Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e43c82-0655-3c7b-9b67-9b5cf28a43b0.roa
File:                     49e43c82-0655-3c7b-9b67-9b5cf28a43b0.roa (raw, json)
Hash identifier:          Pm4If9R6ElE6vIEM0GRgy9KCkpKxCuA65nv9ePYdW/c=
Subject key identifier:   8B:F8:05:52:9E:0C:6D:8D:CF:0C:D5:3B:7D:89:58:CA:CB:43:61:D8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F6292F78D993315FD735F1B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e43c82-0655-3c7b-9b67-9b5cf28a43b0.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     36625
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:f7:8d:99:33:15:fd:73:5f:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=2c5f9f20-19a0-4680-9a13-c86dae95b49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:40:0c:eb:5e:35:f5:7d:3a:5a:74:0f:e8:
                    80:b7:f8:a2:c8:ec:ad:05:1a:cc:91:21:ac:e0:b4:
                    98:63:27:95:a9:b8:fd:3c:9f:05:b9:3b:49:78:75:
                    e6:28:03:9b:bd:70:34:3a:2b:39:ad:4d:5c:e2:77:
                    e0:60:fa:ce:77:2e:fd:34:fb:fc:5a:f1:1a:4d:0d:
                    60:ab:8c:45:74:ed:1b:ab:e5:41:3e:d7:b0:d3:ab:
                    23:10:d2:d6:4c:2a:93:7c:47:e3:8e:12:ae:f3:ae:
                    1b:e5:2a:25:c3:ae:84:bb:7c:95:b2:c3:ca:e3:55:
                    3d:60:bc:d7:65:f8:38:ad:dd:6e:ba:aa:de:92:ba:
                    e4:0c:52:94:7e:cf:df:ca:d4:43:e8:98:d7:b9:d3:
                    3b:2b:f6:d9:5d:61:b5:0b:a5:3f:41:9f:dc:05:4e:
                    71:03:9c:3f:fa:d8:f4:db:04:00:83:1d:bf:c3:e7:
                    ae:25:b1:b2:20:9e:08:f7:2c:c3:1f:30:cc:75:40:
                    e9:e1:ce:35:af:04:65:fc:26:91:38:54:40:1b:b1:
                    65:c1:41:9c:99:97:90:cb:13:a9:2d:a9:82:f8:58:
                    c5:8e:c5:54:f0:79:7c:f4:49:10:16:d8:8b:aa:8b:
                    02:54:ff:9c:19:cd:b2:44:5c:07:8f:2f:51:46:ef:
                    64:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F8:05:52:9E:0C:6D:8D:CF:0C:D5:3B:7D:89:58:CA:CB:43:61:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e43c82-0655-3c7b-9b67-9b5cf28a43b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:3f:70:10:3b:5b:2d:1d:c4:6f:27:3a:9c:95:ce:31:96:
         c1:dd:93:f2:d8:51:94:ac:f4:0e:c8:ab:99:74:5f:45:d7:77:
         4a:e3:7f:6a:62:e7:c9:05:2a:3d:8b:76:0e:43:0f:08:a8:30:
         6c:42:2a:ad:a6:27:06:84:ec:cf:31:12:28:3e:6a:d2:54:69:
         d8:43:25:dd:ff:15:94:16:b1:fe:12:e4:dd:b6:5a:a1:a1:92:
         f7:82:86:e8:fb:fa:7b:7b:13:10:40:20:be:7f:bf:1a:d7:3d:
         48:a0:0a:15:85:2e:2f:0b:ff:30:0b:83:eb:48:99:e0:bf:5c:
         a2:14:20:52:87:9b:ba:2f:53:f1:e3:2d:e7:37:9d:88:ca:1c:
         41:07:c4:08:77:c4:5e:2d:95:6f:e2:a4:ea:31:84:98:0e:c0:
         ee:ad:99:2f:06:ea:a8:16:1f:5d:05:dd:5b:5b:69:f4:b7:9a:
         16:d5:08:12:0c:e9:52:27:cd:85:55:23:88:02:30:75:a4:ff:
         30:a3:15:c4:76:74:66:3c:85:c9:2d:2e:b4:b4:12:ac:d1:82:
         5f:d6:8e:43:ae:d5:ec:11:ee:02:a7:6a:3d:2a:4b:55:9c:9c:
         b3:f1:a4:6d:04:e8:09:dc:6b:55:39:aa:2c:4d:32:b4:fc:46:
         5b:7e:3d:dd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikveNmTMV/XNfG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
MmM1ZjlmMjAtMTlhMC00NjgwLTlhMTMtYzg2ZGFlOTViNDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiVADOteNfV9Olp0D+iAt/iiyOytBRrMkSGs
4LSYYyeVqbj9PJ8FuTtJeHXmKAObvXA0Ois5rU1c4nfgYPrOdy79NPv8WvEaTQ1g
q4xFdO0bq+VBPtew06sjENLWTCqTfEfjjhKu864b5Solw66Eu3yVssPK41U9YLzX
Zfg4rd1uuqrekrrkDFKUfs/fytRD6JjXudM7K/bZXWG1C6U/QZ/cBU5xA5w/+tj0
2wQAgx2/w+euJbGyIJ4I9yzDHzDMdUDp4c41rwRl/CaROFRAG7FlwUGcmZeQyxOp
LamC+FjFjsVU8Hl89EkQFtiLqosCVP+cGc2yRFwHjy9RRu9kowIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIv4BVKeDG2NzwzVO32JWMrLQ2HYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDllNDNjODItMDY1NS0z
YzdiLTliNjctOWI1Y2YyOGE0M2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB7Uj9wEDtbLR3Ebyc6nJXOMZbB3ZPy2FGUrPQOyKuZdF9F13dK439q
YufJBSo9i3YOQw8IqDBsQiqtpicGhOzPMRIoPmrSVGnYQyXd/xWUFrH+EuTdtlqh
oZL3gobo+/p7exMQQCC+f78a1z1IoAoVhS4vC/8wC4PrSJngv1yiFCBSh5u6L1Px
4y3nN52IyhxBB8QId8ReLZVv4qTqMYSYDsDurZkvBuqoFh9dBd1bW2n0t5oW1QgS
DOlSJ82FVSOIAjB1pP8woxXEdnRmPIXJLS60tBKs0YJf1o5DrtXsEe4Cp2o9KktV
nJyz8aRtBOgJ3GtVOaosTTK0/EZbfj3d
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:11:02 2026 by rpki-client