Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa
File:                     ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa (raw, json)
Hash identifier:          lFVn8b7XF9N1tjr6EYb9yFms9W8qfTR0RtskXLXq+Vg=
Subject key identifier:   95:B8:23:2D:01:3A:67:8F:AB:ED:66:FA:41:99:14:4C:F2:41:0D:83
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3DFFE0520ABD40BB441D6B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396564
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:e0:52:0a:bd:40:bb:44:1d:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=d8be4130-f4ec-453f-b111-54f11834a519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:fb:ee:58:57:76:64:00:91:0b:fb:7c:5e:
                    7c:48:07:a7:10:31:98:2b:79:e0:1a:64:17:fa:aa:
                    02:fb:ef:65:76:50:b9:06:9c:57:af:c7:46:a5:28:
                    36:19:38:8d:0b:e1:72:33:c2:f9:a3:07:e2:3d:cd:
                    21:19:53:6b:49:8b:6b:69:d1:57:04:5f:da:66:fc:
                    c2:1f:c8:4a:f6:eb:60:5a:46:a8:9e:ac:d4:6a:53:
                    8e:82:8b:63:3a:6a:aa:9e:ff:6f:48:ea:c9:99:13:
                    bc:81:42:b5:11:b4:dd:b4:fc:4d:40:35:6a:1a:1d:
                    8f:cc:8e:73:4f:44:b2:a7:23:4c:44:49:11:fe:6a:
                    3f:e4:c5:c5:8e:e7:bf:d6:0b:c0:8d:5c:e5:39:1a:
                    b2:2e:21:67:00:54:fc:cc:1b:8f:16:82:62:b5:97:
                    c0:ab:52:25:de:55:8f:4f:12:53:9f:d7:46:ca:4b:
                    47:3e:aa:eb:cb:49:53:e8:ad:5f:13:26:45:74:0c:
                    63:51:32:d6:8c:6c:aa:8f:30:f7:1e:fe:4f:10:02:
                    ce:ff:39:63:a6:0a:e4:47:52:c7:1d:f0:af:2c:a9:
                    8d:d8:f8:dc:75:dd:b9:47:d8:94:39:1c:af:7e:9d:
                    07:2a:b8:1e:94:c2:10:17:a6:96:57:e6:e0:da:fe:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B8:23:2D:01:3A:67:8F:AB:ED:66:FA:41:99:14:4C:F2:41:0D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:3e:e0:63:ed:75:7f:f7:a9:fe:ed:b9:a6:69:46:e3:7c:
         28:47:99:54:dd:c6:82:2b:20:51:92:bd:de:d7:22:4b:4e:9c:
         56:47:03:1a:8c:0d:59:c3:ea:dc:36:23:0e:e0:ff:b6:0b:a9:
         23:e8:a0:40:bb:b9:c7:c3:c5:a2:d7:75:80:01:22:9a:2c:e4:
         53:65:fd:c7:d9:40:2b:21:8a:27:89:a3:c0:65:98:04:2a:02:
         90:9b:c7:a2:33:a7:58:9b:da:91:55:3a:9f:6c:b2:e7:2f:e3:
         ec:16:3b:d6:c1:db:2e:dd:de:7a:94:b5:7c:2d:d4:bf:d2:4e:
         23:2b:e4:85:9f:4f:c8:9a:2d:1a:a1:b2:1d:04:8d:5d:74:b0:
         91:bd:d1:d2:19:69:91:df:04:bb:83:7a:55:05:45:18:09:f4:
         b5:41:53:27:c4:c5:1d:b8:5f:99:f2:9e:c4:ee:b7:9d:30:f1:
         36:1f:5b:34:ca:05:8b:a7:76:f9:56:ee:98:14:f0:a1:6a:a7:
         89:19:d5:05:41:bf:3a:38:5e:d4:bc:44:f0:31:e6:38:41:56:
         aa:78:c2:bd:c9:8d:4a:86:35:a5:26:18:57:42:8d:21:93:55:
         d4:d1:df:e7:ea:f8:66:f5:7c:22:03:8b:53:83:03:96:78:d4:
         ae:d9:1f:67
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+BSCr1Au0Qda0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZDhiZTQxMzAtZjRlYy00NTNmLWIxMTEtNTRmMTE4MzRhNTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoen77lhXdmQAkQv7fF58SAenEDGYK3ngGmQX
+qoC++9ldlC5BpxXr8dGpSg2GTiNC+FyM8L5owfiPc0hGVNrSYtradFXBF/aZvzC
H8hK9utgWkaonqzUalOOgotjOmqqnv9vSOrJmRO8gUK1EbTdtPxNQDVqGh2PzI5z
T0SypyNMREkR/mo/5MXFjue/1gvAjVzlORqyLiFnAFT8zBuPFoJitZfAq1Il3lWP
TxJTn9dGyktHPqrry0lT6K1fEyZFdAxjUTLWjGyqjzD3Hv5PEALO/zljpgrkR1LH
HfCvLKmN2Pjcdd25R9iUORyvfp0HKrgelMIQF6aWV+bg2v5jNwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJW4Iy0BOmePq+1m+kGZFEzyQQ2DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQ5ODhiYmItMDEwOS0z
NmIyLTlkNTUtMGZiMmI3YmYyMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBegz7gY+11f/ep/u25pmlG43woR5lU3caCKyBRkr3e1yJLTpxWRwMa
jA1Zw+rcNiMO4P+2C6kj6KBAu7nHw8Wi13WAASKaLORTZf3H2UArIYoniaPAZZgE
KgKQm8eiM6dYm9qRVTqfbLLnL+PsFjvWwdsu3d56lLV8LdS/0k4jK+SFn0/Imi0a
obIdBI1ddLCRvdHSGWmR3wS7g3pVBUUYCfS1QVMnxMUduF+Z8p7E7redMPE2H1s0
ygWLp3b5Vu6YFPChaqeJGdUFQb86OF7UvETwMeY4QVaqeMK9yY1KhjWlJhhXQo0h
k1XU0d/n6vhm9XwiA4tTgwOWeNSu2R9n
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:59 2026 by rpki-client