Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa
File:                     c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa (raw, json)
Hash identifier:          kMHsCWSdVJnjVgF8ZTxoRv5x78jfxow0Wibtz+V0Zqc=
Subject key identifier:   4D:2D:77:8D:73:54:FE:9D:6D:85:2C:D4:C0:01:36:32:A5:BA:AA:5C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1E4474C301B78CD248278710
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     397204
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:74:c3:01:b7:8c:d2:48:27:87:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=66df6b96-b72c-4fb3-88cf-5358f5578909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:0e:51:7c:96:38:6f:a7:8c:7f:02:b7:77:
                    86:af:6c:15:d6:23:2a:f5:64:8d:64:e5:c5:b6:a3:
                    36:6d:e8:2b:1e:bb:b0:6c:c1:94:38:7d:cf:be:1b:
                    e5:ad:09:7f:37:0c:06:e0:cd:51:6d:18:ea:77:d2:
                    4f:11:ac:6d:be:63:07:4a:dd:b9:ac:8f:43:99:9b:
                    14:b1:08:3c:17:58:63:4e:fb:30:35:9d:e7:7d:39:
                    6a:b5:c8:90:80:8e:0f:ba:71:8b:54:bd:9d:97:ec:
                    92:29:a9:53:65:39:75:a1:45:2f:97:d5:4e:be:3b:
                    02:13:27:86:16:ac:7f:86:38:13:47:d4:7e:2f:e1:
                    cc:96:b3:38:8d:a8:06:8c:97:9e:6a:a0:17:f1:23:
                    c9:38:e8:71:3c:d4:d1:6a:ee:90:ef:cf:28:2e:e9:
                    a0:43:45:b4:f2:d2:98:f1:ec:2b:10:de:3e:b2:aa:
                    a2:d9:6c:6a:1d:c7:1c:3b:44:f1:de:fc:07:28:8f:
                    ad:81:f9:a0:01:5e:c1:26:f7:0b:d2:b8:bb:33:11:
                    f1:da:30:71:bc:45:c8:e9:ef:24:c6:42:96:e2:71:
                    75:b9:48:9c:e0:01:dc:f9:dc:19:77:a5:15:3a:f5:
                    9d:13:a0:b4:7f:4c:21:05:fc:f5:0b:e4:74:2a:77:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:77:8D:73:54:FE:9D:6D:85:2C:D4:C0:01:36:32:A5:BA:AA:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:22:11:fa:20:37:42:bf:c9:51:f4:b1:5a:7a:35:9d:c9:
         25:7d:c0:4a:7d:ea:23:b4:6e:47:e0:eb:78:f9:8a:13:82:00:
         11:62:24:a1:5b:2b:8a:08:8b:0f:d4:29:6f:af:69:0f:0d:d2:
         12:b0:f9:bd:57:52:37:d0:7f:5b:69:cb:20:84:5a:83:c3:1d:
         25:dc:59:34:c7:c4:e4:2e:88:ef:ad:4b:d2:a9:b0:cc:bc:53:
         f4:e0:4b:e7:89:96:c1:04:d8:c1:78:d3:d0:cc:ee:1c:f9:0c:
         5e:50:0d:f2:51:12:0c:7f:f6:f2:a1:5e:07:c8:f6:78:7b:7f:
         cc:c7:21:e0:12:91:7f:de:33:a6:33:04:57:bb:7c:ad:06:13:
         e8:13:19:53:bb:37:7c:5b:e9:d6:4a:0c:61:f7:96:d0:dc:26:
         ee:fb:2b:4c:d6:10:80:fc:ac:e5:1f:2b:b3:81:71:42:1c:82:
         e0:79:24:d5:24:20:1a:e0:e4:4e:73:72:5a:24:83:98:f8:37:
         8d:7b:be:19:c7:10:2f:3b:64:8e:20:4a:67:1b:42:ff:55:83:
         5a:18:76:45:1f:ad:67:f3:c5:c0:e6:db:c2:7c:b7:2d:a5:b4:
         4a:45:51:11:c4:8e:33:f2:55:46:de:d5:ff:8a:ad:dd:eb:02:
         08:c0:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:03 2026 by rpki-client