Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa
File:                     6008ca0a-c263-3da9-ac70-8a69bae553d6.roa (raw, json)
Hash identifier:          n6hspJfgWl24TLADg2wqHBa6NvNXsgRRjvOLzatI2/A=
Subject key identifier:   2E:2D:99:DA:01:4C:C0:D2:5B:10:57:28:9E:03:DB:EC:A7:C2:1C:2E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9E96426F996802531E078200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     36632
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:42:6f:99:68:02:53:1e:07:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=ab9673b1-be69-440a-ad83-481e5028f3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e2:f6:d0:95:ca:dc:4a:93:c5:f3:19:50:1c:
                    1d:c2:f6:f6:87:c2:9b:d8:50:a8:81:58:94:ec:78:
                    83:74:c7:46:f4:ee:71:02:42:83:a3:13:4b:df:43:
                    32:8b:e0:6d:61:e6:7c:64:87:18:09:d6:25:38:0b:
                    57:37:4f:33:1e:ce:aa:5d:67:de:56:c0:97:bc:81:
                    c4:04:b6:62:8c:b1:91:68:8d:50:63:f0:e3:76:99:
                    96:c4:24:5a:a4:3d:cb:1b:e6:79:4a:2c:37:e8:15:
                    91:e5:c4:f7:52:b0:a4:b2:c4:57:25:c8:b6:a7:19:
                    e0:09:18:79:3c:bf:19:57:d5:27:a4:ab:72:5f:48:
                    d2:5e:4a:52:41:5e:35:63:35:e7:c2:ea:35:93:0b:
                    a4:80:0b:f0:dc:e8:ed:5d:75:07:3b:6b:f4:18:45:
                    2e:bc:63:d0:f3:7a:f9:b5:85:eb:41:ab:ad:bf:ab:
                    b1:7b:8f:e7:70:bf:79:19:eb:ef:be:5f:6f:3b:3e:
                    8b:44:9d:e8:7c:fd:6e:1b:a4:fb:2d:50:50:07:77:
                    03:1c:db:3d:f6:b4:23:85:17:c5:95:a9:ef:fc:1c:
                    c9:76:bb:2d:a6:54:d0:26:09:5b:90:5d:b0:8a:78:
                    65:32:b0:07:25:99:e0:e7:d9:fe:6d:8d:07:6a:6c:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2D:99:DA:01:4C:C0:D2:5B:10:57:28:9E:03:DB:EC:A7:C2:1C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:dd:8d:db:8e:1b:e1:c1:a4:65:fd:ca:a8:c6:1c:02:c3:ed:
         2f:cd:9f:c7:05:66:3c:06:e3:93:55:65:b6:52:1d:7c:95:f7:
         2a:c2:97:0e:c0:e4:b4:4f:b3:10:55:ec:58:84:d6:94:a7:99:
         8b:99:21:7b:b1:84:90:1c:5a:a7:77:2e:58:99:e3:cc:97:1f:
         80:54:a8:47:16:f1:76:6f:e3:12:fc:75:52:65:99:bb:23:60:
         a6:3d:0e:40:2c:63:c7:9b:f3:5e:64:07:a7:96:60:f6:33:46:
         ae:d9:01:35:3a:94:46:40:e1:92:5d:4f:28:1c:b5:b2:6c:31:
         25:e5:7d:9b:9c:32:7d:62:4d:34:41:b7:14:be:f0:76:a0:53:
         6f:87:c3:c9:be:57:2a:b1:d7:c3:58:70:07:bb:d3:dd:e1:b7:
         8b:69:10:f5:fb:fe:a5:00:1d:5d:d1:0d:16:0a:65:65:8d:8f:
         1f:b3:c0:ae:cf:b6:25:2b:4f:f5:39:0e:5b:ac:f8:37:c6:98:
         51:25:44:8c:64:78:a0:68:b1:62:54:e4:04:b8:31:1d:1e:b5:
         1c:ff:09:4e:30:81:27:01:ab:cf:6f:0d:fc:77:70:fa:84:7b:
         8f:18:cd:e7:61:75:70:fa:24:a5:6a:38:48:c8:6c:78:91:f9:
         00:b6:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:17 2025 by rpki-client