Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa
File:                     49b878ae-cfbb-33d6-a846-5101c41a6394.roa (raw, json)
Hash identifier:          cNEqqv/L82JNSacNBnwpBrpGnBpObyQkUrlqFfOwItw=
Subject key identifier:   A3:AE:5F:14:F6:4B:51:80:B1:8C:8A:7F:7C:7D:99:D7:DD:4C:53:AD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC0A73FCA8737DB88DF792A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396603
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:3f:ca:87:37:db:88:df:79:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=650fd296-35f4-4eb4-a789-fc7892edf8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e6:9f:94:f2:39:17:b9:3f:04:27:04:28:02:
                    fb:7d:fb:3a:2f:b1:6f:ec:de:ef:f5:2c:e0:0a:83:
                    71:2f:30:d4:eb:5a:82:91:44:43:f6:2a:49:79:66:
                    1e:53:9e:a5:b1:cf:d1:f9:ca:88:ae:5f:41:fe:3e:
                    31:65:59:db:1f:24:f8:c6:1a:09:fc:5f:4c:98:a0:
                    33:24:d1:b1:b5:c3:1d:56:7f:61:06:6b:74:07:57:
                    e5:14:cf:6c:c7:22:79:d3:1b:4e:cc:3c:1b:f0:57:
                    57:95:a9:ff:41:a8:34:1f:72:46:21:03:48:2d:31:
                    78:b8:9d:84:7f:f1:e0:3e:d2:fd:6d:5b:31:fd:00:
                    81:d7:a3:5a:78:4d:b9:c1:41:1e:d3:06:c4:b7:5c:
                    56:cb:6b:17:85:2f:8f:8d:e9:0a:d9:b5:4c:f5:0c:
                    d0:f3:7e:f0:bf:70:67:fa:e3:15:ce:da:47:69:6f:
                    ab:2a:aa:4b:c8:e6:bc:5a:c1:2f:c3:a9:0c:0f:a6:
                    24:47:10:34:05:e8:ca:e8:41:56:4f:c5:9f:e0:3d:
                    90:67:0b:cd:ca:7e:3f:e9:c0:3d:40:e1:6b:45:9e:
                    96:31:ce:23:9f:5f:38:d3:cd:d8:a9:51:19:9b:50:
                    12:c7:71:7b:7f:70:ef:51:67:d6:ee:16:05:2f:2f:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:5F:14:F6:4B:51:80:B1:8C:8A:7F:7C:7D:99:D7:DD:4C:53:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2e:f8:66:03:71:05:59:5c:54:1b:ab:c4:a2:20:38:bc:88:
         0f:a4:50:3d:36:2f:6f:37:46:f4:b8:eb:f0:ee:d5:1b:e5:a7:
         9f:d8:08:aa:01:19:ed:01:da:b7:a7:27:e2:eb:d5:d4:c9:71:
         fd:73:a3:32:29:4d:2d:52:91:96:a7:76:49:8d:cd:f3:1b:00:
         0e:5a:79:03:9d:d5:4d:a2:23:ce:2b:f5:c1:98:0e:d9:f8:67:
         5c:3f:8c:4f:6c:e2:bd:8d:65:9e:b2:7a:d1:f3:e5:20:1c:fe:
         03:55:5c:84:df:3e:ad:0d:4a:b8:ac:53:6e:46:f0:8d:68:6a:
         e3:f3:98:c1:78:59:83:a4:5c:46:88:f7:31:8b:08:fe:3f:12:
         d9:ea:35:66:a1:8a:33:5c:d2:de:23:4e:a0:51:a5:6c:38:ce:
         0a:09:63:6f:b5:1e:03:21:f9:60:59:49:30:4c:cc:76:f8:ae:
         53:2c:62:68:80:9b:b4:d7:52:79:47:54:61:f9:0c:7d:35:3d:
         76:fe:0a:22:71:28:dc:f8:ee:aa:e2:0e:78:13:bf:67:8c:b3:
         45:c4:90:49:b4:b4:62:28:ff:f2:da:bb:06:b6:fa:9e:48:37:
         5f:9d:a0:27:d2:ad:23:e3:50:30:9f:bf:b6:66:73:71:8a:46:
         8c:b1:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:01 2026 by rpki-client