Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c7a9d36a-13b0-38ff-ba3a-7176806b8a24.roa
File:                     c7a9d36a-13b0-38ff-ba3a-7176806b8a24.roa (raw, json)
Hash identifier:          ocIaKr6S60ZCHVQ4Ul+UznxRMq3SXzchOJqdSi/p300=
Subject key identifier:   F4:AD:57:7F:AA:E5:F6:10:14:94:0C:14:07:23:FD:73:21:F6:4C:C3
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584AC71120FB02C725C149F74740
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c7a9d36a-13b0-38ff-ba3a-7176806b8a24.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     49
IP address blocks:        129.6.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:20:fb:02:c7:25:c1:49:f7:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=75ab749f-2521-4317-8720-2e532ed9c37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:eb:f1:bb:5a:cc:3f:48:71:dd:d6:e9:fd:
                    0b:cf:b7:89:b2:a1:cb:da:a8:d1:d3:ab:84:a5:51:
                    8d:97:22:86:66:ff:39:18:b8:ba:c0:96:a3:83:82:
                    52:80:ec:5c:7b:81:08:e0:fa:59:10:e4:a0:f7:6e:
                    51:39:a8:a4:b4:ee:c3:54:63:3a:13:28:5c:a8:20:
                    4b:44:e8:dd:94:02:2f:1b:b5:b4:d0:e5:96:2c:84:
                    5b:00:36:7a:7e:68:c3:c8:d8:97:de:a7:80:04:63:
                    e2:73:f4:16:f8:a9:b9:0c:0f:d6:22:ff:eb:db:50:
                    02:78:b6:eb:ff:08:90:8e:51:20:81:d3:ed:32:7b:
                    b8:b8:28:0a:98:3b:7c:23:d1:a7:ee:79:0a:f9:01:
                    8c:84:3f:87:19:b0:9e:28:48:ca:1e:7b:66:51:78:
                    16:82:ff:0c:48:0e:0a:4c:0a:d6:2e:af:1f:8e:16:
                    49:eb:a5:33:16:50:48:4d:b9:3b:7a:03:26:86:4b:
                    9b:6b:ef:cd:06:91:77:96:b4:b7:87:da:8f:eb:07:
                    3f:16:12:79:ec:db:3b:a0:c6:c8:09:3c:c2:74:8e:
                    36:eb:dd:3a:e6:ee:cf:7f:7b:3b:81:19:4d:88:84:
                    de:b0:0a:79:ad:ba:e7:0c:dc:9e:b3:fa:29:f5:3f:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:57:7F:AA:E5:F6:10:14:94:0C:14:07:23:FD:73:21:F6:4C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c7a9d36a-13b0-38ff-ba3a-7176806b8a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:89:e7:86:40:e8:cc:f2:87:9f:b6:dd:d3:ad:00:93:ea:d1:
         20:93:f2:a8:39:83:9c:e5:0c:1b:21:36:42:f7:d0:cb:4e:9b:
         d2:e5:71:b3:1a:3a:b8:d5:ab:3f:0e:9a:bd:b1:7b:e5:8a:d4:
         02:78:3c:c3:14:5d:64:f9:de:6b:72:12:f5:3d:e2:9e:a4:8f:
         75:37:98:34:43:77:97:74:84:19:45:4e:4f:36:8d:ce:bf:2e:
         f5:d0:a7:17:47:a8:b4:b2:51:aa:6d:df:a1:04:c2:33:09:81:
         1b:f8:8f:01:ad:af:4e:3c:e2:79:43:2d:62:b1:82:53:7a:f9:
         ed:6c:ad:eb:c4:50:88:79:07:b8:b9:57:eb:ab:4d:b4:fc:a1:
         c8:24:88:ca:91:44:25:5c:d9:ae:e5:34:f6:97:cf:aa:91:b0:
         f7:13:43:bd:7d:66:cf:38:ee:8a:3c:ce:2f:6f:05:e3:ee:ce:
         0e:e5:ba:f2:46:ff:79:69:59:ba:5c:29:7a:c3:46:db:4a:33:
         26:7f:1a:14:5e:db:e6:0b:b3:cf:85:e5:41:b3:42:81:a2:0a:
         19:dc:23:4f:fd:d0:82:35:ed:aa:00:99:fa:ce:a4:94:03:35:
         cf:94:cd:d4:b2:e0:7a:5c:34:8f:8c:b7:93:b9:f2:fa:66:ef:
         e6:98:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:55:06 2025 by rpki-client