Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b20fc41e-2cc8-3fe3-b3d4-b202c5793fbf.roa
File:                     b20fc41e-2cc8-3fe3-b3d4-b202c5793fbf.roa (raw, json)
Hash identifier:          4Cs/D9Sa1O+zNvk/XDEdfHvmOYfqCoTwL0QF9IuT/0U=
Subject key identifier:   6A:CC:FB:05:EF:29:C6:D9:0A:39:88:21:7D:37:40:7D:B3:38:84:EE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9E963A428AC1F1BA8CD5CC00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b20fc41e-2cc8-3fe3-b3d4-b202c5793fbf.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     20431
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:3a:42:8a:c1:f1:ba:8c:d5:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=48ecc035-0c06-4126-9b82-47e8b6791c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:52:7d:f9:dd:31:d2:79:55:e0:59:65:34:
                    1d:54:a6:06:28:5c:b0:d6:94:60:ab:bb:53:bf:ee:
                    cc:ef:f6:11:4c:7b:54:ad:3b:e3:35:0b:ea:fc:49:
                    da:42:72:ee:a1:d2:80:fd:9b:b8:a5:1c:84:a0:04:
                    51:b4:03:bf:db:4c:66:b0:4f:aa:43:62:af:4c:c8:
                    c3:1e:c2:02:05:d4:b7:5f:10:09:e1:db:98:04:a2:
                    10:76:8b:55:ff:9a:38:29:a6:82:bb:b2:9a:f4:af:
                    dd:71:1e:9a:28:65:7d:18:9c:8c:a0:e2:65:28:98:
                    3d:9b:85:3a:19:b3:76:e1:f1:2d:b9:23:f4:4a:e3:
                    8c:d1:cc:b5:de:67:5f:17:0a:54:30:6b:91:49:9f:
                    9e:1c:0a:65:3e:8e:82:86:1d:7d:18:e5:74:2d:65:
                    d9:82:7d:52:cd:70:ee:f4:2b:38:fe:fc:3f:c4:68:
                    ce:3b:9f:3a:6a:05:68:76:d2:b3:03:42:36:07:e0:
                    e1:90:fe:b3:24:45:69:73:c6:25:16:19:1e:9e:8a:
                    9b:63:3d:f9:6a:2b:82:2f:60:d0:39:64:7a:2f:14:
                    ce:a2:19:2f:7e:29:7b:1f:74:b8:e1:0a:2f:74:d8:
                    2a:37:64:0f:67:2b:b8:eb:8e:59:96:55:91:a5:b2:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CC:FB:05:EF:29:C6:D9:0A:39:88:21:7D:37:40:7D:B3:38:84:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b20fc41e-2cc8-3fe3-b3d4-b202c5793fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:7c:1f:4a:1f:82:7d:f1:09:5a:fe:67:e7:90:1c:c8:76:
         47:ae:f4:45:eb:38:7f:0c:2f:46:81:2a:7f:44:90:db:1c:90:
         0f:8e:26:61:2e:af:7d:8c:1b:cc:ff:e1:f2:d0:ef:0d:cf:e5:
         17:f5:8c:4c:68:c2:98:c9:37:c4:bd:9b:66:d7:cc:a6:6d:7c:
         bc:66:05:3e:4b:83:b6:e3:c7:5a:4c:0d:f2:11:06:35:0a:1b:
         60:e9:47:e2:3f:6e:d9:33:31:a6:14:29:c4:74:0c:b9:f0:d2:
         50:55:77:41:29:10:7a:86:b9:b6:f4:40:79:72:ac:9c:39:ff:
         6a:05:e6:08:dc:cf:e3:8f:b6:7b:c7:93:d1:06:d0:fd:f1:77:
         5f:13:4b:04:52:15:b3:c3:33:9d:46:98:96:2e:c5:c6:eb:00:
         19:50:e0:5f:86:33:0f:25:ca:fa:2d:bd:03:78:ae:36:33:60:
         a5:b0:0b:88:d2:2c:af:e3:91:0f:eb:1f:f5:b7:c1:14:fd:22:
         ed:38:d0:22:a8:ee:66:63:75:fd:26:d4:43:d8:ed:f2:23:e3:
         c6:72:a4:b6:23:16:a5:dd:62:ec:cd:07:ed:74:72:ce:c8:ce:
         ef:7d:72:f3:bb:f6:fc:41:3a:c7:e6:c3:54:47:18:38:10:ce:
         fa:07:02:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:36 2025 by rpki-client