Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa
File:                     44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa (raw, json)
Hash identifier:          nARbokW0HuyHp8kgcslZuW+c6tFxs1ybLUBKOAKzEgw=
Subject key identifier:   E3:CD:F7:71:13:9D:FC:B1:76:97:F2:AE:45:4D:A2:17:13:20:8B:30
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3DFFDE0A2F96184034A77F40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     40717
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:de:0a:2f:96:18:40:34:a7:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=872dfbc3-68e7-4881-885a-be1d9f618bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:3d:91:9a:2b:1e:4b:42:03:ec:fa:16:e2:
                    65:d9:ec:b7:19:af:af:9a:e2:c7:23:37:92:7a:c1:
                    a8:7d:7b:9d:19:25:2f:80:03:95:9a:74:18:18:13:
                    16:9c:02:e6:c7:a4:d2:5c:41:c6:d2:9b:a1:0f:e7:
                    b0:38:29:de:11:9c:6b:90:b2:23:cc:fb:02:f7:69:
                    28:f1:b6:de:89:de:70:69:73:62:cb:6d:2a:85:6b:
                    a8:71:64:9a:d8:48:c3:d2:64:50:b4:e2:9d:b2:85:
                    29:1d:d5:3a:be:ed:39:15:18:ce:6e:68:66:98:0f:
                    1b:2a:e0:d0:e5:7a:81:b5:ea:e4:03:f7:97:6f:40:
                    5b:4c:7e:fa:eb:ee:b7:f2:52:2d:ee:7f:ac:59:c3:
                    c6:87:71:a9:ce:64:88:d3:bd:0a:60:1b:7d:0c:22:
                    f7:72:f7:f5:a5:f6:49:69:41:31:9f:5c:14:d1:ab:
                    85:4f:18:49:37:a4:51:e9:f6:39:d5:39:c1:b4:35:
                    0d:a6:f4:c8:4d:a5:ae:55:1c:b4:61:77:8d:90:84:
                    48:36:bd:f2:62:36:5a:4a:8b:94:58:13:50:2d:e5:
                    f1:e3:45:0f:54:86:63:de:6f:03:f2:ad:a0:56:dd:
                    5a:07:a6:3d:66:9c:9a:38:3c:45:64:8c:94:e5:d9:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:F7:71:13:9D:FC:B1:76:97:F2:AE:45:4D:A2:17:13:20:8B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e0:43:ff:fd:01:c3:e9:c2:e8:36:ff:2c:58:6e:76:76:92:
         ae:db:26:15:5f:82:e4:16:2b:e3:f5:49:00:ab:59:11:32:f0:
         78:4a:1f:74:ec:d7:7e:67:9a:19:ed:52:24:2d:02:7f:0e:a8:
         0d:95:89:be:26:3a:43:f4:45:04:7b:8a:52:01:6b:22:77:aa:
         cd:71:73:14:22:de:df:96:8a:bb:ab:4b:51:47:43:18:91:a3:
         0a:37:1d:c8:05:ff:fc:9d:78:00:12:84:b7:a8:53:a3:3f:67:
         bb:0f:a7:62:24:cc:3e:87:94:a7:3b:ca:f9:3e:f4:a2:7f:3b:
         7f:e3:13:40:a9:8b:8f:38:15:70:8f:b2:29:ce:72:fc:be:e4:
         70:23:0c:22:86:c3:cc:ef:b5:33:42:23:57:98:64:46:e9:72:
         14:f2:38:c8:0b:d8:77:bc:b7:22:3d:8f:f0:2a:a6:85:f7:56:
         37:cf:79:5c:3e:3e:2d:f3:c4:ac:4a:2a:5e:fd:b6:23:be:15:
         01:57:0e:00:db:c2:6e:33:30:4c:60:13:b3:b2:1b:d5:16:ad:
         8e:87:e8:90:0a:72:08:9a:aa:a4:42:ef:e7:fc:76:c3:59:d3:
         58:41:97:bc:a4:da:8c:13:f6:fc:d0:eb:fa:5e:b0:66:23:d2:
         15:7e:b4:4b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/94KL5YYQDSnf0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ODcyZGZiYzMtNjhlNy00ODgxLTg4NWEtYmUxZDlmNjE4YmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoE9kZorHktCA+z6FuJl2ey3Ga+vmuLHIzeS
esGofXudGSUvgAOVmnQYGBMWnALmx6TSXEHG0puhD+ewOCneEZxrkLIjzPsC92ko
8bbeid5waXNiy20qhWuocWSa2EjD0mRQtOKdsoUpHdU6vu05FRjObmhmmA8bKuDQ
5XqBterkA/eXb0BbTH766+638lIt7n+sWcPGh3GpzmSI070KYBt9DCL3cvf1pfZJ
aUExn1wU0auFTxhJN6RR6fY51TnBtDUNpvTITaWuVRy0YXeNkIRINr3yYjZaSouU
WBNQLeXx40UPVIZj3m8D8q2gVt1aB6Y9ZpyaODxFZIyU5dkqfQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOPN93ETnfyxdpfyrkVNohcTIIswMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQxOTBjZTItYmY3MC0z
YmI1LWI0ZWYtODE0ZDdmMzQ5YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAJ4EP//QHD6cLoNv8sWG52dpKu2yYVX4LkFivj9UkAq1kRMvB4Sh90
7Nd+Z5oZ7VIkLQJ/DqgNlYm+JjpD9EUEe4pSAWsid6rNcXMUIt7floq7q0tRR0MY
kaMKNx3IBf/8nXgAEoS3qFOjP2e7D6diJMw+h5SnO8r5PvSifzt/4xNAqYuPOBVw
j7IpznL8vuRwIwwihsPM77UzQiNXmGRG6XIU8jjIC9h3vLciPY/wKqaF91Y3z3lc
Pj4t88SsSipe/bYjvhUBVw4A28JuMzBMYBOzshvVFq2Oh+iQCnIImqqkQu/n/HbD
WdNYQZe8pNqME/b80Ov6XrBmI9IVfrRL
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:21 2026 by rpki-client