Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c01d2765-ee63-30a7-80a2-affdc4f41fd4.roa
File:                     c01d2765-ee63-30a7-80a2-affdc4f41fd4.roa (raw, json)
Hash identifier:          FZQaxSEeOVgqGevquFGuF08kTkxixuIghZs4GgAT80g=
Subject key identifier:   31:09:A5:13:23:7A:01:C9:01:18:CF:9E:16:7A:B3:8D:4D:A7:99:46
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584AC71120C9B1271339FD2FC500
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c01d2765-ee63-30a7-80a2-affdc4f41fd4.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     49
IP address blocks:        129.6.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:20:c9:b1:27:13:39:fd:2f:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=486506e7-de6c-4148-a224-57f4da59a278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7f:e2:bc:92:7f:cd:43:ca:ec:43:ae:a3:09:
                    67:bf:33:81:bf:5d:60:91:cb:5f:0d:40:32:2f:af:
                    ae:bc:59:93:bc:a4:07:4c:6f:fb:5f:da:93:85:c1:
                    de:6f:ce:25:b4:3f:30:b5:f1:81:6d:39:b6:c4:9d:
                    90:12:fd:38:78:6d:c3:3a:64:61:7f:84:1e:30:b5:
                    06:18:8a:32:93:b4:43:1a:e2:2c:19:e7:68:e9:9d:
                    0c:1c:d0:ba:b2:0d:0f:cb:fe:2a:18:cc:1c:fc:6f:
                    b0:24:f9:2f:b2:c6:f9:56:b2:cf:19:57:f2:6d:8c:
                    60:50:8d:02:13:ee:33:e0:18:34:55:b4:13:57:dd:
                    5d:d9:fa:7d:c5:83:21:59:fc:5b:10:9a:0d:0e:2a:
                    5b:5a:5f:09:f7:38:3b:b3:27:4e:62:7f:2b:d8:8a:
                    b7:a9:d7:a0:b0:7e:bd:9f:a7:43:70:8c:10:37:51:
                    5a:76:3b:33:a1:c9:f9:bf:9d:9e:fd:db:84:5b:60:
                    03:a9:54:b7:de:1b:68:24:37:4d:29:ab:a7:f8:cf:
                    e8:96:96:2c:42:45:c5:6b:81:5d:cc:cd:da:8a:09:
                    22:c5:63:57:27:23:34:ee:ec:9f:4f:6e:d2:94:60:
                    0c:ad:f1:76:16:10:1c:81:61:8f:1d:da:c5:c3:fd:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:A5:13:23:7A:01:C9:01:18:CF:9E:16:7A:B3:8D:4D:A7:99:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c01d2765-ee63-30a7-80a2-affdc4f41fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f4:01:3a:e8:54:cc:34:5a:95:a1:cc:1b:af:c5:f6:b9:ad:
         95:d3:65:c0:4a:d3:7a:2a:f3:08:3c:67:f7:cf:f8:85:4b:28:
         80:14:a1:fb:b4:e4:31:59:ce:ae:51:4a:e3:19:7e:7a:fc:1c:
         c7:9b:b1:62:a0:11:e6:e3:59:e2:6a:06:6f:df:0b:7d:3c:4f:
         78:c4:43:b0:3f:70:69:4d:72:37:3f:8b:ef:ca:cd:da:43:b2:
         90:b1:93:c1:cb:99:80:2c:50:53:40:4b:9a:83:25:9c:f0:43:
         c9:b0:f8:2b:62:3a:85:61:db:06:98:f6:47:c8:c2:03:dd:e0:
         3b:f7:c8:a3:4d:1a:25:b7:2c:41:9d:c7:e8:e1:c2:56:d0:a3:
         09:27:19:e1:c6:05:c9:04:99:dd:ca:d6:f5:b0:1b:f2:0b:fb:
         1c:0f:07:f0:ef:9e:2b:1f:e0:53:04:b6:45:7b:97:71:82:0e:
         61:06:c4:6b:c4:3c:f8:2c:15:9b:1d:fa:12:97:24:23:48:55:
         7d:6c:c3:62:94:02:c8:e7:b6:11:20:50:3a:de:ff:a5:d6:e6:
         d6:06:13:b5:57:9d:79:31:92:52:39:cb:95:be:16:45:46:c6:
         19:61:c0:7f:62:f8:b8:7e:fe:fe:20:f0:be:03:7b:ff:60:82:
         9e:a4:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:06:43 2025 by rpki-client