:e7:cf:e4:83:9e:d6:d8:5c:
         ba:03:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:37:31 2025 by rpki-client