Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a2c38b1e-4e48-30a4-846c-49567c6ad2fd.roa
File:                     a2c38b1e-4e48-30a4-846c-49567c6ad2fd.roa (raw, json)
Hash identifier:          dqS/Yu/P93757LasTlEC7kzSuhHnsqajtJFfY3zSJ3M=
Subject key identifier:   57:C6:89:1C:5A:16:EB:6D:52:80:D7:F2:80:81:0A:0B:1B:1E:1B:3F
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F43285849E79FA1FF3CD01CEDBD4D9550
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a2c38b1e-4e48-30a4-846c-49567c6ad2fd.roa
Signing time:             Mon 19 May 2025 12:07:12 +0000
ROA not before:           Mon 19 May 2025 12:07:12 +0000
ROA not after:            Sun 17 Aug 2025 12:07:12 +0000
asID:                     49
IP address blocks:        129.6.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:9f:a1:ff:3c:d0:1c:ed:bd:4d:95:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: May 19 12:07:12 2025 GMT
            Not After : Aug 17 12:07:12 2025 GMT
        Subject: CN=3233ac62-07c1-4518-9cf8-8754a65d8593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:af:4f:5f:26:3f:bf:e9:ca:bd:62:ff:b0:
                    9d:ec:e5:72:ff:4a:0b:35:e3:91:9f:09:59:4c:8b:
                    59:6b:42:74:61:02:48:b1:b0:23:89:8a:91:86:4f:
                    b8:d0:b6:b7:2e:ee:ed:ed:89:aa:ab:a7:8c:ba:f1:
                    9b:84:fc:99:cd:5a:00:41:4b:78:6c:8e:4c:99:68:
                    25:32:8e:f3:ab:8b:6f:0c:0a:c4:4f:21:0a:45:cc:
                    2c:86:6c:30:30:69:28:1e:7b:9c:01:90:67:93:a7:
                    2d:4d:86:ed:b6:d6:a2:6b:85:1b:aa:7d:8b:fc:6c:
                    7c:a9:b1:36:b2:a9:a4:18:ba:00:55:91:a7:1f:d8:
                    82:3a:5b:92:42:f6:ba:e8:47:04:6d:bb:73:e2:d0:
                    21:46:70:e6:a5:60:81:77:2c:2a:30:2c:4a:05:c3:
                    af:bc:72:53:d9:e7:03:d4:cd:16:41:4a:34:fe:97:
                    90:16:6f:24:86:df:07:49:06:67:c1:8f:b2:82:a6:
                    f6:87:de:1d:29:a6:76:bb:a5:81:de:1d:07:2b:58:
                    e2:bd:ac:b5:26:72:c2:05:7e:55:c8:c1:b5:47:e7:
                    1d:41:69:50:5e:cd:8c:ed:0e:64:f8:fb:59:ad:01:
                    bc:8a:af:40:41:fe:a4:4f:52:12:7b:8a:62:72:8f:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C6:89:1C:5A:16:EB:6D:52:80:D7:F2:80:81:0A:0B:1B:1E:1B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a2c38b1e-4e48-30a4-846c-49567c6ad2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3f:db:1f:c8:f7:23:02:17:0f:7f:6c:aa:45:0a:fd:54:84:
         fb:1a:40:9a:62:a8:41:0f:af:1a:b3:53:62:0c:83:ce:38:07:
         81:f3:cd:53:15:e0:d4:74:ce:e1:db:59:61:73:d3:64:98:fe:
         65:9d:52:a8:c4:28:36:f4:cb:2f:84:34:ab:f1:e8:5d:a6:81:
         44:34:e5:65:f6:09:bc:7c:ba:75:22:a5:1a:31:93:8b:6e:c9:
         e9:a3:69:1a:68:6a:6f:d0:a6:aa:af:75:ff:bb:f3:7c:b4:42:
         b6:3d:7e:ce:0e:34:1d:ad:3d:c2:59:18:ad:83:b7:da:dd:dc:
         91:2c:ac:5d:5c:ee:84:1a:1f:35:cd:b4:09:3d:39:28:67:19:
         9b:c8:e3:d0:a7:98:e2:be:38:cd:6f:fa:ab:53:ad:c9:41:5d:
         f4:9e:21:e5:97:70:f7:5b:cb:ed:ea:7f:25:4a:99:43:d3:53:
         37:21:96:6d:a2:ea:d0:f5:66:6b:28:d5:d0:da:0b:09:59:3f:
         ad:ec:e1:97:25:e4:a2:0e:97:ac:56:2c:56:32:fd:5d:c1:52:
         7c:a4:9c:38:b6:45:06:5b:f1:5a:6f:a4:9e:83:2f:4f:1d:1b:
         f5:fa:82:d0:1b:c3:d0:77:66:21:a2:9c:31:f4:41:3a:1f:90:
         0e:62:67:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnn6H/PNAc7b1NlVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx
YzcyMB4XDTI1MDUxOTEyMDcxMloXDTI1MDgxNzEyMDcxMlowLzEtMCsGA1UEAxMk
MzIzM2FjNjItMDdjMS00NTE4LTljZjgtODc1NGE2NWQ4NTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHavT18mP7/pyr1i/7Cd7OVy/0oLNeORnwlZ
TItZa0J0YQJIsbAjiYqRhk+40La3Lu7t7Ymqq6eMuvGbhPyZzVoAQUt4bI5MmWgl
Mo7zq4tvDArETyEKRcwshmwwMGkoHnucAZBnk6ctTYbtttaia4Ubqn2L/Gx8qbE2
sqmkGLoAVZGnH9iCOluSQva66EcEbbtz4tAhRnDmpWCBdywqMCxKBcOvvHJT2ecD
1M0WQUo0/peQFm8kht8HSQZnwY+ygqb2h94dKaZ2u6WB3h0HK1jivay1JnLCBX5V
yMG1R+cdQWlQXs2M7Q5k+PtZrQG8iq9AQf6kT1ISe4pico9DjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfGiRxaFuttUoDX8oCBCgsbHhs/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2
YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYTJjMzhiMWUtNGU0OC0z
MGE0LTg0NmMtNDk1NjdjNmFkMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy
NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1
MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh
M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgQZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABg/2x/I9yMCFw9/bKpFCv1UhPsaQJpiqEEPrxqzU2IMg844B4HzzVMV
4NR0zuHbWWFz02SY/mWdUqjEKDb0yy+ENKvx6F2mgUQ05WX2Cbx8unUipRoxk4tu
yemjaRpoam/Qpqqvdf+783y0QrY9fs4ONB2tPcJZGK2Dt9rd3JEsrF1c7oQaHzXN
tAk9OShnGZvI49CnmOK+OM1v+qtTrclBXfSeIeWXcPdby+3qfyVKmUPTUzchlm2i
6tD1Zmso1dDaCwlZP63s4Zcl5KIOl6xWLFYy/V3BUnyknDi2RQZb8VpvpJ6DL08d
G/X6gtAbw9B3ZiGinDH0QTofkA5iZyM=
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:23:24 2025 by rpki-client