Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e270639-3786-362c-9d36-838c824ee271.roa
File:                     0e270639-3786-362c-9d36-838c824ee271.roa (raw, json)
Hash identifier:          vMPa7pJKdUp8ZgDFofe0sVTRguxM1A8zq99MhCbFdvY=
Subject key identifier:   4B:F3:68:69:6D:56:72:50:AD:B8:07:FF:AE:77:F2:77:C7:98:A5:C9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3DFFD5D73211E4B50D4F6900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e270639-3786-362c-9d36-838c824ee271.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396612
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:d5:d7:32:11:e4:b5:0d:4f:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=4958053d-9287-4936-81c0-e95f5fe74241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:c5:f4:68:33:81:a8:c6:04:22:8c:14:66:
                    56:d4:07:a4:3a:e9:8b:7f:08:f4:68:b6:fd:91:57:
                    9e:74:d8:32:55:44:91:3e:66:94:48:02:12:d9:c9:
                    fb:61:ff:3f:6e:75:6b:2b:27:ba:6b:c5:bc:99:2c:
                    e9:6b:79:fc:f8:5a:86:ca:bb:3f:24:13:70:8f:10:
                    f9:79:ce:77:5c:50:06:9c:0b:db:23:68:fc:87:c3:
                    a7:f8:b3:21:b9:46:43:8c:35:d7:47:05:d0:3e:a5:
                    50:c3:31:f4:57:70:9f:b7:7f:ae:02:fe:cb:37:11:
                    57:86:48:4d:9c:9e:37:6b:ad:28:5c:ae:b2:9c:96:
                    83:b6:d4:67:80:88:da:cd:3f:a6:51:f3:9d:57:e3:
                    60:f1:99:5a:48:f1:f2:56:0e:ba:67:1c:fa:83:ef:
                    df:69:cd:a2:d2:e1:5e:80:64:c4:18:7d:02:12:73:
                    2f:a8:bf:5c:8e:97:9b:fe:df:40:a6:3f:1e:91:94:
                    67:8f:d3:97:8d:56:85:b5:4d:07:96:77:fb:35:a4:
                    74:89:57:39:80:36:80:ac:6e:cb:56:11:fd:84:88:
                    c9:5b:2a:07:22:c5:a4:db:9c:a3:6b:74:4c:ce:18:
                    a7:81:1b:0a:e5:68:87:f1:38:49:c6:73:ca:89:ac:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:68:69:6D:56:72:50:AD:B8:07:FF:AE:77:F2:77:C7:98:A5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e270639-3786-362c-9d36-838c824ee271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1d:a3:1f:7b:e9:f0:8e:de:a7:cf:9a:4f:0c:de:2b:9c:71:
         9b:d9:0b:78:23:0b:00:1e:a7:d9:b4:2f:df:3b:a7:e3:5b:9b:
         01:0c:2a:f3:fa:7a:d6:4f:7d:69:8e:50:93:b2:6f:6f:91:7d:
         c0:d0:ea:62:97:96:89:83:93:cc:c7:b7:83:2a:84:07:2a:c7:
         47:e7:61:ed:51:ec:01:b9:00:ec:e9:0c:fe:82:19:ee:5c:20:
         51:f0:63:26:c3:26:7a:ac:5d:78:9c:1f:68:f6:55:1b:16:6e:
         1f:38:47:8f:41:80:46:1a:1d:2b:40:8b:5a:ce:62:b6:0b:c7:
         8b:d8:8a:36:a2:58:9d:d1:f7:bd:3e:cc:23:97:15:74:64:70:
         68:c9:fa:91:f7:56:5b:4c:da:18:12:05:ac:e7:b7:b5:c8:c3:
         06:f0:90:f4:09:17:7f:e0:64:47:22:d1:0e:66:a7:eb:18:c1:
         47:91:fc:90:b1:7b:6a:77:31:bf:98:22:b3:71:90:ac:c5:ed:
         77:29:56:d9:84:29:04:c5:79:a0:ad:04:55:7f:d4:20:79:18:
         ad:d7:84:28:ca:56:c0:88:5d:92:12:a5:1f:83:68:30:e3:79:
         29:3f:e9:cb:80:c5:e3:95:3c:2e:7d:8d:b6:0d:a1:1c:0d:8f:
         ea:67:74:c5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9XXMhHktQ1PaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
NDk1ODA1M2QtOTI4Ny00OTM2LTgxYzAtZTk1ZjVmZTc0MjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyTF9GgzgajGBCKMFGZW1AekOumLfwj0aLb9
kVeedNgyVUSRPmaUSAIS2cn7Yf8/bnVrKye6a8W8mSzpa3n8+FqGyrs/JBNwjxD5
ec53XFAGnAvbI2j8h8On+LMhuUZDjDXXRwXQPqVQwzH0V3Cft3+uAv7LNxFXhkhN
nJ43a60oXK6ynJaDttRngIjazT+mUfOdV+Ng8ZlaSPHyVg66Zxz6g+/fac2i0uFe
gGTEGH0CEnMvqL9cjpeb/t9Apj8ekZRnj9OXjVaFtU0Hlnf7NaR0iVc5gDaArG7L
VhH9hIjJWyoHIsWk25yja3RMzhingRsK5WiH8ThJxnPKiazHawIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEvzaGltVnJQrbgH/6538nfHmKXJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGUyNzA2MzktMzc4Ni0z
NjJjLTlkMzYtODM4YzgyNGVlMjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA0HaMfe+nwjt6nz5pPDN4rnHGb2Qt4IwsAHqfZtC/fO6fjW5sBDCrz
+nrWT31pjlCTsm9vkX3A0Opil5aJg5PMx7eDKoQHKsdH52HtUewBuQDs6Qz+ghnu
XCBR8GMmwyZ6rF14nB9o9lUbFm4fOEePQYBGGh0rQItazmK2C8eL2Io2olid0fe9
PswjlxV0ZHBoyfqR91ZbTNoYEgWs57e1yMMG8JD0CRd/4GRHItEOZqfrGMFHkfyQ
sXtqdzG/mCKzcZCsxe13KVbZhCkExXmgrQRVf9QgeRit14QoylbAiF2SEqUfg2gw
43kpP+nLgMXjlTwufY22DaEcDY/qZ3TF
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:43 2026 by rpki-client