Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c01d2765-ee63-30a7-80a2-affdc4f41fd4.roa
File:                     c01d2765-ee63-30a7-80a2-affdc4f41fd4.roa (raw, json)
Hash identifier:          aRSaEyATKkGDeTll7FuFN6pTqncFwGT6204/haC3z88=
Subject key identifier:   64:44:F5:04:FA:21:81:BC:27:9E:F0:6D:B2:94:A3:50:B8:DE:25:CB
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F43285849E79F0EEA8F7D75EFDF43CC00
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c01d2765-ee63-30a7-80a2-affdc4f41fd4.roa
Signing time:             Mon 19 May 2025 12:06:02 +0000
ROA not before:           Mon 19 May 2025 12:06:02 +0000
ROA not after:            Sun 17 Aug 2025 12:06:02 +0000
asID:                     49
IP address blocks:        129.6.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:9f:0e:ea:8f:7d:75:ef:df:43:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: May 19 12:06:02 2025 GMT
            Not After : Aug 17 12:06:02 2025 GMT
        Subject: CN=c0d8c998-f00d-46e4-bc81-8a73387a64a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fa:33:ec:4a:1c:8a:b1:31:fb:3c:34:56:c2:
                    ee:b1:c5:ef:03:95:7f:10:ba:49:8c:43:f9:ad:b9:
                    9d:de:1a:f8:7b:3c:8b:9e:28:6f:b7:90:3d:2c:02:
                    bf:32:ad:13:f0:64:01:8b:ff:5e:91:9c:c8:e9:9d:
                    58:60:9b:be:76:c7:86:91:8f:70:c8:38:8c:d3:d7:
                    11:0a:26:1c:5c:5f:47:79:af:f7:ab:9c:18:ac:b3:
                    96:bb:55:cb:bb:17:09:9d:ac:d6:cb:91:46:a8:b1:
                    ab:57:30:52:4f:0b:5c:c1:44:ac:b0:7e:c3:2a:f5:
                    a2:15:74:c1:61:73:d4:05:83:e3:7b:d7:a2:4a:6e:
                    f6:f6:e2:57:07:3d:a4:75:25:c7:3f:cb:b0:b1:db:
                    57:6c:b6:75:02:bb:36:21:89:65:d3:d0:e8:15:df:
                    9f:de:48:6c:6a:86:27:c7:bf:46:ed:02:85:24:d2:
                    f4:1e:57:be:44:11:74:9a:32:72:84:3e:98:90:ac:
                    73:ed:1c:46:7d:a7:94:d3:d2:ac:58:36:0f:cf:9b:
                    5a:23:84:33:d6:a8:64:41:dc:79:22:29:9f:1e:b5:
                    d0:80:8e:06:6f:3c:1f:83:6f:e5:de:8a:6e:85:a5:
                    bc:ce:48:57:91:4e:64:1e:01:1f:4e:36:33:b8:85:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:44:F5:04:FA:21:81:BC:27:9E:F0:6D:B2:94:A3:50:B8:DE:25:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c01d2765-ee63-30a7-80a2-affdc4f41fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:25:29:af:c9:3f:2e:0e:1f:c4:c8:2d:a7:20:a2:1e:1c:
         ec:e5:22:72:56:09:e7:e4:9d:79:40:35:43:c0:c1:11:19:1a:
         e5:1f:b5:b4:7a:15:d1:9e:8c:76:2e:83:61:b5:21:24:79:00:
         15:f9:28:db:ec:b9:78:79:fd:ad:d3:a1:ff:aa:d8:d4:68:19:
         15:c5:aa:c6:c4:f0:6c:26:be:c3:93:64:df:a4:05:2c:dc:11:
         fb:14:de:76:ea:e0:87:23:26:24:b1:4c:d3:47:1d:34:9b:74:
         7a:8f:ef:76:ef:e4:f9:75:56:ba:f0:a7:8b:be:9e:d8:24:55:
         27:b1:ec:85:be:ad:04:c8:14:c3:e5:41:c0:f7:9f:8e:89:13:
         3b:fb:c3:e2:15:c9:2a:71:38:a7:4d:e8:ad:d7:69:f4:ec:ca:
         95:32:69:f1:bf:1f:20:9a:38:36:61:ad:3e:b2:c3:0b:85:50:
         19:53:2a:4a:cd:bc:86:1f:b3:bd:e8:7a:68:1a:d1:c5:41:ec:
         33:33:68:d5:61:ba:92:a4:90:9a:13:ea:bb:34:f4:8e:b8:9b:
         09:05:42:71:3e:d4:05:f2:91:f5:6b:9c:a5:4d:1c:dd:90:8c:
         e2:c6:29:e9:4f:52:1b:34:39:b9:4f:3b:34:35:52:9b:6e:1e:
         29:44:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:28:03 2025 by rpki-client