Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef632643-5db0-3d19-ac3e-997b5ff39367.roa
File:                     ef632643-5db0-3d19-ac3e-997b5ff39367.roa (raw, json)
Hash identifier:          ePiYkRfLeDaU2612vau5wB7F5nBuyNUovKemvjbT9aQ=
Subject key identifier:   F8:10:66:CC:AC:1C:F2:92:6C:ED:40:CD:DF:24:54:61:AE:0C:9A:13
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849BF3F8BDD49AE0B2BFB29EA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef632643-5db0-3d19-ac3e-997b5ff39367.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     396606
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:8b:dd:49:ae:0b:2b:fb:29:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=f4a3f7bc-3b74-4acb-a368-c681593beff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:7e:61:32:75:ee:54:96:c3:8d:40:40:79:
                    d9:dc:ed:e6:a2:70:5e:33:4e:e3:1d:4c:53:fe:b8:
                    09:60:d2:5f:dc:b2:40:53:27:c3:30:6b:08:e4:b5:
                    9f:6c:a3:95:ec:9c:28:c2:40:b2:62:15:f0:d1:44:
                    6a:e5:59:8a:57:d5:d5:5f:04:fa:1a:b0:19:7f:6f:
                    27:31:fd:c3:51:a9:8a:11:3f:a6:a3:9a:5b:c4:05:
                    9e:4e:78:40:43:35:2b:bf:52:35:f8:95:6e:6b:a6:
                    7f:f2:19:70:7d:16:1b:d5:64:33:03:bf:26:cf:e5:
                    25:c2:35:0d:be:03:92:49:0f:05:d4:4e:e5:df:e5:
                    78:10:05:45:49:e2:b5:e3:c0:ed:a7:a5:6f:4e:e2:
                    46:aa:d9:3f:88:cf:ed:8e:ab:c8:80:d8:c6:5c:14:
                    64:9c:3d:a7:4e:0a:8f:3a:e5:13:5f:c1:91:f0:29:
                    5e:6a:43:03:56:83:a8:97:19:c3:ed:7d:76:82:bd:
                    33:a9:4f:b1:16:39:0b:bc:9b:f1:71:48:7f:f0:1f:
                    92:29:25:c8:dc:97:9a:57:88:d6:28:8e:95:29:92:
                    c9:35:0a:87:45:0c:a8:72:25:e2:10:09:b7:34:95:
                    91:c4:e4:35:d6:c6:1f:05:0a:08:45:2b:fb:31:3f:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:10:66:CC:AC:1C:F2:92:6C:ED:40:CD:DF:24:54:61:AE:0C:9A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef632643-5db0-3d19-ac3e-997b5ff39367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:33:c2:58:f7:31:50:f2:43:a4:c1:92:f2:97:7f:95:7f:a8:
         f0:c3:c1:84:ba:ec:e6:20:33:52:4a:49:d2:91:eb:cf:95:d1:
         74:1f:8f:10:fd:c1:7b:57:4d:47:7c:9e:46:31:92:f2:ee:d4:
         7f:81:0b:4c:33:94:45:f3:56:46:c9:60:95:0e:74:0c:f5:74:
         a1:aa:2e:63:12:a3:53:78:b6:14:e9:ec:07:83:7a:f4:30:e2:
         79:fd:86:b1:85:e7:27:a1:0b:b9:a7:6a:19:92:14:25:f3:28:
         80:4d:c6:e4:da:a3:f7:a7:35:aa:f3:28:53:ee:1d:68:a6:53:
         51:60:8a:04:55:43:87:df:3b:55:e8:b5:06:a9:b2:ce:c6:98:
         99:4b:e2:b8:d3:12:f6:e7:a6:fe:c0:3b:b3:b6:3c:f2:05:d4:
         73:57:a1:fe:1b:f9:3a:e9:7d:05:d8:37:6a:5a:99:6c:7f:3f:
         98:e1:4f:92:51:3e:04:9e:bc:6b:e9:48:52:f3:75:f9:91:b3:
         cd:bb:79:64:ba:51:12:fd:68:37:45:e0:6b:84:7c:58:6c:c2:
         9f:03:b4:a6:95:ca:c8:66:52:4a:b7:58:1f:87:c5:b3:e1:36:
         15:d4:ef:f9:4b:7d:fb:8e:a6:0a:48:0e:6e:2e:69:3b:0d:98:
         b1:f5:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:30:54 2025 by rpki-client