Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/ac69bebf-b4fe-38fb-819f-0495fb63ec64.roa
File:                     ac69bebf-b4fe-38fb-819f-0495fb63ec64.roa (raw, json)
Hash identifier:          HCS3JmwCYvfSpUOVvWvz3j7CQofWibMMAL12PMTwEIM=
Subject key identifier:   8C:91:63:71:D2:74:D4:57:E4:AF:A9:F3:3D:EA:A7:B3:D5:4B:66:BC
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F43285849EB77537FCA11945DB6893900
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/ac69bebf-b4fe-38fb-819f-0495fb63ec64.roa
Signing time:             Tue 20 May 2025 21:09:13 +0000
ROA not before:           Tue 20 May 2025 21:09:13 +0000
ROA not after:            Mon 18 Aug 2025 21:09:13 +0000
asID:                     49
IP address blocks:        132.163.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:77:53:7f:ca:11:94:5d:b6:89:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: May 20 21:09:13 2025 GMT
            Not After : Aug 18 21:09:13 2025 GMT
        Subject: CN=df9c92de-50a2-4925-a67a-3ba7102ac2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:79:9f:f1:f8:94:40:81:79:11:50:f9:0b:
                    f7:70:f1:b4:00:d7:e4:42:ca:19:21:c4:3d:59:ac:
                    f8:7b:e1:49:63:3f:5e:5d:e0:96:d4:56:29:94:fa:
                    e1:d9:4f:3d:31:49:bf:cc:c1:f0:31:9c:43:1a:ba:
                    89:58:b4:48:de:80:f1:b7:d9:fe:d1:03:8d:d6:cf:
                    64:6d:8b:09:1a:e6:8c:3c:06:bf:a9:34:55:93:bd:
                    78:b3:22:45:b7:08:d1:8e:60:80:93:b2:a2:9a:92:
                    8c:55:78:f8:10:87:81:b6:66:16:6b:0f:01:40:99:
                    3e:12:95:f0:46:7c:bb:85:69:df:39:82:16:6b:04:
                    31:7a:b3:eb:88:d3:4a:55:a6:4b:bc:d1:ca:09:70:
                    28:44:7a:72:f1:9e:b2:ba:1f:05:31:2d:0b:2c:c4:
                    16:61:77:b6:5c:8f:47:42:cb:50:dd:ab:16:bf:82:
                    f7:08:07:ee:3f:11:e8:24:86:81:eb:f9:4c:0a:ef:
                    23:4e:ab:b4:58:83:47:bd:3c:d6:c4:0a:f3:f3:98:
                    cc:cb:f0:e2:5e:5d:f6:36:18:f8:37:f2:1d:aa:62:
                    56:d7:9c:fd:e7:fa:8a:63:1c:82:64:9b:22:47:fb:
                    bf:65:ea:d1:a5:25:c2:ac:ed:33:e9:4d:19:cf:fe:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:91:63:71:D2:74:D4:57:E4:AF:A9:F3:3D:EA:A7:B3:D5:4B:66:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/ac69bebf-b4fe-38fb-819f-0495fb63ec64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:da:57:d5:d8:24:75:a8:0d:00:56:fe:83:65:59:09:a0:
         11:92:db:e9:eb:5c:a1:f7:44:b3:0c:af:a5:f6:4b:1a:b6:d7:
         8c:de:af:3a:30:7f:2f:f0:e5:7b:81:c2:79:69:bc:47:81:ba:
         7d:f3:d1:c8:fb:41:b0:8d:09:7e:72:86:a6:67:36:1f:bd:c3:
         e2:52:63:20:97:59:03:00:53:3b:c7:9c:72:2e:c5:d9:3a:5c:
         36:a0:8b:61:10:1e:3c:0f:de:92:c1:b9:e8:5f:b8:b4:ff:8e:
         73:01:32:38:13:2b:bc:98:97:6f:1e:75:37:81:7b:39:29:64:
         f1:54:d0:bb:02:5b:3e:d3:4c:e9:f9:36:8f:22:af:db:53:a0:
         55:e0:00:1f:51:2f:36:25:e3:f5:fb:06:b2:e4:bf:48:aa:4a:
         60:da:de:c7:63:33:17:74:3d:a8:08:31:b5:70:4c:d5:f2:ef:
         1f:ea:bd:36:62:f4:35:bd:60:33:af:bf:80:ae:e9:c2:0d:d4:
         dc:6c:3f:c7:79:53:fc:ce:ae:ea:bb:6b:e3:5e:bb:4a:88:02:
         3f:3d:9a:c4:f4:78:26:69:99:a2:10:ab:f5:59:69:b0:3b:11:
         6f:d7:cc:b8:7d:fc:51:58:74:51:75:bb:53:bc:e1:ac:89:d0:
         d4:a7:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:22:42 2025 by rpki-client