Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d61d7bc2-abf0-3f97-9501-420c569517ad.roa
File:                     d61d7bc2-abf0-3f97-9501-420c569517ad.roa (raw, json)
Hash identifier:          pJykespdA0oz3VcKkZhPiv2Md82yk1WXprsttudxyiA=
Subject key identifier:   33:C0:2E:25:B8:E9:C9:0C:4B:AF:85:A9:12:89:1C:52:B9:8E:D0:6B
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584F18979BAE65B18D00F0638F80
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d61d7bc2-abf0-3f97-9501-420c569517ad.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     49
IP address blocks:        129.6.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:9b:ae:65:b1:8d:00:f0:63:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=5bf5a175-4acd-438d-be04-40943f38b826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6f:ea:a6:d7:5d:36:f7:08:da:8a:87:88:a4:
                    90:6f:15:43:77:df:db:db:4b:dd:d0:d0:4e:5e:ca:
                    e2:ec:01:55:e0:a6:f9:25:8a:94:b5:96:b6:73:c5:
                    d9:db:1e:0f:17:5c:ce:e3:7a:8e:62:33:71:bd:95:
                    44:2d:fc:03:8e:e7:49:92:77:a7:6f:94:95:44:f1:
                    1c:5e:49:08:a8:13:ab:2d:7c:12:b1:15:54:57:51:
                    f7:75:ec:a9:ec:24:0f:56:1d:12:d0:58:6b:af:a3:
                    24:b2:36:ad:5a:dd:d7:41:23:02:70:18:65:2d:64:
                    66:db:c5:18:da:fc:05:92:ac:06:5f:cc:9b:1e:ab:
                    a4:2a:90:79:d8:81:12:e9:e5:e9:89:54:4e:73:98:
                    65:df:3a:ba:45:5c:76:a4:58:08:c2:45:51:ec:0b:
                    1e:f6:61:a8:74:fa:f5:41:b7:5a:e0:c3:03:aa:8c:
                    cc:5a:14:fc:3a:3b:c9:55:98:a3:c4:67:d7:40:da:
                    ab:1e:2b:94:a0:32:31:06:8e:fc:f4:26:87:ad:9b:
                    43:89:03:f6:5f:43:87:21:e0:c7:51:19:8b:6a:08:
                    cd:42:20:01:34:29:2c:d5:b7:62:09:8b:d7:24:61:
                    bf:f0:ea:62:a0:f4:f8:5f:eb:b8:3d:54:96:57:3d:
                    8e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:2E:25:B8:E9:C9:0C:4B:AF:85:A9:12:89:1C:52:B9:8E:D0:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d61d7bc2-abf0-3f97-9501-420c569517ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d0:28:80:fb:40:f2:3b:2c:02:fb:7c:d0:34:a8:84:95:1a:
         28:b0:9b:19:36:67:37:57:92:09:80:31:eb:a6:95:2a:6d:f2:
         27:03:1d:02:96:db:b9:3d:d5:cd:bb:65:e5:21:39:b7:b8:99:
         51:56:eb:cc:4c:66:05:5b:29:e0:de:a9:dc:ef:5a:d6:43:97:
         d8:f2:90:9e:c5:ce:91:74:ea:df:23:0e:27:ff:96:c2:53:3a:
         51:15:81:4f:e9:b6:90:ef:01:be:35:2c:29:96:4c:50:f4:f7:
         c5:6b:94:d1:a5:4c:18:fa:19:7b:91:b4:bf:39:23:22:2f:92:
         f4:d9:88:c9:91:41:83:f8:ef:65:1b:a2:79:f0:a3:d1:33:46:
         e7:cb:7b:98:b8:56:75:51:bb:f0:fd:07:a7:5e:4c:c3:1e:80:
         00:0f:76:0a:6d:f6:bf:59:6c:fd:b1:10:4c:fd:ff:bd:91:93:
         b7:95:20:da:39:1c:22:5e:3e:dd:08:b2:be:ad:bc:54:b5:16:
         d1:de:3a:f2:99:ec:c5:80:c6:2a:0c:d8:43:eb:97:0c:bb:92:
         81:97:4e:d9:da:71:4e:76:5d:df:2b:45:69:a4:5b:57:65:ed:
         77:25:47:7a:52:f3:79:34:67:c4:5e:03:e9:97:48:8d:23:8f:
         17:87:90:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5uuZbGNAPBjj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx
YzcyMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
NWJmNWExNzUtNGFjZC00MzhkLWJlMDQtNDA5NDNmMzhiODI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2/qptddNvcI2oqHiKSQbxVDd9/b20vd0NBO
Xsri7AFV4Kb5JYqUtZa2c8XZ2x4PF1zO43qOYjNxvZVELfwDjudJknenb5SVRPEc
XkkIqBOrLXwSsRVUV1H3deyp7CQPVh0S0Fhrr6MksjatWt3XQSMCcBhlLWRm28UY
2vwFkqwGX8ybHqukKpB52IES6eXpiVROc5hl3zq6RVx2pFgIwkVR7Ase9mGodPr1
Qbda4MMDqozMWhT8OjvJVZijxGfXQNqrHiuUoDIxBo789CaHrZtDiQP2X0OHIeDH
URmLagjNQiABNCks1bdiCYvXJGG/8OpioPT4X+u4PVSWVz2OCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPALiW46ckMS6+FqRKJHFK5jtBrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2
YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvZDYxZDdiYzItYWJmMC0z
Zjk3LTk1MDEtNDIwYzU2OTUxN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy
NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1
MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh
M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgQYlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbQKID7QPI7LAL7fNA0qISVGiiwmxk2ZzdXkgmAMeumlSpt8icDHQKW
27k91c27ZeUhObe4mVFW68xMZgVbKeDeqdzvWtZDl9jykJ7FzpF06t8jDif/lsJT
OlEVgU/ptpDvAb41LCmWTFD098VrlNGlTBj6GXuRtL85IyIvkvTZiMmRQYP472Ub
onnwo9EzRufLe5i4VnVRu/D9B6deTMMegAAPdgpt9r9ZbP2xEEz9/72Rk7eVINo5
HCJePt0Isr6tvFS1FtHeOvKZ7MWAxioM2EPrlwy7koGXTtnacU52Xd8rRWmkW1dl
7XclR3pS83k0Z8ReA+mXSI0jjxeHkAA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:35:46 2026 by rpki-client