Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa
File:                     625a1cb4-9275-3615-813b-2e4aec695d6f.roa (raw, json)
Hash identifier:          tHFM9ekqQ/AAdUAYsDcyf5XGYdCLjLVmD7oFVUsIHos=
Subject key identifier:   38:B3:44:D6:B9:40:D6:3D:44:E6:58:BB:91:30:5A:AA:D7:7E:ED:E8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9E963973755A44AF7B2A49C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     396580
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:39:73:75:5a:44:af:7b:2a:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=7610b2f6-8e31-4348-9684-71d80524a420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:61:65:59:e2:93:b6:96:fb:cf:a2:83:7c:
                    64:19:de:ef:5d:34:4d:40:75:ee:75:35:b9:16:56:
                    91:5e:ad:4c:cb:48:88:32:48:a2:16:b6:06:69:99:
                    cc:51:0a:b5:60:6b:46:03:29:3d:3b:3d:ce:fd:ce:
                    e1:91:2c:fd:5b:b2:05:f0:a2:a9:e1:10:1c:16:c8:
                    d7:87:56:41:16:63:00:ef:a7:36:cb:41:4d:05:8f:
                    cd:91:9b:c6:72:70:23:b5:eb:26:d6:5f:98:c7:87:
                    bf:8a:4c:62:d9:fa:ca:46:b0:ce:ad:90:d6:b2:00:
                    ec:27:76:55:f6:b0:5b:ea:c1:2b:4e:13:52:f5:f0:
                    8a:dc:08:86:26:06:a6:bc:64:43:7f:29:6e:98:1c:
                    91:16:ac:1b:e1:fe:ce:66:db:04:74:ae:cd:b0:5f:
                    b1:df:18:9e:ab:c7:90:64:73:42:f4:a5:40:65:6a:
                    1f:4c:08:33:22:76:31:98:e0:c5:d7:d1:c2:b6:f8:
                    44:5d:01:5c:cd:25:c5:08:e5:a0:df:bc:1a:36:6e:
                    ca:b0:29:a5:6b:c2:73:cd:fa:32:1c:bf:1d:2d:d0:
                    c7:aa:8c:85:93:4b:78:73:0e:8f:0f:a7:68:92:f6:
                    09:55:7e:d7:24:e3:11:a2:2c:fe:bf:f2:45:8e:2b:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B3:44:D6:B9:40:D6:3D:44:E6:58:BB:91:30:5A:AA:D7:7E:ED:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:9f:ea:3d:6b:98:d1:77:c5:d1:59:4f:d8:f5:1f:83:72:
         d3:e7:80:f6:ee:9a:d4:35:0a:18:64:c5:e2:09:79:37:83:11:
         ad:aa:b6:49:3b:9b:3a:9f:c4:50:44:6e:fd:01:3e:36:78:0b:
         df:06:8a:a4:7f:50:5f:45:7c:e3:ec:e7:2e:0a:cb:82:19:6e:
         be:70:34:dc:63:eb:0d:f1:78:9e:75:cb:01:8d:24:5a:6c:cd:
         f6:73:03:07:50:21:35:a7:c4:fc:7f:6d:3f:45:ab:62:79:81:
         e1:a3:39:d5:34:0b:f0:b4:86:b6:22:2f:7d:3c:79:c4:79:81:
         db:66:a5:3d:4c:5a:02:c7:49:60:81:0b:48:a1:1b:e5:e0:58:
         03:0e:a1:97:38:3b:22:84:71:00:fa:e3:de:c6:77:88:42:d6:
         0f:40:67:1b:82:52:95:c4:18:55:c0:78:de:06:4e:17:af:b6:
         4a:f9:7d:7b:0e:32:1c:9c:13:58:76:9e:f0:cd:ac:a0:22:66:
         71:e8:f9:c7:55:19:85:a2:ea:14:ff:56:5a:82:a8:25:7f:c7:
         8c:25:48:5b:ba:59:e8:c8:d9:21:2f:9c:de:87:40:bc:21:f9:
         04:63:87:f3:55:db:a2:d1:fc:5b:38:97:e2:31:ed:14:fd:42:
         46:e9:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:48 2025 by rpki-client