Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa
File:                     9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa (raw, json)
Hash identifier:          9BeYaGsB/NwYRrMcB7Zy2nPFBOMB2LR3eQ4BpJBkq9c=
Subject key identifier:   F8:DA:CC:5A:48:41:15:DF:97:8B:A0:F9:DE:7F:0B:FF:3D:0D:97:39
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F43285849E79D775CAA5C5187CDA8BF70
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa
Signing time:             Mon 19 May 2025 12:02:50 +0000
ROA not before:           Mon 19 May 2025 12:02:50 +0000
ROA not after:            Sun 17 Aug 2025 12:02:50 +0000
asID:                     49
IP address blocks:        129.6.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:9d:77:5c:aa:5c:51:87:cd:a8:bf:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: May 19 12:02:50 2025 GMT
            Not After : Aug 17 12:02:50 2025 GMT
        Subject: CN=63a8692e-8135-4124-991c-3aa8f35709a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:41:25:2b:93:d7:65:e6:f4:3a:96:3a:f3:
                    72:8e:ad:04:38:7a:6c:e4:32:53:91:15:d8:ac:d1:
                    f7:14:b4:00:c1:22:b5:fe:4d:e3:7c:7f:e4:29:f0:
                    e6:bc:38:2c:a8:70:00:5b:4b:32:3b:63:27:5d:2d:
                    68:3a:f2:e3:be:e4:a1:fa:1f:b7:3d:65:e9:e9:f4:
                    b0:44:51:8b:df:fa:7b:41:e8:7b:eb:46:e4:b6:ee:
                    66:6f:6d:d3:a6:d4:53:d1:8f:5f:0d:a0:7a:bb:09:
                    2c:6b:0f:6e:0c:06:ea:05:ed:0d:4f:52:b5:b3:0e:
                    a4:41:a1:9d:e8:ba:c2:1e:6f:e9:51:bb:ef:99:68:
                    c6:54:1a:f8:f4:3a:63:b2:bf:73:59:28:41:af:dd:
                    07:ca:76:da:c4:8b:5f:ac:44:1c:e4:c3:22:99:45:
                    f0:6a:21:b9:b4:4f:c9:43:1e:d9:d6:c9:af:54:29:
                    96:4e:79:41:b0:0b:29:24:1a:9e:74:76:54:2e:d8:
                    11:5e:e0:d8:72:46:8e:09:7a:80:90:31:49:4b:d6:
                    df:e4:ba:70:71:af:e8:f1:d1:eb:ee:8a:26:d4:f4:
                    c5:c1:0e:ec:5d:d7:c5:20:eb:ee:19:fd:36:15:4b:
                    bf:91:c5:ad:f7:3f:08:e7:1c:06:eb:53:06:78:88:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DA:CC:5A:48:41:15:DF:97:8B:A0:F9:DE:7F:0B:FF:3D:0D:97:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:aa:a8:8f:bd:e7:45:1e:fa:6c:00:35:08:f9:e0:5f:46:
         1f:f4:83:c2:54:b7:c5:b3:3d:9a:7c:cd:18:3d:c7:97:4b:5f:
         cd:8a:9c:54:63:b6:43:89:f6:b9:61:9f:75:99:37:72:18:b9:
         cf:50:0d:c9:57:0d:54:8e:ec:d6:fa:37:72:a8:12:1b:9f:35:
         7e:0c:93:41:54:f4:a6:23:2f:6f:e3:30:d4:4a:6d:89:b8:ff:
         43:4c:ba:11:02:a9:49:73:df:8c:4f:20:d6:c4:fb:67:34:8c:
         4c:b1:1d:60:95:7e:29:f8:3e:23:e1:ba:08:57:3a:8a:72:e3:
         58:e2:1f:42:ae:96:27:6c:8f:05:a1:85:69:0e:7a:a6:f8:dc:
         51:d7:93:44:28:1b:0d:8b:93:42:01:ef:42:bd:30:56:83:01:
         83:54:d4:7c:42:a4:47:60:92:64:2b:25:16:66:6d:2c:c1:95:
         fa:f1:2c:42:21:66:d0:57:96:db:c4:32:72:4a:56:e2:1b:67:
         8d:0c:b9:8c:bd:e2:de:4f:24:fe:47:d6:1e:93:a4:b8:97:01:
         b4:63:ab:63:8c:d3:75:8d:cb:37:d0:79:57:90:1a:ec:6c:23:
         c7:e5:52:1f:25:41:30:bf:0c:5f:9e:18:7a:3a:b2:21:ef:d2:
         ec:10:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:27:46 2025 by rpki-client