Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05ec5fb7-0d5c-39a6-9fe3-f1aec0fadd85.roa
File:                     05ec5fb7-0d5c-39a6-9fe3-f1aec0fadd85.roa (raw, json)
Hash identifier:          bzvlNJKvx4qzKpqPangL0ugqxrZkKOFWDVQKdv2GIpo=
Subject key identifier:   36:1D:83:8C:49:00:74:9A:1C:CA:D5:9A:D4:25:12:01:E7:76:0B:7E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3DFFDFEB93E51A8EBE7790E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05ec5fb7-0d5c-39a6-9fe3-f1aec0fadd85.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396573
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:df:eb:93:e5:1a:8e:be:77:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=c38a90ce-5bce-4d44-9132-a5dec2862783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:09:59:61:b5:c8:d8:24:52:b8:6b:3f:d1:
                    fe:41:f3:e4:bb:cc:71:68:de:86:df:6e:ba:83:13:
                    3b:3b:c9:a1:46:6d:06:f7:c0:33:f3:0c:5a:21:bf:
                    d7:15:34:6c:eb:d1:63:de:f0:77:74:13:19:e0:d4:
                    4f:26:14:b7:65:ba:0c:fe:44:23:4e:27:93:87:ea:
                    74:e3:aa:9f:d1:9c:33:47:ea:b9:b3:53:e1:ed:2a:
                    63:99:db:cb:75:ae:f7:0e:c1:96:13:fc:d8:a8:b7:
                    67:68:6e:c3:bc:98:e2:29:8d:e9:6e:06:1a:06:39:
                    d0:3d:85:6a:73:76:3f:7e:ed:5e:6e:02:bb:dc:9d:
                    ac:38:a7:42:54:09:1c:98:e2:02:5f:31:17:27:f9:
                    3d:6b:37:b5:5e:cc:1a:81:6b:72:c3:f9:51:fb:f7:
                    73:dc:b5:bf:2b:47:cf:f7:6b:2b:d5:83:08:69:14:
                    75:b8:24:f4:2b:b0:b3:f9:8d:17:9a:02:70:11:ff:
                    39:9c:fd:1b:17:15:10:00:81:d5:53:71:d7:bb:99:
                    45:d4:42:e8:de:cf:9b:f7:a4:df:77:e7:49:a0:2e:
                    57:e0:d7:8a:08:70:c7:14:9d:82:b6:4e:f2:04:be:
                    53:eb:0c:4c:f3:0b:d4:b6:5b:bd:65:ed:84:53:cf:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1D:83:8C:49:00:74:9A:1C:CA:D5:9A:D4:25:12:01:E7:76:0B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05ec5fb7-0d5c-39a6-9fe3-f1aec0fadd85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b1:fe:29:70:1b:0a:3d:f5:52:0a:08:93:cf:99:7d:e9:2c:
         64:5b:1f:86:d8:45:36:13:63:92:81:6d:6f:dd:64:8b:d4:ea:
         d7:63:0e:0f:32:47:c9:87:2d:c4:81:4c:d3:f5:a5:73:df:e9:
         d0:1b:94:b9:c6:2f:07:f4:66:5a:30:6c:5a:72:00:c5:91:55:
         cb:19:f4:e0:b9:39:37:41:fb:f0:de:34:13:ed:7f:66:35:f8:
         e2:9a:c3:c6:cf:a8:2e:64:1a:70:f3:29:f3:e6:a5:d5:0c:dc:
         c9:84:be:8f:43:c0:bf:8e:48:2e:d3:68:e9:fc:14:34:43:71:
         8b:44:5d:a1:33:f4:39:74:a0:3b:36:9b:91:2e:12:a9:51:8e:
         ce:f9:49:a6:69:22:4f:20:30:f8:e0:9e:e3:82:3a:02:9c:df:
         a0:f4:3f:0b:18:2b:3a:e6:1a:c7:9e:d1:c3:fb:6e:77:bf:b5:
         1e:4d:9a:db:39:b0:30:4f:89:23:78:14:f1:57:a1:ba:58:fa:
         d1:4d:13:73:2b:df:4e:3d:d1:87:6d:61:f9:82:71:be:57:9e:
         81:65:19:f7:c5:7f:fa:95:57:78:4d:36:72:08:a9:10:a6:d1:
         d1:c3:70:a3:d8:c2:15:28:80:92:24:19:00:5e:5f:e0:00:18:
         d6:eb:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:40 2026 by rpki-client