Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa
File:                     76e99ac0-0bff-3cb1-9cdb-733596791286.roa (raw, json)
Hash identifier:          g+gp5FPRXkySlRnaGldyWISJyJpcCuC+f2oBlU+6CGg=
Subject key identifier:   0A:EB:BC:EC:D4:F3:88:B6:C7:DD:BB:4E:8D:16:89:DB:8F:C3:01:1C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC0A73F8633112DD0962429C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     397206
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:3f:86:33:11:2d:d0:96:24:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=9cb9d0d9-074f-4c4c-a006-1d0a38f26722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:ec:ff:5a:e6:69:51:e4:e0:58:10:3c:e3:
                    b0:c9:44:21:b9:c6:bc:84:99:30:d0:cc:27:a6:51:
                    56:ad:ff:71:d7:b1:cc:c2:96:91:51:de:e6:9c:41:
                    77:11:01:89:a8:89:8c:ca:c1:dc:ef:91:b8:b9:e6:
                    c2:bd:eb:af:1a:be:1d:a3:ba:cc:d0:74:50:f2:f1:
                    2a:fc:24:7f:eb:dd:1f:da:03:25:29:91:2d:da:62:
                    aa:20:24:5c:2c:a3:26:1f:89:83:f6:e7:05:09:13:
                    de:c5:af:2c:45:2c:42:a1:8d:50:58:bd:00:b0:17:
                    08:3e:4f:39:0a:d9:e4:92:b8:1b:ff:14:92:3e:7b:
                    c6:34:60:b1:41:dd:22:cf:41:c7:ce:ab:c0:8d:70:
                    98:d6:06:d4:16:ca:d3:63:f0:6d:e1:c6:02:ca:55:
                    35:b6:55:31:90:3e:6d:5d:3b:f6:65:bd:31:8f:79:
                    19:58:9e:05:ae:ef:3d:6e:8a:e5:db:dd:59:48:94:
                    81:6f:5b:a3:d8:22:b7:ba:f3:5a:f5:22:73:27:c2:
                    59:37:42:1f:85:fd:e2:fa:ab:eb:62:23:5a:e2:2d:
                    94:14:25:77:e9:92:bc:c0:96:98:6d:88:de:43:8f:
                    9c:96:e9:82:65:22:42:b2:b9:61:c9:bb:10:93:24:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EB:BC:EC:D4:F3:88:B6:C7:DD:BB:4E:8D:16:89:DB:8F:C3:01:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:52:06:25:57:7d:78:af:98:9c:32:f0:f7:2d:54:ad:bd:75:
         82:94:fe:41:82:ab:a9:7d:8d:50:83:96:04:d5:00:8c:0b:24:
         da:18:fc:c6:53:79:97:5a:8a:5a:cf:7b:85:57:7d:2e:55:4d:
         e3:e4:23:ac:b6:fb:6c:59:b4:de:7b:75:bc:d1:9f:ec:bb:42:
         2a:27:12:11:8a:e2:2b:b4:ed:94:81:bd:d9:e8:8f:4e:aa:ed:
         c3:62:15:ed:6e:78:48:de:ec:b7:d6:52:88:17:9b:e2:a7:3a:
         77:14:b2:17:fb:9e:97:5a:61:c1:e1:90:01:fd:64:18:b9:31:
         39:22:ff:05:62:7c:b6:53:f8:39:da:42:43:aa:3c:c8:8d:bb:
         be:b2:37:16:7a:95:56:fb:0b:81:1c:d7:03:c9:1f:4e:fa:ba:
         04:5c:9e:df:cf:35:47:5a:f1:a4:ed:67:b5:d4:2c:29:d2:d5:
         73:3a:ae:38:62:63:f3:27:9c:63:8f:3e:09:aa:1f:14:ff:b7:
         60:d3:67:75:55:85:c4:18:23:c4:94:ce:a0:9c:8c:e5:30:61:
         3a:cc:1d:1b:e2:f6:8a:d2:b4:67:ab:f6:fb:fb:8f:2b:ab:62:
         ab:65:16:fb:fa:43:4f:79:05:cf:5b:ab:30:55:60:6e:aa:e1:
         a2:f9:df:bb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7Apz+GMxEt0JYkKcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
OWNiOWQwZDktMDc0Zi00YzRjLWEwMDYtMWQwYTM4ZjI2NzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiDs/1rmaVHk4FgQPOOwyUQhuca8hJkw0Mwn
plFWrf9x17HMwpaRUd7mnEF3EQGJqImMysHc75G4uebCveuvGr4do7rM0HRQ8vEq
/CR/690f2gMlKZEt2mKqICRcLKMmH4mD9ucFCRPexa8sRSxCoY1QWL0AsBcIPk85
Ctnkkrgb/xSSPnvGNGCxQd0iz0HHzqvAjXCY1gbUFsrTY/Bt4cYCylU1tlUxkD5t
XTv2Zb0xj3kZWJ4Fru89borl291ZSJSBb1uj2CK3uvNa9SJzJ8JZN0Ifhf3i+qvr
YiNa4i2UFCV36ZK8wJaYbYjeQ4+clumCZSJCsrlhybsQkyQEtQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFArrvOzU84i2x927To0WiduPwwEcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzZlOTlhYzAtMGJmZi0z
Y2IxLTljZGItNzMzNTk2NzkxMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAlUgYlV314r5icMvD3LVStvXWClP5BgqupfY1Qg5YE1QCMCyTaGPzG
U3mXWopaz3uFV30uVU3j5COstvtsWbTee3W80Z/su0IqJxIRiuIrtO2Ugb3Z6I9O
qu3DYhXtbnhI3uy31lKIF5vipzp3FLIX+56XWmHB4ZAB/WQYuTE5Iv8FYny2U/g5
2kJDqjzIjbu+sjcWepVW+wuBHNcDyR9O+roEXJ7fzzVHWvGk7We11Cwp0tVzOq44
YmPzJ5xjjz4Jqh8U/7dg02d1VYXEGCPElM6gnIzlMGE6zB0b4vaK0rRnq/b7+48r
q2KrZRb7+kNPeQXPW6swVWBuquGi+d+7
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:42 2026 by rpki-client