Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa
File:                     fb1eec45-973c-3753-886a-eb35a4c92628.roa (raw, json)
Hash identifier:          S8h7NuP4gET/vKxc1xR6KZ5hO2nGrulKCM3Mu0hCkbw=
Subject key identifier:   27:07:7B:B8:B1:9C:07:34:80:FD:38:E9:48:0B:5C:7D:E4:B8:82:2C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3DFFD6A3927C3D70BF6A6E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     36618
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:d6:a3:92:7c:3d:70:bf:6a:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=34b83ba2-b9f3-4ac2-9eb1-48317eed4f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:b3:33:0d:dd:d4:25:cf:2f:8c:a3:92:2e:
                    85:3c:c6:60:c6:d3:5c:50:2a:e8:ec:77:ff:40:be:
                    2d:2d:e4:ad:b2:e5:21:36:a0:b0:e9:60:ef:a7:77:
                    d5:5b:1c:8e:ac:07:c1:77:7a:53:04:45:b4:59:37:
                    06:45:84:8c:16:d2:d0:1c:54:33:01:88:11:32:43:
                    a8:0c:cc:3e:c9:d8:d8:b3:d8:22:25:52:a8:c5:aa:
                    52:40:a3:76:a1:30:c8:ff:1d:1b:2b:db:30:5a:95:
                    b6:41:3d:53:37:5f:cb:57:88:e5:6b:18:10:2e:da:
                    b4:70:db:82:d0:e3:08:d0:b2:02:4a:f8:71:f0:d9:
                    68:ea:3b:73:e9:c8:71:d2:29:d4:56:ac:c3:49:f5:
                    d0:5f:68:4d:e1:89:fb:8d:7e:df:e6:a6:5a:83:fb:
                    50:0b:1f:ef:4a:8b:ee:54:d4:53:fd:ff:2a:29:97:
                    4a:d6:d6:ac:ba:4e:20:a1:34:0d:7e:bd:dd:46:c3:
                    fc:8d:10:97:38:5b:19:02:ee:20:5e:80:88:3c:d8:
                    c4:8d:1a:29:4a:ac:17:f8:f4:ee:7d:04:6b:e0:90:
                    a9:e6:fc:36:18:e0:59:31:a8:42:39:69:0d:d7:64:
                    c3:21:97:db:39:1a:50:05:04:35:af:43:d4:58:0c:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:07:7B:B8:B1:9C:07:34:80:FD:38:E9:48:0B:5C:7D:E4:B8:82:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2e:e3:cc:c1:85:e5:e6:ef:4e:50:b9:bd:2b:74:07:d4:71:
         78:91:68:56:67:b4:92:f7:da:8d:f3:cb:76:41:38:97:39:f5:
         6a:14:26:ff:46:1a:84:7d:b1:2b:c0:a0:1a:87:83:72:b8:f8:
         09:38:15:71:2a:e6:ec:ab:e8:73:fa:1b:03:b8:37:a9:f1:de:
         ab:a5:9e:46:c5:19:30:f1:02:e1:2a:8c:38:f9:0f:42:22:21:
         95:a7:fa:95:47:e7:77:2f:71:cd:77:02:ab:27:7d:50:fe:92:
         7c:ee:0a:59:4a:f9:4d:b0:0a:09:9a:7b:6b:c5:59:d1:a1:07:
         51:c6:0f:c5:78:b5:ab:d9:70:6d:91:a7:c2:11:a6:f4:45:58:
         5c:1b:77:6a:9d:88:03:ce:b9:0b:d4:a7:44:d2:15:99:01:97:
         4f:66:53:c5:c1:02:97:ec:73:d4:de:1c:e8:8f:54:56:dd:0c:
         64:24:35:de:64:35:86:6e:0b:be:c9:4d:2a:69:52:8a:48:78:
         12:0d:d7:54:f6:6d:87:ef:9d:44:29:70:aa:ac:fb:e2:75:4f:
         74:7b:9f:54:00:cd:ef:89:b8:55:e8:3d:98:69:44:00:1d:bc:
         c0:6d:b2:a8:ea:58:ce:51:68:5b:96:ed:ef:90:98:61:be:14:
         97:ca:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:40 2026 by rpki-client