Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/757bb9bd-ddce-35ca-8248-2ac3a03c97c7.roa
File:                     757bb9bd-ddce-35ca-8248-2ac3a03c97c7.roa (raw, json)
Hash identifier:          Xe/ZukZeuHa8uKBfTEJ43wr7Jjp46JUZKDLzpJSgomM=
Subject key identifier:   AE:ED:8F:5B:2B:02:27:EE:89:40:5F:EC:C0:5B:76:A1:48:A6:68:28
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B7F523DAA911ADC85F587D280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/757bb9bd-ddce-35ca-8248-2ac3a03c97c7.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396547
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:3d:aa:91:1a:dc:85:f5:87:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=a3498f6e-7de4-47ec-89db-8a15322b6046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:e5:85:88:b2:d8:f5:86:8d:e6:23:ab:4f:
                    91:23:9f:db:62:f8:fb:69:e7:02:ea:00:54:26:54:
                    7c:99:09:c1:9a:ad:d4:4f:15:87:b7:18:c4:2a:df:
                    aa:00:56:b8:f2:46:b6:a3:0e:ef:e6:92:cc:46:b5:
                    9f:69:7b:b8:e0:a8:33:d2:7c:52:de:97:9e:98:05:
                    30:37:ef:f2:cd:1f:d5:9f:94:13:9a:7d:03:d0:1f:
                    ce:04:00:58:b0:49:74:3f:9d:5e:e4:0d:45:54:d7:
                    d1:64:05:34:55:cc:95:33:37:ad:12:c2:9f:94:55:
                    16:a4:d5:4d:75:4e:98:3d:48:ae:9a:38:e9:c0:5f:
                    4d:d9:b4:61:62:ac:c8:c7:f0:f6:23:62:32:03:4f:
                    2d:a1:65:72:b7:4b:cf:ef:a7:f6:7b:cd:08:5d:14:
                    13:ff:12:0c:ab:6d:c6:0f:d0:af:03:68:3d:e2:ca:
                    e4:2d:4f:12:9d:d0:39:82:97:3b:ac:a7:d2:bc:7c:
                    88:a3:71:e6:74:ba:5f:45:ae:59:89:c5:1c:21:f1:
                    f8:09:35:91:81:71:d8:19:d7:0f:56:5f:5e:01:08:
                    07:c1:22:f8:d0:6e:dc:a7:c1:cc:c7:4c:dc:8e:18:
                    92:cd:c0:2f:46:58:ef:68:17:44:1e:94:99:26:4d:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:ED:8F:5B:2B:02:27:EE:89:40:5F:EC:C0:5B:76:A1:48:A6:68:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/757bb9bd-ddce-35ca-8248-2ac3a03c97c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:be:e8:18:91:c2:92:b3:1a:78:87:41:58:ec:5d:f3:39:
         74:cd:69:3b:ee:7c:df:96:53:12:2d:32:0b:d3:ae:52:80:83:
         84:ef:7e:b1:10:d2:ae:bc:13:03:38:68:98:53:b0:d9:42:3d:
         24:f5:45:af:10:a0:6f:8f:02:69:36:01:05:e0:82:ab:0f:34:
         d7:12:55:75:2b:2e:14:77:15:93:1e:23:55:c1:8c:27:73:f5:
         ea:81:ed:5b:b7:6a:d2:56:0a:dc:c1:3a:29:60:b6:2b:46:d8:
         13:c7:45:53:7c:1c:be:d6:16:31:78:30:8e:f6:12:7a:26:b4:
         82:b6:24:58:df:1a:a1:55:57:92:50:bd:52:22:2e:e3:e4:08:
         cb:aa:33:b5:ba:2f:8f:9d:15:bd:7c:0c:ab:0e:67:26:6e:e3:
         ad:66:8b:3b:10:e7:c7:cc:c0:cb:5a:e6:3b:a1:5d:90:b0:16:
         19:b6:a2:f4:92:47:7c:32:0d:8d:fb:41:07:d0:3f:4d:7e:bb:
         18:f9:5d:39:90:58:6e:22:9f:5c:db:28:0b:53:b4:e5:18:9e:
         2a:ea:1b:c4:27:a2:8b:67:77:6b:72:6a:c1:ab:f8:4b:6d:6d:
         a4:86:64:bb:42:48:f7:b8:44:fa:67:07:f1:75:14:34:54:19:
         43:42:16:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:11:52 2025 by rpki-client