Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/291f9ce5-b027-37b0-815f-4a1de26a4c8c.roa
File:                     291f9ce5-b027-37b0-815f-4a1de26a4c8c.roa (raw, json)
Hash identifier:          vDia6DmyY7WX4h1DNc0b6L/hWQAKXLAgYkxtzAcvPqQ=
Subject key identifier:   8D:0D:36:D8:7E:13:E4:DF:48:11:F7:28:96:4C:63:59:6C:6D:3A:37
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F43285849E79D1AD0271B87F3EA59BA00
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/291f9ce5-b027-37b0-815f-4a1de26a4c8c.roa
Signing time:             Mon 19 May 2025 12:02:06 +0000
ROA not before:           Mon 19 May 2025 12:02:06 +0000
ROA not after:            Sun 17 Aug 2025 12:02:06 +0000
asID:                     49
IP address blocks:        129.6.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:9d:1a:d0:27:1b:87:f3:ea:59:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: May 19 12:02:06 2025 GMT
            Not After : Aug 17 12:02:06 2025 GMT
        Subject: CN=b0bc59fa-d401-42c6-803e-d44caa18fdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:be:a2:5b:66:6e:f1:86:b6:2d:d6:4b:a4:
                    18:7f:e1:6f:ac:f4:3d:e1:61:ef:a9:5a:4c:a8:68:
                    0d:83:4a:f5:bc:0e:51:e0:54:af:af:10:d9:0b:0d:
                    b9:c5:58:57:11:20:61:9a:c2:f8:65:65:7f:b9:2d:
                    58:a4:b4:9c:d8:38:1f:99:ad:67:69:20:0a:83:f9:
                    7e:37:1c:41:0b:1b:b7:f7:95:e9:78:f6:99:8b:7a:
                    21:64:48:2e:d5:90:64:74:5e:52:18:43:1d:d5:7e:
                    a7:13:57:14:34:61:be:c4:c0:f1:07:b6:e7:da:14:
                    80:cc:15:a5:95:cb:a7:25:8d:29:59:45:30:45:9c:
                    f4:4d:16:13:5e:43:9c:bc:82:7c:0e:11:9a:ae:a5:
                    00:f1:29:7f:f0:0c:73:04:0c:1b:8b:83:d1:8b:c4:
                    9e:51:db:b6:30:45:5f:e3:03:3f:9f:9b:50:5e:8f:
                    dd:32:c0:9f:f5:47:bb:ff:e3:9e:0e:7f:af:f2:76:
                    bd:8a:d0:c7:d3:ab:9a:ce:ed:38:d9:db:12:6b:a8:
                    16:9b:44:78:6c:89:1f:b7:30:64:96:6a:85:59:08:
                    9c:fe:09:7d:f3:64:4f:4b:80:c8:bb:67:e2:33:4c:
                    89:3f:74:ac:cb:62:8d:67:16:50:2a:56:93:22:68:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0D:36:D8:7E:13:E4:DF:48:11:F7:28:96:4C:63:59:6C:6D:3A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/291f9ce5-b027-37b0-815f-4a1de26a4c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:89:9e:89:23:b3:14:e1:a5:9c:12:fa:53:56:3b:81:04:
         e3:31:65:26:ae:27:44:75:d8:5e:1f:fe:70:af:eb:4c:c2:bd:
         68:9d:9e:f6:0b:d2:1c:18:6b:e0:df:36:3e:50:74:74:5b:db:
         09:80:4c:e6:0d:65:1e:4d:9e:24:3a:62:60:3c:26:63:86:43:
         e8:8f:61:e9:ff:25:a2:dc:68:49:5d:3e:9c:ac:98:8d:02:d8:
         7d:07:ae:e7:1b:84:7d:dc:ad:da:c2:50:c9:50:64:c9:13:35:
         05:29:43:9e:ac:77:59:e8:da:f0:5f:d2:67:fc:7c:38:63:43:
         a8:e6:f6:2a:ae:cf:df:20:f5:ff:fa:ef:06:43:43:b4:98:8b:
         96:00:28:1a:9b:e5:8f:0b:06:61:11:b2:fb:91:20:10:21:b4:
         3a:39:67:c9:dc:b5:69:aa:b7:be:b5:4c:08:60:d1:70:eb:0e:
         5e:ff:d8:89:9f:99:6a:f4:3d:15:0d:26:be:0a:9a:18:c7:26:
         d0:9e:52:5e:e6:b9:d2:8f:4a:e1:4a:0e:79:5b:4d:11:0e:1f:
         2a:8c:3c:0a:79:1e:97:98:b1:ab:6e:48:fd:b2:16:26:a1:dc:
         94:86:56:ac:1e:04:da:bc:0e:2b:9e:8d:98:7f:10:5a:e9:7a:
         8e:d5:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:00 2025 by rpki-client