Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa
File:                     dab43f4f-91c1-3990-b625-979d518dd1bd.roa (raw, json)
Hash identifier:          933PSAgPepVmGy2SRToijOvzZBoiEdKEqyO5FWBl9p4=
Subject key identifier:   DD:62:B2:61:87:09:7E:1E:62:91:36:B2:7C:1C:D3:E3:61:25:2D:A6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849BF3F88C17F154396112855C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     36622
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:88:c1:7f:15:43:96:11:28:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=9cf1b938-61b0-44bf-9785-eecafcefb42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:85:f9:c6:97:51:ef:2a:29:bc:d0:b5:9e:
                    8f:c1:0d:06:43:7b:09:09:b0:1c:00:b0:88:e4:19:
                    82:89:fa:c6:85:6a:df:a1:49:14:ed:d0:4c:2d:f9:
                    a1:bc:c6:6a:7d:66:59:9b:7c:f1:0d:f6:93:fe:b7:
                    10:81:a6:21:f5:2f:f1:d7:0a:31:aa:0b:6f:9c:3a:
                    0b:db:28:b0:9f:80:8d:e3:52:38:26:cc:c3:b2:bc:
                    6e:74:5d:72:32:f7:fd:ea:ad:b6:6f:9d:27:75:31:
                    b2:ba:6b:94:23:31:a7:1b:79:03:c2:3d:3c:45:31:
                    88:91:c3:c6:5a:97:ec:6a:15:a1:1f:3d:ae:4a:94:
                    36:15:e3:58:38:f3:43:64:63:f1:14:aa:39:e8:93:
                    9f:90:bd:48:b2:03:16:13:24:2b:68:21:aa:ee:e9:
                    4a:b4:f8:88:22:5e:e7:70:70:7c:6f:e8:5f:2e:f2:
                    b6:a9:10:9b:70:e1:d4:c3:69:f2:e8:9f:66:f7:15:
                    d7:5b:3a:72:ac:6e:3d:b5:e6:08:9d:69:53:00:8c:
                    9a:37:76:b3:34:cf:75:a3:7c:95:f5:f3:d2:6e:27:
                    85:98:53:10:02:8d:a9:80:ca:68:ab:b9:52:91:3a:
                    0f:6f:a0:27:87:fc:13:0a:42:fa:9e:c2:05:0a:3d:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:B2:61:87:09:7E:1E:62:91:36:B2:7C:1C:D3:E3:61:25:2D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6c:58:f5:63:21:b6:f3:a5:84:3d:51:c0:1c:3d:19:29:96:
         8a:5f:36:49:a9:80:fc:6e:86:7c:13:c5:a4:01:56:aa:84:25:
         5d:f2:5c:da:7a:74:06:d2:25:72:f6:8b:f9:6f:54:6e:fe:f0:
         b5:14:c3:17:5a:40:3a:47:64:16:9d:f4:de:75:ba:cc:19:b3:
         21:61:61:53:6b:54:74:f8:26:ac:ef:2a:6c:11:6a:b2:a8:f8:
         c3:61:3b:d2:40:a6:4b:3b:df:ca:e1:a4:8b:7e:7a:0b:24:17:
         b9:d7:b7:6e:aa:e9:36:96:8b:b2:91:9c:ed:a2:ee:34:43:ae:
         92:c0:76:80:41:48:1a:88:06:1f:b1:7d:f8:fd:71:e2:c2:df:
         77:d5:71:8d:93:40:10:1f:2e:a8:9e:8b:e1:48:5a:17:c8:bb:
         92:de:ee:a4:8b:d5:ca:d6:8c:47:a3:cf:29:17:e2:01:6e:21:
         2b:42:4d:df:35:cf:dd:e7:5d:f9:54:11:0c:eb:3a:5a:f4:ba:
         bb:91:c3:a9:57:7f:1b:c1:46:93:27:d6:ac:9f:77:48:b2:d3:
         bb:93:d5:f9:c4:ac:ed:00:e5:8c:0c:c7:19:a8:04:db:d6:36:
         8f:2b:34:18:3d:6b:a3:fe:cb:84:b1:fe:86:ff:80:58:6a:db:
         69:90:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:17:19 2025 by rpki-client