Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c1604b-b982-3749-9d82-9288bb0a83ea.roa
File:                     72c1604b-b982-3749-9d82-9288bb0a83ea.roa (raw, json)
Hash identifier:          4JnAuXuDYDLb82txgjWxeF3wwz0JWP19MgOAkhuhXQw=
Subject key identifier:   F3:A4:B8:AC:4C:30:72:DD:AD:01:7B:C3:67:65:9B:3B:F0:34:D5:82
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA78876DF71A352D629879400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c1604b-b982-3749-9d82-9288bb0a83ea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397195
IP address blocks:        209.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:76:df:71:a3:52:d6:29:87:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=854b60ab-955f-405d-831a-1b29e4da6a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:5f:73:d7:14:2e:b2:27:90:d0:2c:01:d5:
                    ba:0b:57:4d:17:10:07:fe:0c:85:73:42:8c:95:79:
                    14:06:26:e8:61:82:1c:14:28:47:62:84:b2:2f:a9:
                    70:4d:f3:4b:2f:15:e5:ce:4c:e9:16:3c:10:bc:45:
                    9b:7d:5b:eb:ea:68:89:20:2c:da:c3:31:6d:8c:39:
                    24:64:f2:aa:68:7f:bf:34:65:24:1c:27:df:2b:08:
                    8b:12:6b:42:d0:18:96:5c:fa:03:c0:b9:f8:46:80:
                    99:d8:79:c1:b9:70:74:92:9d:34:9d:f3:0f:fb:39:
                    74:ca:9b:21:3d:72:69:b3:b3:0a:7d:8b:4b:54:69:
                    c7:f3:7e:88:aa:8c:3f:e8:9b:2c:df:f4:cb:a0:b4:
                    be:97:22:7b:53:52:dc:d3:ca:b9:33:45:23:2c:84:
                    0f:ad:b9:50:70:d0:47:2e:cf:95:29:6b:78:7e:04:
                    f9:5d:95:fc:77:21:74:f7:52:03:9c:b1:5f:d7:4a:
                    76:05:d7:66:b8:5f:21:b9:5b:1b:3c:f6:2d:be:5b:
                    d1:c8:5b:47:2a:5b:88:92:0e:c3:12:61:03:58:56:
                    ec:a7:9d:b7:f0:81:d6:46:34:07:3d:12:49:58:c4:
                    36:11:c2:91:d9:a3:09:f3:a4:b3:cc:d7:5c:45:67:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:B8:AC:4C:30:72:DD:AD:01:7B:C3:67:65:9B:3B:F0:34:D5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c1604b-b982-3749-9d82-9288bb0a83ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:46:b8:5c:ab:21:1a:bf:b1:48:b5:21:bb:4a:c3:8c:73:
         05:55:07:8b:b2:94:2e:c7:31:39:c9:1a:47:e1:8d:23:eb:df:
         68:f4:97:de:22:f0:f2:58:a5:71:47:aa:ee:a8:58:77:c5:94:
         1a:15:ec:3e:d3:b3:25:4b:9a:d5:f8:e6:8e:fd:04:b7:c8:c2:
         33:52:68:b9:64:1d:85:66:40:ee:70:08:c8:c1:ad:c0:eb:0f:
         a7:0c:e3:6e:8e:23:31:94:30:17:68:d5:ee:fb:97:0e:05:eb:
         d4:2d:e8:c3:c7:4b:39:79:81:43:41:b8:fe:03:1c:62:0a:9f:
         6e:94:4f:d9:51:ea:f7:48:9a:92:f2:b1:61:f5:84:d3:61:90:
         83:ff:5f:89:d0:d5:f3:26:3f:3c:fe:43:64:99:58:63:54:f8:
         81:46:e9:5f:9c:5d:e4:31:3f:3e:6a:e7:ad:2a:32:76:4d:7f:
         be:ee:2d:05:e5:91:0c:c1:3f:11:a8:38:e2:d7:44:c2:4a:dc:
         ee:cb:00:ca:d5:f3:b6:5b:05:71:3b:c4:69:7b:71:6e:cd:a1:
         41:42:c6:6a:25:f6:ea:62:50:ad:20:9b:d3:99:25:dd:13:9c:
         a7:88:6c:ce:44:50:df:45:b5:8e:77:30:cd:62:26:bf:18:1d:
         d5:02:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:32 2026 by rpki-client