Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa
File:                     aa896354-1055-31e1-aee8-cb3f9151aabc.roa (raw, json)
Hash identifier:          RUrEDEQe6bRpWD1dOL1wlWJgsJ5qkDiD62tYsohqQk4=
Subject key identifier:   E5:1C:B0:08:47:38:04:7C:BC:BB:A4:66:F4:0D:D5:9A:55:41:59:76
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584E4C5484F20B0C635AD84DC3C0
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     49
IP address blocks:        129.6.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:84:f2:0b:0c:63:5a:d8:4d:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=5921150c-b2d0-47ed-b644-b0fa1649fb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:b1:7e:ff:ff:45:6a:b2:5c:95:7e:82:99:
                    53:e2:a2:34:e8:81:c4:76:2c:52:8f:53:63:a6:81:
                    ff:fb:2b:27:da:62:ac:7c:f8:c3:da:c8:28:a0:28:
                    33:50:2c:95:b6:7a:cb:2d:bd:19:87:4e:62:80:a0:
                    12:e4:b1:c4:dc:d1:4d:09:79:6c:3d:bd:80:a7:d7:
                    23:f7:e0:23:c2:3d:f8:df:1f:96:59:1a:47:f5:38:
                    91:16:11:31:6b:ac:fe:4f:15:d9:18:b9:f4:39:6b:
                    9d:65:5d:74:65:49:93:d9:ed:5a:07:6d:b0:86:2f:
                    33:52:e3:b0:bd:db:56:44:73:a6:d8:97:5b:33:7e:
                    3f:ff:cd:e3:7b:b1:5d:87:92:9b:ff:9b:d9:d7:2b:
                    c3:06:f9:67:a4:1d:54:89:70:62:6b:64:f3:a9:c8:
                    c0:2c:91:57:52:44:61:0f:0b:fd:ce:7c:25:e0:64:
                    63:41:b0:a0:c7:00:9d:4f:ec:29:20:f7:86:ea:13:
                    53:06:5d:74:38:a6:1c:78:75:0e:25:76:03:e3:44:
                    9f:22:42:1a:2c:e4:b2:c5:5a:e2:6d:f5:50:7a:ff:
                    dc:08:f9:73:2c:83:b9:47:0f:3a:ea:10:9e:e6:e8:
                    51:26:e4:9e:93:d9:aa:1e:aa:4c:37:5e:a9:af:3c:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1C:B0:08:47:38:04:7C:BC:BB:A4:66:F4:0D:D5:9A:55:41:59:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:13:2a:ed:98:74:58:e5:a1:5b:39:f7:90:4a:54:4b:ca:
         45:fd:c8:26:81:97:e7:c9:e4:b3:02:58:6e:ba:4b:ea:69:9c:
         02:f6:46:a2:10:12:dc:f5:ce:27:0d:45:b6:ba:eb:70:c0:a9:
         ba:6a:1c:c2:bd:b6:ef:13:f0:02:3c:47:0a:c7:64:43:ce:9b:
         c3:a7:9d:23:3d:70:d9:8a:d8:45:cd:3f:0d:20:22:c1:a9:56:
         ea:2f:21:93:74:1b:52:ec:d6:31:96:60:c5:ca:48:65:69:f4:
         d1:bc:3b:5d:8b:63:05:bb:71:40:22:c6:ce:2e:1b:7e:42:4c:
         08:56:b0:b1:1d:75:35:19:b8:69:ed:00:23:fa:dc:26:bb:5b:
         7f:1f:3f:23:49:69:c6:1a:f8:7f:bb:1c:01:e6:b6:cb:c7:98:
         f0:b4:e3:70:af:be:23:9e:0c:36:8f:49:cf:24:dc:e2:ca:85:
         ba:2a:21:0e:21:c6:09:72:6f:9f:9d:4c:ab:e9:eb:c8:7c:ac:
         5d:71:0d:8b:e6:4b:af:46:14:19:93:66:9a:16:ef:bd:07:8b:
         3e:f1:ca:ef:0f:67:38:3d:48:46:b5:02:51:2d:f4:a2:86:95:
         a3:4b:fb:19:d3:2b:69:f9:6b:57:2f:8b:80:2d:e9:7e:5d:ad:
         9d:90:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:30:54 2026 by rpki-client