Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f114d04-03d9-3d52-87ef-a0f66a996870.roa
File:                     5f114d04-03d9-3d52-87ef-a0f66a996870.roa (raw, json)
Hash identifier:          i1wi5Hf4JrftWZPW3kOQ4AXcPuPlfB8SLivwC/eP52M=
Subject key identifier:   A6:D4:36:54:23:82:B7:10:E5:59:60:61:D1:3B:31:D8:D4:18:0D:6B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F6292F41F5F631F8BF7906BC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f114d04-03d9-3d52-87ef-a0f66a996870.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     10515
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:f4:1f:5f:63:1f:8b:f7:90:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=4c536581-66a7-47e3-87f1-f0d3df3bd893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:5f:a1:12:7e:19:1e:c6:5d:33:16:c6:05:
                    38:e9:e5:65:fe:6a:0b:01:29:26:5b:5f:ea:d3:6b:
                    b1:71:0f:66:2e:d3:f7:56:84:97:00:4e:f8:dd:7d:
                    d6:c3:46:a9:44:e8:35:8c:b5:d5:ac:fe:80:ed:bf:
                    59:e6:0d:e6:28:57:9e:a7:c6:70:e8:07:67:39:c7:
                    b2:ba:f4:d8:9b:a5:9f:ac:f5:ac:f2:70:60:13:aa:
                    9b:70:e0:a6:a7:3c:a5:f4:72:80:03:ec:52:79:5b:
                    9d:e4:c7:d6:34:a7:23:77:ef:cc:21:6c:e9:38:56:
                    f2:4f:d2:65:1a:dc:03:a0:a7:e7:60:84:fa:99:54:
                    6c:7f:e8:11:cd:bf:f3:41:3b:28:77:63:86:84:cf:
                    e4:27:c2:4e:31:e1:5b:ab:c4:ad:e3:f2:dc:17:17:
                    6b:6d:57:8c:12:42:6b:31:81:e6:6e:7c:ec:69:d5:
                    08:14:a3:1e:68:3e:cd:6f:d2:9d:d8:3d:56:69:52:
                    56:e4:02:d9:40:56:ec:c8:9f:3b:d8:43:0c:b1:31:
                    7e:05:c2:a7:ae:59:04:31:db:09:ab:20:65:95:90:
                    70:7c:ab:83:21:ae:02:10:da:e8:81:19:b5:b3:51:
                    c4:f1:e7:85:3e:40:5b:b4:ec:44:0f:f2:f3:65:1c:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D4:36:54:23:82:B7:10:E5:59:60:61:D1:3B:31:D8:D4:18:0D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f114d04-03d9-3d52-87ef-a0f66a996870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:63:b7:9e:bc:dd:be:6b:36:86:2b:b9:38:18:15:53:0d:
         83:e2:44:be:1e:66:80:fb:4f:cc:35:c3:b2:1e:c1:a3:1c:6b:
         e3:44:68:33:ba:09:54:99:86:bd:b9:2a:84:0e:0a:8e:e2:ba:
         73:fc:d4:ed:db:13:59:e4:99:27:f6:78:03:0b:0f:df:1f:fd:
         4c:9e:ba:d2:37:78:98:0b:0b:c4:7f:5e:d5:89:aa:7e:1e:ed:
         0a:71:14:11:25:f3:b0:37:94:ca:d5:d9:0e:0a:3a:08:f8:33:
         98:9a:52:b9:c8:59:6b:cf:d3:a9:c0:90:c8:e8:57:48:df:b5:
         14:cd:9c:6d:4a:71:4c:12:2f:f9:a4:bd:cb:e3:56:e7:75:96:
         a9:f4:35:88:a9:c7:64:4c:2d:ba:a9:99:4a:70:45:78:2f:30:
         74:83:69:94:be:b7:64:41:0c:a4:bf:e2:f9:eb:b5:7f:f0:85:
         61:5b:d1:56:02:f8:98:b1:39:a7:1c:2a:32:42:fb:09:7a:ec:
         f7:d6:d6:14:5b:da:d5:52:68:20:17:fe:79:9c:18:c2:d6:46:
         27:ed:4b:cd:6a:06:76:13:79:1c:a2:de:df:35:36:13:86:18:
         ee:da:67:c8:31:08:84:fc:24:77:a4:68:cf:c4:87:b5:2f:e4:
         18:c3:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:03:30 2026 by rpki-client