Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa
File:                     da6984b9-0ba3-34e3-801d-a634a21e2e94.roa (raw, json)
Hash identifier:          a8rNnNgRHUseRJQW0xx3LB8GQCnWQRsjsJWBXLgURLg=
Subject key identifier:   72:63:F1:ED:70:B5:FC:E9:B3:75:4C:E0:6D:C8:6A:2B:BE:6A:39:EC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F6292F06B37A14E4417747D80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396583
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:f0:6b:37:a1:4e:44:17:74:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=b32eb476-1a96-4adb-8800-8c5bf86e58b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:3c:51:f9:22:62:a4:45:fd:0e:5d:72:70:
                    0a:72:0e:07:cd:9e:d9:25:93:30:16:e7:2b:2e:d5:
                    8c:25:dd:07:e5:73:08:0b:1a:cb:ac:30:99:ad:c2:
                    7b:07:86:e7:06:77:45:5c:93:ca:aa:ed:e8:20:e7:
                    3e:ca:02:4d:f0:0f:82:f8:3e:d6:22:d0:f3:c4:49:
                    e7:6d:63:4f:ce:a4:67:e4:b1:75:f8:73:ea:a4:00:
                    d7:5c:4e:9d:ec:b5:3e:4d:84:09:ed:cb:92:c4:06:
                    27:56:28:62:ac:32:82:45:a0:37:88:bb:8a:ab:72:
                    88:37:f9:1e:a4:a8:ce:12:7f:e8:3f:30:88:70:a3:
                    30:33:0b:49:f8:34:99:74:88:94:c8:4a:a7:e5:91:
                    e5:c7:71:af:48:df:ff:42:a4:43:0c:9d:82:7f:91:
                    1d:6e:36:2c:37:2f:f1:e3:2f:27:a7:7e:5c:6c:8d:
                    7e:07:f0:f3:5a:c7:69:c9:44:01:24:f5:51:47:20:
                    93:94:9f:d9:b3:0e:0a:56:5a:5d:db:8d:a5:97:29:
                    c1:80:21:01:4b:61:a0:e0:10:c7:48:a7:07:4f:70:
                    03:f0:03:b1:f1:0b:c9:ad:d2:e7:c6:59:af:26:bb:
                    5b:15:bc:e8:7e:88:8e:10:2c:5c:fd:f0:ab:37:a7:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:F1:ED:70:B5:FC:E9:B3:75:4C:E0:6D:C8:6A:2B:BE:6A:39:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:43:91:2a:40:35:0e:c6:b0:da:dd:da:4e:bd:d3:16:e1:1e:
         5b:26:bc:02:e6:af:62:f9:3d:4f:94:30:3c:96:6e:72:eb:4d:
         58:6c:7f:9b:9a:e2:3a:ab:96:65:85:1a:9c:7e:6b:ea:36:77:
         22:d4:7b:38:7e:31:76:f0:43:06:de:4e:eb:a2:fc:24:b3:02:
         a3:b5:74:46:44:25:3a:79:8e:46:00:d2:42:be:68:9e:01:f6:
         24:7e:54:70:ad:cb:fe:0b:c7:70:36:e0:1c:bb:fa:25:55:11:
         ea:99:26:e4:99:cb:94:d2:47:12:36:54:33:e6:f5:f4:97:10:
         fa:2a:e0:47:5a:c9:db:86:45:8e:12:03:86:9e:4b:5c:6b:87:
         82:09:2a:72:33:84:84:db:d1:ed:85:cf:71:d4:72:cd:26:57:
         66:81:f9:2f:87:22:51:2b:72:82:2f:b4:dd:c0:e4:90:c0:90:
         8a:0e:66:eb:ab:b6:50:6c:de:a2:61:7f:ab:9e:91:55:a1:99:
         d0:38:3a:6e:a6:75:fb:8d:6d:65:ef:66:44:df:fa:63:ef:68:
         02:49:70:9e:81:64:41:37:da:19:4c:6a:4c:3c:1b:73:3d:11:
         38:b2:85:bd:17:cc:ee:0b:1f:a3:41:d9:83:a1:8c:8b:aa:58:
         91:3b:02:2c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvBrN6FORBd0fYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
YjMyZWI0NzYtMWE5Ni00YWRiLTg4MDAtOGM1YmY4NmU1OGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjck8UfkiYqRF/Q5dcnAKcg4HzZ7ZJZMwFucr
LtWMJd0H5XMICxrLrDCZrcJ7B4bnBndFXJPKqu3oIOc+ygJN8A+C+D7WItDzxEnn
bWNPzqRn5LF1+HPqpADXXE6d7LU+TYQJ7cuSxAYnVihirDKCRaA3iLuKq3KIN/ke
pKjOEn/oPzCIcKMwMwtJ+DSZdIiUyEqn5ZHlx3GvSN//QqRDDJ2Cf5EdbjYsNy/x
4y8np35cbI1+B/DzWsdpyUQBJPVRRyCTlJ/Zsw4KVlpd242llynBgCEBS2Gg4BDH
SKcHT3AD8AOx8QvJrdLnxlmvJrtbFbzofoiOECxc/fCrN6f4CwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHJj8e1wtfzps3VM4G3Iaiu+ajnsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE2OTg0YjktMGJhMy0z
NGUzLTgwMWQtYTYzNGEyMWUyZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBAQ5EqQDUOxrDa3dpOvdMW4R5bJrwC5q9i+T1PlDA8lm5y601YbH+b
muI6q5ZlhRqcfmvqNnci1Hs4fjF28EMG3k7rovwkswKjtXRGRCU6eY5GANJCvmie
AfYkflRwrcv+C8dwNuAcu/olVRHqmSbkmcuU0kcSNlQz5vX0lxD6KuBHWsnbhkWO
EgOGnktca4eCCSpyM4SE29Hthc9x1HLNJldmgfkvhyJRK3KCL7TdwOSQwJCKDmbr
q7ZQbN6iYX+rnpFVoZnQODpupnX7jW1l72ZE3/pj72gCSXCegWRBN9oZTGpMPBtz
PRE4soW9F8zuCx+jQdmDoYyLqliROwIs
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:20:49 2026 by rpki-client