Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e186056-57d7-36f2-bde4-f294a34d3ed4.roa
File:                     0e186056-57d7-36f2-bde4-f294a34d3ed4.roa (raw, json)
Hash identifier:          MQQUbdWAc7DZLEYteNRax/fepaA9MGeKhFCjLtKjx+k=
Subject key identifier:   7E:83:81:51:2F:97:E7:5C:15:90:9E:85:E1:1C:08:D5:F3:AD:A4:4E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F6292F5312112877A89CB2F40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e186056-57d7-36f2-bde4-f294a34d3ed4.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396591
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:f5:31:21:12:87:7a:89:cb:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=1effee67-ec6e-4790-b588-7bbcc90a51ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:a2:2a:6e:44:f7:27:d2:b7:f6:41:cd:94:
                    1a:47:a0:28:1d:c0:5b:d8:0d:8a:5d:5e:91:e8:d5:
                    58:4f:29:2d:24:84:09:79:c7:a0:e9:8f:fd:c3:e7:
                    28:1c:f6:f2:5b:40:d0:aa:51:f4:22:6a:9c:10:64:
                    f0:85:f6:eb:e0:66:49:8e:26:4b:b1:ca:5e:6a:9e:
                    fd:52:39:23:d0:64:17:ce:9a:f6:85:9d:44:ad:05:
                    91:8f:8d:ac:47:75:e1:ad:6f:a6:22:7b:bd:fd:41:
                    e0:9d:e5:bb:a5:be:7c:60:c1:14:82:0e:40:7f:21:
                    f8:0f:55:1d:43:43:14:47:9f:c1:db:f7:a8:06:0e:
                    63:06:84:b1:40:1d:77:34:0a:2c:be:68:9c:17:ad:
                    a3:d2:8a:64:cb:fb:07:08:e8:0b:37:79:65:d2:a6:
                    19:80:f7:28:82:36:90:7a:9e:13:78:71:22:ff:3d:
                    65:5c:62:87:84:b1:5a:38:f1:54:fe:23:e7:88:6b:
                    9e:58:d7:43:f5:ed:5b:5d:29:69:20:6b:a3:1d:fb:
                    13:ab:c4:89:62:80:cb:3d:75:7f:79:c3:38:65:0c:
                    44:e8:17:f2:a0:5f:0e:a5:18:9a:77:d3:b0:dd:d0:
                    2d:91:39:d3:a2:50:64:09:95:d1:3f:94:d4:5b:62:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:81:51:2F:97:E7:5C:15:90:9E:85:E1:1C:08:D5:F3:AD:A4:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e186056-57d7-36f2-bde4-f294a34d3ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:3b:b6:18:48:6e:de:aa:67:6d:96:56:47:e1:3b:99:bb:
         18:13:04:30:11:78:c0:c3:22:fd:84:31:61:24:58:54:96:63:
         10:fa:1c:3e:32:41:17:f5:94:9d:5f:7b:23:1a:a3:ef:51:d5:
         ba:ad:ab:72:cf:70:b3:a0:a6:9d:cd:8e:36:74:cb:d0:fc:08:
         e8:20:ee:38:ea:35:1c:cc:72:aa:99:ab:0c:c4:7f:6d:0e:03:
         54:fd:a1:8b:80:ba:a5:8e:c4:dc:1f:f0:e6:41:1a:10:9f:a7:
         f3:8e:3f:61:36:f9:86:e8:10:f4:d3:f5:12:64:de:4e:41:27:
         32:57:5b:31:80:ca:cb:4b:df:44:2b:03:b2:43:22:72:cf:49:
         a4:7b:d4:0a:65:dc:ae:ce:41:15:86:c3:09:23:fd:16:c1:4b:
         64:db:03:7f:70:d6:29:d5:31:99:82:45:b1:21:77:c7:70:cd:
         c3:98:40:70:19:b3:81:53:ed:c0:63:13:03:39:50:d4:3f:ff:
         52:16:be:6f:c5:c7:56:3f:02:8e:c8:89:45:bd:0c:ce:7a:78:
         ab:65:ab:5a:7b:32:30:a2:af:f2:b2:66:ef:3c:2b:80:c6:bb:
         36:d3:fb:8c:b4:d4:82:e2:54:72:13:10:a6:f5:4d:03:7d:ca:
         bd:cd:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:57:41 2026 by rpki-client