Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a2c38b1e-4e48-30a4-846c-49567c6ad2fd.roa
File:                     a2c38b1e-4e48-30a4-846c-49567c6ad2fd.roa (raw, json)
Hash identifier:          BM6FSYWRY/nZ2SunIzwJ5yuPOvRHsuRKA9cVXS5Au6M=
Subject key identifier:   EE:39:C4:2F:83:CD:24:27:06:AB:FB:D2:0B:8B:5E:90:5B:40:28:3F
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584AC71120EB453926B70BA8E66C
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a2c38b1e-4e48-30a4-846c-49567c6ad2fd.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     49
IP address blocks:        129.6.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:20:eb:45:39:26:b7:0b:a8:e6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=957f42e8-07b4-4e6b-b315-05dd4938a569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:ad:a0:d6:79:47:9e:fd:46:03:c7:9a:b7:
                    e6:60:c9:71:12:3a:e5:88:28:64:8d:fe:cc:83:ce:
                    49:46:23:dd:cc:55:0a:17:66:87:6f:7c:26:5b:91:
                    1f:d6:03:31:7b:15:96:d9:cb:86:50:d5:6f:c5:af:
                    bb:0a:86:5a:da:aa:ae:7c:9a:6f:0d:f9:2a:4a:e8:
                    a0:e1:fb:cb:a4:4a:33:20:56:93:b1:81:b1:e2:b8:
                    7c:8d:28:2c:0b:18:fd:19:82:ab:14:53:ff:8e:c2:
                    bc:1e:0b:f0:e5:7b:a7:71:0e:64:8b:b4:d6:d3:45:
                    c0:2c:7b:93:9f:34:89:9d:3a:e1:4a:ec:7e:60:6d:
                    34:52:53:07:9c:be:1b:1e:8f:d3:c5:bb:bb:ca:fc:
                    d4:ca:9b:56:03:00:91:ea:95:e4:6d:c0:7c:22:dc:
                    76:d9:ce:ff:7b:78:05:e6:ca:b6:c5:46:d3:b6:56:
                    f5:b4:4b:29:3d:8d:26:8a:b4:38:40:84:a3:be:cd:
                    65:62:8d:36:0c:41:bb:89:43:6e:b8:ac:17:74:d8:
                    15:de:e7:e7:97:3c:1e:c1:04:67:be:56:3b:05:fa:
                    bc:63:79:31:3a:ff:46:60:15:13:bc:f0:5b:b1:e0:
                    19:55:57:6e:2f:22:6f:68:80:24:a0:90:be:1e:cf:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:39:C4:2F:83:CD:24:27:06:AB:FB:D2:0B:8B:5E:90:5B:40:28:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a2c38b1e-4e48-30a4-846c-49567c6ad2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:33:f9:77:f4:74:01:97:92:c0:89:ce:87:10:97:20:04:4f:
         cb:b5:2d:0d:cf:dc:aa:6c:09:a9:ec:73:5e:db:d7:9f:73:3e:
         24:ba:ee:42:e1:bf:28:a5:f0:9f:50:24:5a:fa:9e:b9:d8:d9:
         b3:c4:16:60:ff:df:fe:e7:07:84:bc:6d:25:89:9b:aa:31:e3:
         0a:3e:b7:82:87:ab:ec:5e:e8:ed:ea:01:78:0f:db:1e:e6:52:
         84:6c:41:bf:0c:e0:c4:0e:1a:57:4f:02:64:81:9c:b2:06:28:
         b0:ad:6a:de:89:1c:27:1a:2e:28:56:94:b4:b1:d5:be:5a:3d:
         ca:76:7c:8c:d1:21:84:44:2e:cd:81:d6:d4:6e:37:51:6f:4c:
         af:44:24:db:45:7e:7b:a6:6c:63:73:d2:1b:27:5d:6c:6d:b8:
         6d:10:44:0f:ed:4e:d1:fe:1d:22:7f:d2:cc:ec:53:43:77:bb:
         ad:e5:b7:41:1a:67:28:43:0d:5f:95:28:72:9d:68:a0:19:ae:
         0b:32:31:ae:45:02:2f:f1:c0:08:3a:b0:d5:7e:e7:29:5c:05:
         0f:70:6e:41:4e:dc:3a:7b:0f:bb:02:d8:ef:2a:b1:69:8f:60:
         d6:b7:fc:7a:e0:19:46:70:57:87:41:5b:c8:eb:e6:a9:3d:a7:
         5b:24:83:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:48:06 2025 by rpki-client