Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa
File:                     b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa (raw, json)
Hash identifier:          xQHkrLF0UcLtukcX2oTMcAcp2ag26QINMYMEqFJK+FM=
Subject key identifier:   57:2F:55:D1:51:32:3E:E5:52:2A:B2:60:9A:AC:93:A4:24:AB:D4:F9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9E963FB445F1F938EEBEAD60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     396613
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:3f:b4:45:f1:f9:38:ee:be:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=5c8e6c88-c050-4e7d-9f6b-f84d7561b87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:ed:5e:92:8b:88:a4:8c:4b:96:76:76:8b:
                    7f:35:8f:e2:5f:5a:be:38:98:60:5a:6e:05:f4:ad:
                    d5:9a:7d:1a:07:ee:3c:1d:32:22:eb:84:7e:dc:d4:
                    4e:15:01:2a:61:2e:40:ed:de:d4:e4:68:92:b7:e7:
                    4f:09:bd:4b:9c:3c:78:fd:50:d1:0c:f1:81:33:fe:
                    48:f2:d2:37:56:da:92:1d:3b:7c:68:d3:3c:5e:e1:
                    0f:0c:8f:91:3e:c2:60:04:21:3b:a2:3f:0a:34:aa:
                    f4:84:d2:e8:c7:a4:74:ea:49:88:a1:90:28:48:eb:
                    7e:69:bc:50:fb:6c:53:dd:a8:41:34:fb:53:ce:1c:
                    51:b2:2e:91:f9:e7:55:c8:b9:19:cd:ea:65:2d:1e:
                    79:9f:a7:b6:fa:12:23:f7:99:08:86:5d:61:6b:6c:
                    4d:b3:a5:51:64:38:1a:80:60:81:a5:e1:48:95:19:
                    aa:42:99:46:c9:c6:84:4c:26:80:1e:fa:3f:13:32:
                    be:a9:16:7b:32:a5:20:11:f8:91:d7:f0:60:c6:c8:
                    c9:c1:70:f9:4d:54:16:04:9b:7a:f9:c3:0b:07:95:
                    e6:cc:cb:1b:3b:0c:7b:31:d1:97:e5:7e:fe:84:f5:
                    8c:d9:ce:47:df:2e:34:ec:3d:ca:84:fc:10:63:40:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2F:55:D1:51:32:3E:E5:52:2A:B2:60:9A:AC:93:A4:24:AB:D4:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:87:f0:d6:80:ab:d4:8b:3d:b9:94:b6:b4:98:1f:22:64:e6:
         07:86:2d:ea:be:37:6a:2b:1e:b7:02:27:3f:4b:a2:e8:0b:52:
         dd:5c:f9:56:3a:59:82:5f:59:83:77:d7:ac:16:94:45:9a:20:
         1d:68:a9:fe:11:4f:16:79:ed:4c:2c:60:67:ab:b3:20:8b:bd:
         b8:4f:a0:53:c8:4a:ef:97:8d:fb:c1:40:8b:61:f3:d2:33:2c:
         51:eb:14:da:e9:f1:7c:2b:00:ca:4f:0e:aa:6f:2b:d9:85:c5:
         14:be:88:50:8c:bd:c7:44:71:5c:f8:ee:e0:2c:14:2c:57:e4:
         95:a7:23:58:81:cb:56:72:86:82:3a:92:09:f3:ea:e3:18:e6:
         a3:43:b8:19:16:25:58:b1:23:52:7e:20:9f:55:91:b8:33:7c:
         c6:3f:90:c9:35:48:eb:61:ec:6d:fc:36:5f:8d:42:a4:1e:ab:
         b8:ff:2c:13:ef:22:e5:02:57:39:f0:1e:7e:68:9c:8d:54:af:
         76:60:79:c2:8a:fc:8a:f9:6d:1a:24:01:2e:80:cc:fc:ce:7a:
         91:0b:02:5b:2f:8b:ec:0e:37:8e:24:89:7e:43:e7:ad:02:52:
         c6:63:c9:c5:fd:6b:a9:f5:84:59:59:08:0e:12:e8:47:61:24:
         f2:29:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:52 2025 by rpki-client