Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19a86739-bff1-3b03-bf0d-18dacc1de462.roa
File:                     19a86739-bff1-3b03-bf0d-18dacc1de462.roa (raw, json)
Hash identifier:          OpCC/RU50B5UZUOl5bAVn5n0wy356X01bWJkuJ8+Fss=
Subject key identifier:   D9:18:24:05:D2:A7:5B:58:BE:44:17:6B:C8:1F:8C:CD:0E:1B:AF:3B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F4974756BD39708ECBFAF90C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19a86739-bff1-3b03-bf0d-18dacc1de462.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21313
IP address blocks:        209.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:75:6b:d3:97:08:ec:bf:af:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b7ab16a7-7b63-4a8c-be3a-0f79a116bf03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:8f:6d:1c:61:4a:5c:63:a4:7d:52:6c:4b:
                    ca:a6:e2:af:c7:fa:f6:b0:b0:42:7a:39:d6:d0:1d:
                    a0:0c:c7:9b:1b:45:b4:67:9e:ef:16:f8:fd:bc:58:
                    7c:fa:51:4f:de:72:55:5b:cf:e0:21:d6:13:ee:00:
                    cd:cd:9e:84:ba:ba:cb:7a:05:e1:46:b6:1e:12:25:
                    72:d7:4c:b7:0e:a5:dd:f3:a4:d7:ec:87:c6:27:a6:
                    04:94:ce:4d:6f:4c:4a:c9:6c:c9:84:2c:95:ce:72:
                    50:6b:b5:c0:1a:9f:c6:84:a2:83:d2:3b:14:db:d7:
                    61:52:de:26:dd:6f:e1:b3:f9:87:8a:b8:f4:d5:14:
                    be:93:22:b0:79:13:66:77:76:7b:12:82:1c:65:af:
                    05:41:b6:12:45:44:ad:11:9a:83:47:da:46:3c:86:
                    46:f2:96:40:95:35:90:4f:2e:ad:88:41:5d:5a:9d:
                    90:06:9c:73:3a:b6:b1:2e:7d:8c:dc:e6:f4:73:fe:
                    d6:6a:a0:98:44:c3:ba:65:a0:02:70:c5:3b:9c:f3:
                    77:15:ee:07:90:49:cc:7e:5d:cd:18:0f:6e:96:c7:
                    23:8b:ee:0f:c5:27:40:2a:3c:db:96:5e:21:0a:2c:
                    87:67:95:c7:89:15:0d:76:85:7c:43:d4:09:11:88:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:18:24:05:D2:A7:5B:58:BE:44:17:6B:C8:1F:8C:CD:0E:1B:AF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19a86739-bff1-3b03-bf0d-18dacc1de462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:83:38:10:4c:3e:65:15:e9:1d:4d:cc:a2:07:49:87:aa:
         d9:33:ba:9a:a5:e3:ee:80:d7:13:5a:1b:3d:02:9d:ce:c0:bd:
         88:58:0f:e7:58:dc:30:96:7c:38:5b:8c:84:ed:3f:c6:82:d6:
         9d:f1:bf:dd:69:a4:4f:13:cf:df:b0:38:c2:09:2e:7e:01:99:
         27:25:c7:d6:5e:65:19:b1:b6:94:42:af:4d:f1:7e:0b:e3:57:
         d9:f0:42:fe:96:84:f5:91:fa:fb:20:96:6b:1d:c7:54:44:4e:
         cb:ae:1b:4f:59:fb:8a:e8:4a:b0:38:ae:a7:71:06:aa:a1:7f:
         2e:49:4f:02:55:92:b7:97:40:89:7b:15:fd:bd:6a:92:61:49:
         0e:b1:c9:7d:d9:44:01:50:9e:11:4f:87:64:bd:e8:fc:14:bd:
         41:de:12:7a:cb:bd:ab:0a:6e:bc:ac:6e:44:11:fc:a3:de:e7:
         1b:1f:c3:ee:ba:ab:60:ba:74:9e:f2:95:a5:1f:d9:95:6b:60:
         0f:52:4c:a6:25:62:00:20:f0:a6:bc:d1:5c:c2:08:00:df:4c:
         14:4d:ad:fd:2d:63:f4:0f:d6:2e:43:df:df:5c:4a:c5:bb:e2:
         f2:c3:59:94:c8:b0:d4:c1:d3:ff:f8:fd:28:ce:87:a8:eb:35:
         6b:43:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:40:35 2026 by rpki-client