Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/15e727cd-0799-381e-8e0c-208b8b7e5653.roa
File:                     15e727cd-0799-381e-8e0c-208b8b7e5653.roa (raw, json)
Hash identifier:          7+ym+i7FLxq2m2WQuTia6pyNgpEW91WrG1faQmsGvG8=
Subject key identifier:   6C:33:CE:B3:E1:DB:4F:65:24:D4:04:E7:B3:B8:D3:EB:D4:AE:8D:D6
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584D67DFB6E6BEA0B9BA977B4200
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/15e727cd-0799-381e-8e0c-208b8b7e5653.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     49
IP address blocks:        129.6.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:b6:e6:be:a0:b9:ba:97:7b:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=3b8fcbf0-1959-44e3-937d-82e11b190232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:d4:72:ae:9a:7b:6b:73:2e:7a:ce:45:f6:
                    36:b9:32:5e:7a:80:a3:6a:71:dc:59:3d:c6:8d:f2:
                    b0:43:06:d9:2f:8c:d4:aa:c9:92:ef:4c:35:a0:34:
                    bc:9d:6b:cc:57:8b:60:e6:6a:19:87:e8:cd:a3:33:
                    63:98:a3:1f:70:a3:4a:1d:e3:2d:45:85:92:db:5e:
                    ea:f5:b1:64:2e:3f:cf:9d:96:19:78:f8:6d:24:fb:
                    df:aa:60:d5:8e:b3:c4:71:f8:94:54:5e:58:ef:d6:
                    4c:9a:ce:08:7b:73:6a:8e:c2:94:50:63:b8:12:a5:
                    02:4e:81:95:bd:0c:fe:b2:eb:cf:d2:5f:d9:57:a3:
                    86:44:69:84:66:52:f8:96:78:6d:d3:5b:ec:a8:85:
                    50:06:e6:c6:b5:28:bf:01:5c:eb:8d:62:b6:f5:13:
                    9a:6d:a8:da:59:f5:90:45:b1:d0:a9:90:16:e6:10:
                    a2:93:e6:55:54:a8:25:a1:74:26:b6:8a:ca:a7:9b:
                    1d:38:04:d0:e6:e7:22:06:47:9d:2e:15:8d:30:ad:
                    a4:2d:89:93:06:c6:39:76:3c:6b:a4:40:10:ad:ea:
                    dc:18:f3:18:d0:30:e9:5d:bf:e8:aa:17:a9:ea:8d:
                    cc:bf:08:b1:90:b5:b8:fa:2e:8c:8c:e5:fd:c9:70:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:CE:B3:E1:DB:4F:65:24:D4:04:E7:B3:B8:D3:EB:D4:AE:8D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/15e727cd-0799-381e-8e0c-208b8b7e5653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7c:6f:1d:a1:c7:81:12:e8:b1:bf:c4:b4:1f:7a:6d:f5:a0:
         d0:c1:ab:8c:96:7a:d9:eb:dc:aa:5f:75:2e:e5:4d:22:a1:e3:
         80:21:72:dd:3e:94:27:5f:f4:bd:c9:cb:c1:08:67:a5:3c:f1:
         9d:6f:b7:c2:c3:01:41:56:bc:7d:ef:58:3a:4d:ea:2c:90:92:
         08:2b:63:0c:09:f5:60:84:ec:44:95:2f:8e:75:3f:9f:1c:66:
         50:11:27:24:09:41:11:5b:71:18:95:e6:0d:bb:90:13:c5:a2:
         9e:48:e2:47:b8:ae:ec:d5:45:aa:a3:45:20:b4:0e:84:d7:bf:
         12:69:93:54:63:a3:b2:c4:c1:3a:ca:e9:b0:c9:b5:e1:98:78:
         de:ac:cd:e5:77:5c:b6:5a:dc:a8:39:e7:b0:10:50:84:cb:df:
         d3:8a:fb:0d:ea:76:8a:79:1a:f2:7e:aa:cf:74:08:5a:f8:7a:
         a9:d6:ae:e6:32:2b:fb:c7:41:df:5e:4a:45:6d:ec:d4:f8:bd:
         0e:4a:2a:fd:32:49:2a:87:9d:b0:a2:85:d6:8b:69:bf:84:fb:
         3d:59:8a:73:f0:63:3e:ee:74:d7:07:97:56:38:47:c0:79:45:
         1c:b5:70:19:c7:2f:d0:51:a7:47:2e:d3:68:00:b0:5e:16:42:
         e2:bd:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:26 2026 by rpki-client