Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa
File:                     972b46d2-94d8-3c27-94bd-eee15e154e15.roa (raw, json)
Hash identifier:          QcEcPbAa+FOmHzIVRgy9qIryjnqRT5lNxXC5UXVQozY=
Subject key identifier:   92:1F:D2:2E:DF:A1:6D:7D:09:D4:B3:2F:B8:49:91:57:A0:62:97:71
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC0A73BCCAB1125442ABCB800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:3b:cc:ab:11:25:44:2a:bc:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=395b51c6-2f5b-4607-b3e8-3a6503f094b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:8d:ac:1e:9c:23:00:fe:31:a0:d2:b3:65:
                    8c:1f:16:2e:c0:15:d6:47:cb:4b:e0:16:a9:72:96:
                    6a:ee:5d:a4:75:7c:b6:d0:db:37:3d:ef:13:dd:c9:
                    6f:6d:e8:ab:9f:3a:61:dd:e6:cf:8b:3a:df:4f:0b:
                    d5:f8:e9:38:8a:d4:2a:5b:42:c8:90:26:7c:34:e8:
                    cf:3d:32:ef:d1:da:77:07:e1:51:c6:5b:a6:6b:7d:
                    25:23:66:57:2d:38:5b:22:d2:b2:0a:ee:0c:78:58:
                    b5:eb:53:00:86:c0:6c:9a:d6:e1:e3:78:b2:56:5b:
                    99:38:72:d3:64:06:03:ad:15:0b:95:50:13:0f:60:
                    73:f7:27:5a:0f:a1:99:1c:5c:bf:b7:a2:5a:01:76:
                    59:94:7d:8e:96:59:cd:92:13:75:5c:07:b7:17:d8:
                    50:86:1a:f3:93:d3:8c:1b:54:15:84:e8:5b:31:24:
                    bb:06:11:70:0a:78:02:bc:ee:5b:54:3b:e3:ff:6e:
                    95:65:a1:31:b2:2a:0d:8c:64:a0:7d:1d:43:30:83:
                    15:26:d4:fd:77:df:a2:dc:fb:93:de:99:cf:9f:4a:
                    4a:67:c0:a1:c3:c6:f1:1d:46:30:74:5b:21:bb:60:
                    35:30:5f:67:2a:50:80:43:f2:32:c5:11:c0:ba:8f:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:D2:2E:DF:A1:6D:7D:09:D4:B3:2F:B8:49:91:57:A0:62:97:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:47:b8:e7:ea:02:29:93:53:9b:e8:0c:37:b6:0a:c9:d5:
         d8:aa:98:b6:87:f9:e0:37:e0:d9:63:cc:31:73:1c:64:26:53:
         96:73:2a:85:a0:29:c8:cc:71:59:7d:00:52:e9:66:b2:14:91:
         ff:3c:a0:f4:91:07:bf:fd:37:3c:ba:3e:a4:c4:c8:8a:d6:f0:
         c3:10:f3:c5:f9:7f:64:6c:8a:86:45:cb:55:86:2b:79:1f:a5:
         70:ce:7b:e4:35:e1:f4:11:21:32:10:df:76:3f:cb:36:de:ad:
         82:e0:1f:8c:01:6b:13:cd:9d:71:de:a3:5d:62:5c:59:36:0d:
         24:7e:ed:48:2c:4a:02:04:44:05:09:38:2b:f8:2c:af:b4:4e:
         c2:fc:fc:42:f7:98:4a:16:d6:41:2e:72:82:1f:2a:9b:54:e6:
         47:7b:bf:98:c7:7b:9d:18:f5:b0:6f:f8:b9:a7:36:53:80:9c:
         51:6f:02:1e:30:42:ce:11:24:08:7e:b6:ad:6b:f0:0f:a6:25:
         69:4a:1c:f8:9b:29:15:91:5a:96:d5:b8:1d:3b:1a:e7:50:fe:
         63:2b:70:78:93:f8:13:8e:d6:72:aa:61:97:f1:9c:23:92:c6:
         e3:63:81:30:7c:8c:40:cb:c1:9d:39:a2:6e:09:5b:0d:5e:09:
         d9:10:44:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:34 2026 by rpki-client