Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54581521-97d3-340d-a297-9eb2f6d1ae8b.roa
File:                     54581521-97d3-340d-a297-9eb2f6d1ae8b.roa (raw, json)
Hash identifier:          vVmrmuoE5qkOhhUbtn6vnBQAiJOQ7fOUAGmKiet/CY8=
Subject key identifier:   49:37:4C:B9:88:3C:B5:32:59:94:F3:10:D9:2C:F6:CB:28:BD:20:AD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3DFFDA74712D2F34A2DCDF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54581521-97d3-340d-a297-9eb2f6d1ae8b.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396615
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:da:74:71:2d:2f:34:a2:dc:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=745649b8-e142-4dcd-9f0c-cded1ed3021b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:12:94:fb:c4:1d:82:ee:d4:a7:88:35:4f:
                    2f:15:96:b7:17:4d:9b:ee:c2:d1:39:f2:30:ed:43:
                    c7:ae:6a:7a:7f:17:a0:1a:f5:70:fe:9a:98:7b:ab:
                    55:f5:dc:e0:fa:15:1b:4d:38:3d:91:d1:2f:a2:46:
                    74:32:db:6f:00:18:0e:d9:4a:07:3c:7c:1b:20:27:
                    ef:de:95:42:3b:96:9e:ed:c7:65:71:a5:63:8a:3a:
                    6a:a9:ba:97:e2:c6:b5:2f:cc:79:d3:db:23:63:46:
                    19:19:d2:24:f3:ab:d2:5d:a5:0a:22:cc:64:08:ae:
                    e5:91:89:ff:55:f4:0c:ca:60:99:1d:cf:dd:d2:1a:
                    69:ed:27:40:ac:f6:b0:4a:04:ef:d1:45:af:f7:5e:
                    df:d6:62:19:57:da:4b:43:bf:c4:e9:b7:0a:a1:74:
                    ad:0a:79:64:95:0e:7b:b7:4d:95:9c:0a:5b:d6:3e:
                    cc:e9:9d:3b:06:7f:20:bb:8c:f4:3e:c7:e7:75:76:
                    27:d9:a9:bb:35:6b:07:35:50:ac:38:15:3e:33:21:
                    17:f8:4b:d8:61:66:1d:2a:9e:b7:7a:73:2c:af:8e:
                    27:79:c4:10:28:c8:98:ab:36:ac:6a:c1:ad:d2:df:
                    19:4f:8c:3c:d2:d9:8d:dd:d2:40:5d:a8:d0:72:47:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:37:4C:B9:88:3C:B5:32:59:94:F3:10:D9:2C:F6:CB:28:BD:20:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54581521-97d3-340d-a297-9eb2f6d1ae8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4b:f9:c2:ce:67:ad:1a:a5:be:6f:67:f1:fe:29:2e:34:01:
         d4:0f:ca:b4:1b:d2:24:b6:f2:e6:dd:f8:d1:78:ce:c7:c0:b0:
         a2:85:a1:b2:d7:51:f5:30:07:3f:a7:df:25:17:9e:0b:bf:bc:
         9e:ca:db:57:2a:15:15:de:93:3d:2b:b5:94:05:1e:c4:fd:30:
         43:6b:0d:53:2c:75:79:06:08:ec:d7:e1:af:88:04:81:8e:88:
         d8:30:f4:dd:32:34:33:6b:4b:22:eb:39:ea:a9:36:af:54:96:
         6e:c4:48:04:e5:c5:70:10:e6:b4:51:33:01:bd:e8:ff:0b:4a:
         56:e1:0d:82:1d:7e:74:58:4f:26:2a:9b:63:65:e9:76:7b:15:
         92:8f:4e:50:7a:fa:4b:11:28:13:32:75:10:4b:c7:07:09:73:
         cf:14:77:50:a6:f8:b9:26:86:56:c3:d7:85:4d:e1:ac:a0:14:
         c6:08:29:59:d4:df:48:b4:76:3e:9d:0d:50:5f:d5:f1:8f:5e:
         26:1c:2a:ad:fa:ac:b5:28:9a:ca:1a:78:c2:ff:8b:e1:75:c5:
         cd:d2:c5:f0:41:28:92:49:2e:c8:cb:13:e0:7e:49:05:49:b7:
         44:e0:9a:12:20:77:7c:a1:55:5f:7f:cf:6e:a8:b2:dc:e6:35:
         bd:7e:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:09 2026 by rpki-client