Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa
File:                     2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa (raw, json)
Hash identifier:          qldBtDcwjXNSL/8JHdsajHNhHujetE0D0HGZ9bZ6Yqg=
Subject key identifier:   15:BC:45:76:9B:BD:F3:F3:3D:31:C3:E3:70:9B:BB:84:09:01:D8:EA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7888E3793A981FCA32BD000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396560
IP address blocks:        209.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:8e:37:93:a9:81:fc:a3:2b:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3737d879-bbde-481b-b4c6-082a5b768800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:83:bc:ca:6b:62:50:1c:d5:0d:ae:6e:aa:
                    1b:18:ce:cc:e3:6e:2a:9b:86:06:b5:51:b7:b8:e8:
                    e8:91:35:4d:3f:5c:05:8d:50:4e:1c:3b:1e:ec:88:
                    cc:e5:72:5a:0c:2c:60:6f:9d:c4:9a:0d:96:16:ed:
                    3f:69:5b:07:35:32:76:f4:74:90:46:4a:50:c0:f7:
                    29:4c:f4:a7:29:7a:cf:b3:0a:9a:2b:e0:16:47:66:
                    b3:87:8b:96:04:7b:31:48:bb:91:f4:11:8d:b3:b9:
                    44:66:86:a8:f7:a4:ed:a8:cd:f4:5a:bb:d6:f6:0b:
                    11:fb:e7:fa:23:2f:87:36:2e:d8:7c:f8:ee:d0:29:
                    8e:61:d3:3a:14:66:5f:1f:dd:ba:87:e8:c7:04:db:
                    3c:fd:0a:37:a6:2e:7e:ef:57:cd:74:f7:38:f7:6b:
                    a0:c1:22:51:06:48:73:8f:6d:47:64:4d:ca:90:5c:
                    b2:c2:30:10:96:b1:e5:ef:60:bf:56:80:1c:59:22:
                    6b:fe:94:e6:fb:36:71:0b:4a:25:c3:92:14:7b:82:
                    d8:8d:c7:e6:17:d5:5c:ab:61:5d:cf:7c:7e:6c:08:
                    90:87:02:9e:d7:eb:b2:2d:a2:81:e3:b6:f7:bf:43:
                    a3:93:dd:71:e1:99:97:69:08:20:f1:27:76:8e:7a:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BC:45:76:9B:BD:F3:F3:3D:31:C3:E3:70:9B:BB:84:09:01:D8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:66:5e:9a:a3:1c:ef:99:ec:83:3b:14:29:3b:49:c4:be:07:
         d5:8a:5a:be:00:16:9a:35:0c:91:f6:b4:a0:0c:c2:8a:fb:5c:
         4b:57:28:45:c3:34:47:bd:53:01:37:ca:8f:ff:b0:c6:e2:3d:
         fa:a4:33:72:e7:2d:f1:62:96:59:73:51:d7:72:f2:98:f7:3b:
         bf:a2:e6:e9:1d:2a:d1:95:4f:84:95:9a:c7:35:cb:46:7a:84:
         29:fd:3f:b3:6e:d3:6b:39:28:0f:cc:72:bf:f4:d9:79:9b:ff:
         4c:93:b0:11:02:73:c8:ea:4b:16:e3:48:f2:51:62:24:4d:94:
         2f:3b:ec:b6:bc:ab:c8:e9:76:6b:55:26:af:86:e0:c5:fd:61:
         1f:a7:dc:9f:68:c9:8d:55:20:90:98:bc:01:e7:f2:c6:ee:09:
         c4:8b:e4:a7:0f:3e:d5:87:08:37:b2:39:c0:79:22:8d:bc:1a:
         ef:4e:dc:77:bb:25:03:cd:35:5c:d8:0f:8d:b8:59:29:a8:c4:
         70:86:24:28:c3:82:bd:33:bb:68:c3:5c:c6:39:09:da:a4:8c:
         3c:09:98:a3:54:64:4b:56:06:17:51:18:86:9c:70:29:12:b6:
         b3:ee:04:bf:da:ac:98:87:fd:99:6e:87:98:57:8b:c5:eb:93:
         96:9e:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:05 2026 by rpki-client