Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18b00075-3230-335e-9aae-6a305a9c5ebc.roa
File:                     18b00075-3230-335e-9aae-6a305a9c5ebc.roa (raw, json)
Hash identifier:          35eEJ9nGO+rwF0fkamOe7qXTv1JeWbI6P15DwsrO8zs=
Subject key identifier:   74:CA:17:A7:FB:C5:06:CD:D8:45:E7:44:20:ED:6F:8C:8D:57:93:AE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F6292F59116A78EC5C490B680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18b00075-3230-335e-9aae-6a305a9c5ebc.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396600
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:f5:91:16:a7:8e:c5:c4:90:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=bdea02ca-8a78-46cc-b8b4-dde73fae46cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:b8:f9:8e:0e:11:8e:81:a2:ae:2d:19:df:
                    0e:d8:90:56:3e:a5:a0:80:eb:7c:6a:4e:87:bd:62:
                    d9:d7:ff:43:05:7a:46:4a:46:d2:98:ac:9a:36:a8:
                    99:e1:74:93:f5:a4:6c:08:5a:16:a3:aa:a3:55:da:
                    71:7f:50:f2:37:e9:51:09:59:b7:f2:8d:60:2c:97:
                    38:a5:f8:e8:64:4f:7a:0c:60:ae:06:b4:da:6a:51:
                    83:5e:75:66:17:2f:af:5f:64:ab:d7:5d:a8:b4:14:
                    70:e4:ae:ef:da:30:1b:bb:d0:54:d4:69:aa:f6:99:
                    31:91:d4:ee:1b:7a:69:a1:5e:8d:0b:82:63:09:9d:
                    1c:06:a2:8c:d7:81:50:6b:35:12:6d:e8:c1:42:bc:
                    8a:27:48:9c:ee:02:8a:23:8e:06:25:f4:76:be:65:
                    b0:3b:ec:7b:05:f5:7e:56:01:4b:2a:a8:16:2b:6e:
                    dd:0b:ad:1d:c0:54:29:43:39:af:29:07:90:65:a8:
                    a2:79:b0:5a:8b:35:ee:0f:c1:e9:7f:6c:8c:72:81:
                    e4:a5:23:1c:b9:94:f2:20:00:bf:74:91:cb:31:83:
                    f2:30:cf:07:b6:8e:2e:fc:2d:f7:0e:fb:1a:a8:de:
                    5d:04:50:41:e6:ab:18:e4:04:2c:02:bb:06:3b:a4:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:17:A7:FB:C5:06:CD:D8:45:E7:44:20:ED:6F:8C:8D:57:93:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18b00075-3230-335e-9aae-6a305a9c5ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:66:b8:bb:17:bc:db:3a:a3:cb:80:26:52:08:b9:cb:ae:20:
         01:9e:ee:3d:e8:2e:20:09:ba:75:7c:a0:e4:7d:c9:a6:26:25:
         e6:de:42:11:8a:91:38:11:ab:22:ff:e8:a6:9d:00:ba:1e:ea:
         fb:a6:83:b4:8b:10:96:b9:fb:44:a6:9f:53:45:34:27:ae:17:
         aa:7e:db:94:c6:82:06:92:05:87:c6:85:d3:62:73:2f:48:d7:
         ca:21:b4:cf:b0:54:e1:93:dc:af:d3:4d:95:2d:c9:4c:23:ce:
         ae:db:6c:b4:04:1a:95:bc:a7:7b:83:67:b1:ff:fe:13:5b:76:
         c2:ed:79:df:6e:9b:a9:75:92:17:a2:c4:47:21:31:70:47:eb:
         76:cf:bd:5b:2b:3e:35:de:52:4c:c5:6e:31:bc:55:a5:ea:3c:
         1c:da:0f:8d:92:00:9c:db:b0:d9:a9:91:92:0f:02:01:d0:04:
         c7:d8:48:60:8d:1d:0c:9e:2b:da:87:46:0b:e7:fd:aa:77:1b:
         8a:7c:cf:df:c5:c4:14:0e:91:95:96:00:4c:64:31:22:9c:fe:
         2e:05:a0:dc:67:e2:b5:a4:d6:10:80:a6:5d:4e:cc:dc:80:dc:
         19:52:f5:90:4c:24:28:e2:6c:a9:73:73:06:2e:31:bd:73:74:
         b2:e8:91:43
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvWRFqeOxcSQtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
YmRlYTAyY2EtOGE3OC00NmNjLWI4YjQtZGRlNzNmYWU0NmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN+4+Y4OEY6Boq4tGd8O2JBWPqWggOt8ak6H
vWLZ1/9DBXpGSkbSmKyaNqiZ4XST9aRsCFoWo6qjVdpxf1DyN+lRCVm38o1gLJc4
pfjoZE96DGCuBrTaalGDXnVmFy+vX2Sr112otBRw5K7v2jAbu9BU1Gmq9pkxkdTu
G3ppoV6NC4JjCZ0cBqKM14FQazUSbejBQryKJ0ic7gKKI44GJfR2vmWwO+x7BfV+
VgFLKqgWK27dC60dwFQpQzmvKQeQZaiiebBaizXuD8Hpf2yMcoHkpSMcuZTyIAC/
dJHLMYPyMM8Hto4u/C33DvsaqN5dBFBB5qsY5AQsArsGO6T+TwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHTKF6f7xQbN2EXnRCDtb4yNV5OuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMThiMDAwNzUtMzIzMC0z
MzVlLTlhYWUtNmEzMDVhOWM1ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBgZri7F7zbOqPLgCZSCLnLriABnu496C4gCbp1fKDkfcmmJiXm3kIR
ipE4Easi/+imnQC6Hur7poO0ixCWuftEpp9TRTQnrheqftuUxoIGkgWHxoXTYnMv
SNfKIbTPsFThk9yv002VLclMI86u22y0BBqVvKd7g2ex//4TW3bC7XnfbpupdZIX
osRHITFwR+t2z71bKz413lJMxW4xvFWl6jwc2g+NkgCc27DZqZGSDwIB0ATH2Ehg
jR0Mnivah0YL5/2qdxuKfM/fxcQUDpGVlgBMZDEinP4uBaDcZ+K1pNYQgKZdTszc
gNwZUvWQTCQo4mypc3MGLjG9c3Sy6JFD
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:28:34 2026 by rpki-client