Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa
File:                     82670539-bfff-3308-b662-a1acd7aa0b03.roa (raw, json)
Hash identifier:          qm5ao7Gb+PkYJQhFuUadqc2SUBjR8EvWpHu0A6hT02s=
Subject key identifier:   54:B1:7D:47:6E:B7:E7:15:7B:C0:42:2D:C2:76:F0:4C:C5:2F:AB:4C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B7F523352EC045BD81F4CD3C8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396549
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:33:52:ec:04:5b:d8:1f:4c:d3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=ea31408b-b53e-4dfe-9b02-98cef4ebe57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:fe:95:49:89:ab:0c:65:b0:2f:3b:3d:21:
                    c8:eb:23:6a:01:aa:1d:94:2f:d0:ab:57:3a:77:3e:
                    79:c4:94:0f:ea:1a:46:59:60:0d:e7:49:01:a5:5b:
                    fd:e1:54:cf:c3:d3:5f:44:e5:e4:46:25:20:c8:b5:
                    94:8c:5f:d3:45:2c:51:a4:3c:8b:79:65:cc:66:3c:
                    aa:ee:50:e3:3a:0b:6a:fe:82:a1:2e:68:7b:71:bc:
                    31:ac:b3:05:df:71:e8:f8:ea:94:83:5a:db:a0:c7:
                    ab:57:e0:ca:de:7b:e7:41:3a:9f:fc:25:b1:e0:a2:
                    1d:dc:23:83:ba:60:d0:da:4b:8e:7a:50:a3:80:fd:
                    d3:26:9e:7e:20:3b:a7:79:82:25:57:4b:bb:80:fc:
                    6e:63:0e:95:02:3a:66:eb:5b:81:04:f5:d7:e8:48:
                    ea:16:07:82:e1:a8:76:e1:82:a1:7a:52:76:6b:82:
                    1e:b5:c0:d2:ca:8d:4c:d9:6c:8e:0f:77:df:57:e6:
                    d3:c3:0a:f6:82:2b:b4:ef:71:26:f3:e3:de:9b:6b:
                    af:06:de:ce:b3:06:cf:5b:df:9e:78:aa:40:0d:96:
                    4f:87:69:ae:d0:e6:22:28:f5:b1:8a:68:57:c3:18:
                    7f:9d:23:6d:eb:8f:80:a1:87:25:36:88:f5:fb:56:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B1:7D:47:6E:B7:E7:15:7B:C0:42:2D:C2:76:F0:4C:C5:2F:AB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:f7:8f:e8:7c:28:7c:7a:12:fc:a9:2f:32:1b:dd:44:7c:
         48:4f:98:da:e7:10:f7:cf:14:dd:65:3e:73:a9:7f:dd:fd:e8:
         32:f3:4d:21:fe:23:ca:a8:3b:5a:a4:d4:bd:50:91:bf:e7:13:
         a5:82:ba:f2:25:f8:eb:35:f3:eb:ac:48:f9:67:53:ad:03:cc:
         63:79:f1:1d:9b:d5:65:f4:39:f3:b0:7a:7b:0e:78:dd:51:e5:
         dc:75:80:3e:38:e6:21:16:d6:0c:0a:da:56:21:3e:49:80:eb:
         7b:6a:cf:42:cb:16:c3:07:1d:18:ab:e9:08:d4:dc:11:a0:10:
         5e:5f:67:52:9a:65:13:51:da:42:b5:2d:77:ff:35:e3:80:d1:
         9c:80:2e:8b:a3:24:bf:c6:c5:1b:3c:5c:a1:cc:88:e4:bb:2b:
         50:34:4c:d1:b9:a2:17:ed:49:9f:61:be:fc:97:56:94:6a:7b:
         ce:d8:c9:4a:89:aa:ef:81:9c:fa:8f:ea:53:9a:f0:55:52:ab:
         7c:15:a6:f5:6a:2e:e7:81:47:5a:b2:ff:be:65:34:82:ca:2d:
         36:a3:69:a9:e5:e2:04:9d:10:83:14:5d:85:aa:2e:9a:63:6e:
         c9:94:c6:74:26:f2:5c:2b:05:a9:fc:75:05:b9:98:e7:0b:8b:
         cb:14:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:11:48 2025 by rpki-client