Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa
File:                     9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa (raw, json)
Hash identifier:          LIGN0zapwCW1bnSuIpXakcbrfGph/iBdJfwWFu4GMxA=
Subject key identifier:   CE:BD:38:BC:B2:44:35:FA:CD:69:C2:C7:E7:2A:2D:AD:D4:15:11:AD
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584AC7112098E34777492614AA40
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     49
IP address blocks:        129.6.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:20:98:e3:47:77:49:26:14:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=362e4bea-454c-4a51-a4e6-cf979e34e5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:c4:b3:e7:40:03:a6:f0:31:2a:b0:e3:43:
                    91:a4:bb:08:26:60:c8:0c:58:11:2e:55:96:f7:d0:
                    3e:be:f8:5f:d9:6b:5b:70:b7:f9:0a:38:96:80:46:
                    a9:53:ba:90:ef:ef:41:86:8d:c3:f9:36:f3:db:7e:
                    9f:07:2c:ca:fc:10:66:92:a3:7b:f6:e0:7e:38:76:
                    02:16:1e:92:e6:30:2a:d6:43:06:4f:41:e5:ce:dd:
                    fd:39:77:e8:cc:e8:71:79:f3:1d:63:fc:2d:f5:be:
                    b4:33:d8:d2:40:b0:59:2f:af:ac:0b:dd:40:3d:46:
                    e9:25:7b:af:c0:0f:92:75:ab:fe:13:fb:e9:fe:fa:
                    38:3b:5e:fa:d9:ff:9b:10:bb:da:32:74:66:46:3c:
                    57:de:5a:d6:99:8d:bf:af:f0:cd:f2:21:34:40:0c:
                    37:1c:1f:c7:98:7e:a5:f9:de:33:75:f6:58:f1:f3:
                    87:e3:db:55:0d:3c:79:0f:1e:6f:f6:0f:0a:0a:11:
                    7f:a8:d7:3d:c3:1c:e5:cd:fb:77:88:e5:04:e3:ec:
                    fd:31:7b:b4:a3:ae:29:4a:8b:0f:77:6b:d9:39:11:
                    07:6c:25:3b:2e:12:48:9f:f9:0c:79:f2:c4:62:f3:
                    44:cc:72:6d:4e:46:26:89:67:dd:64:52:63:06:1e:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BD:38:BC:B2:44:35:FA:CD:69:C2:C7:E7:2A:2D:AD:D4:15:11:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:22:86:87:9a:2e:6e:ef:e4:dd:12:2f:99:18:d8:f3:90:05:
         71:d8:5f:0e:b1:34:06:93:82:97:f7:a2:37:cc:10:9f:05:c0:
         0d:30:c0:22:b8:bf:0f:92:f9:cc:eb:2e:7b:cb:79:ce:c0:f9:
         c6:ed:b8:8a:7b:97:0d:11:7f:6d:7b:02:29:b1:8d:bb:71:f1:
         5d:45:4e:63:54:0a:11:42:00:f8:69:3a:b9:c1:d2:c8:19:8c:
         d4:50:cc:1f:9f:71:56:1b:48:fb:6f:30:f7:8c:1b:a2:a8:90:
         6c:91:84:3a:29:9b:92:7d:98:a4:59:d0:c7:10:b6:1d:fd:10:
         13:1e:3b:e7:43:bc:ba:84:97:7e:26:e5:23:19:66:99:e5:23:
         cf:26:8d:e5:14:25:8c:b2:2c:de:de:36:12:d2:ac:89:0e:31:
         bd:60:a5:ec:af:60:a4:83:d7:57:2a:bb:86:90:ab:87:13:40:
         13:c2:ae:04:a9:8c:dd:f8:f5:14:27:79:61:56:f9:0e:2c:15:
         ef:a8:97:ba:91:4b:85:bc:73:27:20:50:3e:4a:86:0f:36:29:
         91:a8:e0:b5:5a:ab:ef:7e:34:c6:89:0e:a4:6c:45:1e:33:88:
         6f:d7:f5:38:06:8c:0a:1a:22:87:58:52:dc:45:44:e1:f1:0c:
         07:81:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:06:21 2025 by rpki-client