Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd4d2a85-8799-3b86-9f7f-08c8aa374851.roa
File:                     fd4d2a85-8799-3b86-9f7f-08c8aa374851.roa (raw, json)
Hash identifier:          I9vyAr2SC5rNuneWt9YtO7gFoEwzMzx+5MS5kJwlrNI=
Subject key identifier:   55:6D:1F:7F:57:21:6B:F2:23:15:40:08:8A:AB:22:99:18:74:27:5C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF878D842783E3AAFDDB92280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd4d2a85-8799-3b86-9f7f-08c8aa374851.roa
Signing time:             Tue 24 Feb 2026 15:18:36 +0000
ROA not before:           Tue 24 Feb 2026 15:18:36 +0000
ROA not after:            Mon 25 May 2026 14:18:36 +0000
asID:                     396586
IP address blocks:        209.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:78:d8:42:78:3e:3a:af:dd:b9:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 24 15:18:36 2026 GMT
            Not After : May 25 14:18:36 2026 GMT
        Subject: CN=ab19dcd2-dd2c-489f-a0c7-1d6684e286cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:17:05:3c:a3:e1:ac:6b:dc:f4:a0:2a:eb:32:
                    fa:79:e9:41:78:ef:81:c0:2d:db:a2:5a:45:8b:2d:
                    70:0a:16:31:9e:cf:f2:7a:12:63:b8:b8:88:75:df:
                    93:3c:bb:09:9b:7f:6b:61:de:e0:e0:1c:27:a0:51:
                    2f:0e:f8:63:42:b8:61:91:cd:3c:01:81:47:c5:cb:
                    25:c6:32:a6:cf:8d:f1:c8:56:2a:3b:c3:06:90:28:
                    75:0e:04:3c:89:e7:7d:7f:dc:70:ed:47:9a:d4:09:
                    fe:d0:fe:f1:06:20:37:e3:89:01:95:1d:9f:c3:8f:
                    e7:f8:2e:33:f4:d2:ce:06:39:b7:eb:e3:eb:bb:3d:
                    3c:38:5b:69:67:a9:ca:9a:9a:41:88:e0:b5:1c:9e:
                    44:84:93:b3:bc:3d:73:46:27:cc:c9:bc:49:bc:df:
                    37:81:59:7a:8a:12:25:3c:0b:9d:c2:3b:4c:2d:88:
                    4e:43:89:b5:0f:66:03:1b:1b:ed:80:ab:31:e4:7d:
                    f0:af:f9:f6:58:b7:e6:c8:1f:c1:9e:a8:ad:2a:a8:
                    2b:fb:58:42:93:d1:54:3d:63:cd:36:1a:09:9e:27:
                    8b:59:4d:95:3d:af:85:60:36:4e:8c:39:7a:8a:3d:
                    6d:b1:c0:db:b0:54:cd:37:0b:c3:1c:90:e9:19:93:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6D:1F:7F:57:21:6B:F2:23:15:40:08:8A:AB:22:99:18:74:27:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd4d2a85-8799-3b86-9f7f-08c8aa374851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:bc:ce:5c:6f:22:8b:2a:92:80:d7:fc:8f:24:bf:b9:13:
         b6:be:ef:26:b3:b1:c7:43:9f:27:5f:42:1e:81:58:67:eb:15:
         51:52:17:4b:1d:13:ab:ef:35:29:b1:ff:0d:7d:be:2e:06:ab:
         d6:56:2f:bd:7e:b3:bb:14:4d:0a:80:42:93:b5:89:57:c4:cf:
         8f:76:4b:a4:fb:63:57:20:7c:4d:a9:3d:e2:36:2c:ae:6a:70:
         d5:a9:65:c6:3f:8d:c7:5c:af:fc:da:9c:cc:61:b3:08:8c:d5:
         61:92:a2:3d:e4:bc:ab:3b:fb:7f:d4:0d:f4:22:6d:96:40:60:
         51:ed:c6:76:6b:66:18:90:c1:c0:03:2b:e6:05:15:90:98:de:
         37:0f:6b:27:f1:84:a9:37:aa:ba:1d:f4:b3:50:1e:12:19:a4:
         9d:47:b6:d5:3e:a7:62:27:b5:f2:db:c5:03:0e:7f:c0:64:b0:
         88:59:39:a8:6d:4b:04:e3:25:62:fe:11:85:77:d3:b1:a4:07:
         60:c8:0b:04:67:88:ab:e7:be:26:24:c1:69:a6:57:6a:45:34:
         3c:91:6a:ce:d5:44:26:65:e9:73:89:a8:be:b0:8f:e6:08:0d:
         75:2f:9d:06:76:f5:66:99:3a:f7:cb:63:30:2c:2f:c8:92:29:
         ba:c5:06:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNhCeD46r925IoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDIyNDE1MTgzNloXDTI2MDUyNTE0MTgzNlowLzEtMCsGA1UEAxMk
YWIxOWRjZDItZGQyYy00ODlmLWEwYzctMWQ2Njg0ZTI4NmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBcFPKPhrGvc9KAq6zL6eelBeO+BwC3bolpF
iy1wChYxns/yehJjuLiIdd+TPLsJm39rYd7g4BwnoFEvDvhjQrhhkc08AYFHxcsl
xjKmz43xyFYqO8MGkCh1DgQ8ied9f9xw7Uea1An+0P7xBiA344kBlR2fw4/n+C4z
9NLOBjm36+Pruz08OFtpZ6nKmppBiOC1HJ5EhJOzvD1zRifMybxJvN83gVl6ihIl
PAudwjtMLYhOQ4m1D2YDGxvtgKsx5H3wr/n2WLfmyB/BnqitKqgr+1hCk9FUPWPN
NhoJnieLWU2VPa+FYDZOjDl6ij1tscDbsFTNNwvDHJDpGZOh1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFVtH39XIWvyIxVACIqrIpkYdCdcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQ0ZDJhODUtODc5OS0z
Yjg2LTlmN2YtMDhjOGFhMzc0ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA44vM5cbyKLKpKA1/yPJL+5E7a+7yazscdDnydfQh6BWGfrFVFSF0sd
E6vvNSmx/w19vi4Gq9ZWL71+s7sUTQqAQpO1iVfEz492S6T7Y1cgfE2pPeI2LK5q
cNWpZcY/jcdcr/zanMxhswiM1WGSoj3kvKs7+3/UDfQibZZAYFHtxnZrZhiQwcAD
K+YFFZCY3jcPayfxhKk3qrod9LNQHhIZpJ1HttU+p2IntfLbxQMOf8BksIhZOaht
SwTjJWL+EYV307GkB2DICwRniKvnviYkwWmmV2pFNDyRas7VRCZl6XOJqL6wj+YI
DXUvnQZ29WaZOvfLYzAsL8iSKbrFBvw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:20 2026 by rpki-client