Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa
File:                     972b46d2-94d8-3c27-94bd-eee15e154e15.roa (raw, json)
Hash identifier:          aALIUM09hoHPVcaUfUWo699BVOIgTipa6O/aOFgf/j0=
Subject key identifier:   F9:BD:1D:89:76:3D:CA:62:82:63:6E:77:1A:DC:E8:03:18:C1:BB:E0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849BF3F81F8981E1ED9C23C1AE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     396544
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:81:f8:98:1e:1e:d9:c2:3c:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=7ca05f60-51c0-4c0d-a980-975fbbfe6e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:1b:e3:fa:7e:45:7d:15:db:57:99:66:58:
                    e8:a9:d0:60:ba:28:1b:b5:d2:ca:ad:18:b0:f0:52:
                    a0:56:64:08:1b:21:31:39:09:e5:26:f6:bf:ad:65:
                    a0:da:28:85:20:ba:f7:33:bd:87:2b:7c:56:c5:19:
                    c4:02:ed:cd:d7:e9:24:7c:0d:85:49:cb:da:b2:03:
                    d3:34:a5:c2:3d:f1:ef:8c:3b:c6:fe:d0:0c:55:b8:
                    af:c6:04:61:23:33:7b:a3:82:6b:60:19:1f:bd:2d:
                    08:b5:f8:af:e3:4e:4c:63:7b:8b:3e:df:db:ac:d4:
                    14:ac:0b:1b:2c:e6:c3:9f:a8:f5:7f:86:67:47:28:
                    23:cf:39:ef:0e:ba:8c:80:0f:1d:e3:92:dc:8c:4c:
                    b3:aa:b1:33:c4:b6:68:fa:f4:22:35:2f:11:da:b7:
                    3d:df:b3:a6:6b:42:98:4e:fe:24:8a:e6:a1:48:75:
                    cc:33:d0:cf:41:24:5a:02:0a:70:83:0a:6a:de:1e:
                    4d:8a:96:bb:1f:dc:9b:01:ba:a6:df:e9:f9:27:74:
                    4c:09:95:b9:4f:ff:4c:43:67:e4:21:df:bd:cb:c6:
                    3f:1e:a2:1b:e0:51:a6:fa:97:74:e5:da:0f:7e:1a:
                    d5:9d:ee:ee:50:bd:ba:38:d0:75:5b:81:6b:3a:c5:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BD:1D:89:76:3D:CA:62:82:63:6E:77:1A:DC:E8:03:18:C1:BB:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b1:06:5b:81:c1:bd:bd:5e:30:55:97:16:c3:1b:4b:3e:09:
         d9:d7:16:c6:93:96:78:f3:22:72:a4:3c:07:00:15:f3:7f:61:
         5b:5a:37:ce:9f:f3:c7:f9:50:17:3e:3e:da:06:76:ca:96:84:
         0d:a3:a8:25:a4:1b:49:51:50:88:7f:48:ba:80:a6:02:6b:22:
         0f:e9:9b:97:9b:e8:75:66:ef:52:7b:82:bf:27:7c:3a:0a:91:
         1f:ee:91:2d:04:48:19:cb:2c:2d:af:bd:73:5f:30:e4:d5:94:
         b3:6a:77:94:b9:66:ba:dd:56:c5:6e:76:5c:40:2a:a9:8d:97:
         94:83:60:62:ef:5e:00:12:86:9b:47:9c:ba:f5:3a:c8:3f:83:
         1e:75:b7:e1:b7:53:07:5f:18:c1:d9:d3:5a:c8:e4:8d:21:da:
         59:cd:d0:4f:8e:72:59:b6:fa:75:39:69:39:95:84:e1:be:be:
         b4:07:0d:de:5a:d2:70:3b:78:b6:01:95:7a:56:5c:5b:ca:2f:
         26:04:3a:9b:42:fa:29:94:0a:f5:04:64:b0:9e:a0:b2:49:64:
         d8:21:44:ce:29:70:ac:1b:c6:40:fe:c8:a6:be:d3:41:4c:15:
         75:70:74:a1:7f:10:35:ed:86:75:a4:83:77:2b:dd:11:5a:61:
         a3:c0:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:25:49 2025 by rpki-client