Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9eeb6071-fb77-3daa-90c0-1dc829c6ec96.roa
File:                     9eeb6071-fb77-3daa-90c0-1dc829c6ec96.roa (raw, json)
Hash identifier:          3Lb19VN//i/6qao9Mtx6j3jyiByvb5axZOpXvgZmUVc=
Subject key identifier:   C0:8D:14:EE:A4:D8:FE:EA:A4:87:62:40:82:9F:80:9C:AE:60:8F:D7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849BF3F8ACF55F11831BC634D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9eeb6071-fb77-3daa-90c0-1dc829c6ec96.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     36628
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:8a:cf:55:f1:18:31:bc:63:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=9b9fea8b-c5c2-43e4-81ba-2e8ec8f9861e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:4c:1d:71:dc:6b:7d:75:fd:b7:f8:ae:7c:
                    f7:10:f8:6f:13:81:31:16:54:2e:08:19:a0:a1:d4:
                    31:e7:17:20:a4:61:92:5d:ce:9f:ce:51:66:77:47:
                    4c:db:9b:bc:f7:40:74:66:26:65:14:38:c0:6b:b4:
                    44:74:7b:c6:84:8d:cc:09:1c:07:6e:6f:f0:4e:68:
                    92:3d:a4:eb:e0:eb:3c:65:52:f3:9d:d9:3e:71:02:
                    11:8d:32:f4:ba:66:ec:3b:2b:bd:75:ff:2a:e2:3f:
                    2d:41:2b:c8:42:95:75:07:0b:8f:da:f2:44:2e:bc:
                    18:7b:c7:32:d6:28:fc:26:49:72:79:22:88:68:f2:
                    48:4b:76:44:df:33:23:70:43:e5:50:5b:be:4b:cb:
                    6e:d3:60:8a:98:36:4c:36:52:b4:f7:e2:de:c3:27:
                    15:ee:a2:b5:fa:3f:24:20:6b:86:24:03:13:55:ef:
                    23:c4:8a:76:c1:88:10:bd:21:be:35:99:73:50:92:
                    79:7e:e7:22:eb:60:d7:42:a3:5b:0f:6f:4d:bb:72:
                    75:49:20:a1:05:d0:98:22:5f:15:99:58:02:55:17:
                    5e:e9:3f:25:95:fc:2b:96:20:f0:78:3c:88:02:e2:
                    da:b8:82:89:fb:65:7a:3e:b5:15:c4:b9:73:4d:88:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:14:EE:A4:D8:FE:EA:A4:87:62:40:82:9F:80:9C:AE:60:8F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9eeb6071-fb77-3daa-90c0-1dc829c6ec96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8a:07:eb:eb:d0:d4:44:a1:aa:b2:79:b7:5c:3b:3b:d6:dc:
         e7:83:70:2b:7e:77:e2:ca:a5:06:09:5d:37:0f:c7:69:ad:b6:
         3a:fd:ca:27:c3:f9:c5:d1:8c:ab:f7:c4:01:c7:d5:a9:d8:f8:
         1f:5c:2c:40:ec:38:04:e2:67:6c:e2:e1:a9:da:49:66:34:ca:
         e1:de:45:c6:c3:b6:4d:5c:70:89:49:04:99:4d:c8:9e:e3:38:
         59:88:6b:f0:79:f8:56:35:e1:f5:7b:fa:7c:8e:e3:d0:60:21:
         e4:07:ea:8d:67:f7:14:82:cd:78:35:9e:03:f4:a3:8b:53:6a:
         b9:4c:d1:b3:48:25:71:11:75:7a:86:91:87:96:38:1a:af:5b:
         f5:74:77:3f:eb:19:9a:ba:8e:3f:1e:17:58:52:78:07:b5:99:
         77:a7:49:4b:b7:84:e7:8f:96:17:29:71:98:8b:76:d5:b8:56:
         54:13:db:24:75:56:7a:48:17:e1:4d:f3:f6:f2:8d:17:2e:2f:
         4c:b0:97:8e:d5:c6:79:1f:3b:eb:89:63:8d:31:27:6d:61:ce:
         a9:15:a5:e3:b4:7b:cf:a3:e9:75:2b:b9:89:e2:a4:ff:82:e3:
         a4:f7:87:2b:3c:b2:c4:04:2f:20:0a:8a:eb:a8:57:bd:68:27:
         01:4d:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:14:04 2025 by rpki-client