Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2af24184-1aa9-3692-a71e-22b6a7e6af2b.roa
File:                     2af24184-1aa9-3692-a71e-22b6a7e6af2b.roa (raw, json)
Hash identifier:          9ut4n6H5nre8UDmK0C6cxL94ZVN2gEKy1UV6WJkl2AA=
Subject key identifier:   D8:7E:5B:D1:91:95:4C:8B:A2:39:B9:E4:7F:A2:62:69:FE:BF:19:87
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584E4824869B83204FD302B44100
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2af24184-1aa9-3692-a71e-22b6a7e6af2b.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     49
IP address blocks:        129.6.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:86:9b:83:20:4f:d3:02:b4:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=2dedfe54-b4b6-48e6-9c08-1ae36ecce92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:d8:63:05:58:d0:75:01:29:13:e1:88:43:
                    f3:04:3b:db:cf:ae:fd:84:9c:22:4f:91:c2:b5:47:
                    8e:bf:3f:8b:ab:36:cd:49:76:9d:0e:46:9b:69:57:
                    4f:83:1d:2a:b8:27:99:af:6e:88:22:b9:0c:54:c0:
                    8a:0e:e4:7b:0b:19:b9:6d:23:80:94:b2:e1:2d:4c:
                    33:80:9e:33:bf:bc:ee:9f:7d:f7:3e:b9:2b:f9:6b:
                    03:4d:1f:f6:2c:ec:72:52:c6:0e:79:26:0e:0c:4d:
                    92:ec:38:55:c3:07:7d:6b:a6:74:dc:70:fe:55:ec:
                    70:f4:10:f2:3f:da:4d:24:21:73:fd:6e:d6:8e:fb:
                    3a:71:a8:73:10:69:78:2f:44:01:da:8f:99:58:0c:
                    cf:71:d1:5c:6c:89:1c:17:6c:a6:5b:19:65:bc:15:
                    c2:b7:bc:ff:3f:96:54:27:77:69:1e:7b:e4:80:74:
                    dc:a6:f0:84:0a:6d:6e:38:27:c9:96:65:d7:c0:51:
                    cb:ab:40:20:8e:e3:85:c0:31:cc:74:ca:7b:31:55:
                    37:0a:b5:8e:df:cd:12:ee:6c:b0:4c:d7:41:32:6c:
                    12:55:2f:5a:b4:5e:7b:9c:f8:d7:4f:96:ad:a9:65:
                    f9:0d:a5:1b:da:83:f4:21:64:da:0e:40:d5:f6:f4:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7E:5B:D1:91:95:4C:8B:A2:39:B9:E4:7F:A2:62:69:FE:BF:19:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2af24184-1aa9-3692-a71e-22b6a7e6af2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:47:32:84:b8:d1:e4:fe:41:b8:04:4e:46:10:7d:fe:bc:95:
         c3:e8:3c:68:f4:90:91:de:8b:2d:10:6e:a4:3b:fa:fb:89:88:
         f9:1f:cc:0b:df:21:02:f6:9b:d6:24:d1:0b:6b:7b:d8:01:3e:
         f8:87:ec:8a:43:d9:e2:94:15:4b:97:54:39:25:81:5c:03:56:
         1e:59:a2:55:1f:ac:a2:1c:fb:23:3c:23:ac:81:c5:a6:9d:bd:
         45:a4:f6:87:93:03:3e:90:54:2f:e0:e2:a5:5d:10:aa:b4:4f:
         60:dc:af:c6:ba:99:6b:43:f2:b1:6b:64:d5:84:da:5b:63:1f:
         9f:27:5c:be:0b:2f:ad:e4:57:a9:c3:df:2a:24:82:ad:2f:6a:
         6e:24:24:fa:0d:f8:6b:21:53:69:8e:73:b6:af:c1:dd:0e:51:
         9d:25:81:5f:90:a2:cd:10:9b:0a:0a:24:9d:47:00:41:36:9e:
         1d:a8:ff:b5:8b:e0:73:ab:6c:18:33:55:27:71:de:76:ad:69:
         9c:68:e5:9f:78:61:6c:42:50:36:d3:09:b3:f7:c0:82:a4:b9:
         64:ff:df:a8:a0:6f:d1:5d:e4:97:45:94:2a:fc:f5:dc:98:0d:
         63:aa:f1:0a:04:37:73:02:e7:b8:a2:99:0c:61:95:69:ae:d5:
         7e:4b:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:19:29 2026 by rpki-client