Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/3c33faa8-da57-3ca9-a69a-04b2658919cf.roa
File:                     3c33faa8-da57-3ca9-a69a-04b2658919cf.roa (raw, json)
Hash identifier:          h6cxZYxxPCukFyxsRFU8YrOY5zQBVCT7x4Q+xD/SqVY=
Subject key identifier:   22:EC:27:F9:0E:F0:2A:A2:4C:31:F4:04:B5:32:7A:F0:B3:2D:96:73
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584BABFD0643B4C2A63A1843BE60
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/3c33faa8-da57-3ca9-a69a-04b2658919cf.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     49
IP address blocks:        129.6.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:06:43:b4:c2:a6:3a:18:43:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=eeec0de2-3833-4c10-8ea6-751e3b8fc1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:30:6c:27:c6:f9:05:69:7c:87:9e:51:d6:
                    f7:85:66:81:1c:31:e2:7d:27:e4:00:c3:a0:81:a2:
                    ac:b5:c3:42:c9:03:0e:09:3d:4b:5a:d3:71:93:c9:
                    ad:dc:42:4c:08:d6:69:bb:8c:9f:00:2e:64:93:ab:
                    e8:4a:20:6f:04:48:c3:10:1f:8a:49:91:c8:d8:55:
                    08:94:a6:d4:c3:3e:ef:27:30:c6:e4:f7:78:88:3f:
                    b6:8b:17:03:d5:ce:7e:ba:f0:ce:e4:8e:97:d3:0f:
                    51:92:c0:74:57:23:63:f5:a2:8d:06:4a:7c:fa:83:
                    c0:55:07:21:89:f9:e2:f2:c0:12:4c:de:da:ae:9d:
                    91:f6:6c:5b:5e:da:e4:1e:cd:be:1c:c5:33:a5:1a:
                    c2:39:80:62:65:c5:fe:48:98:ed:a4:d7:1e:cb:4d:
                    27:3b:2b:34:d6:14:7a:33:bb:13:11:98:b1:5f:6f:
                    68:15:5d:c8:da:e9:49:df:3d:1f:57:75:36:0c:9c:
                    af:57:fe:1a:3f:c0:86:72:88:14:f1:2b:08:8e:1f:
                    8e:59:c9:e7:d6:d0:e4:1b:a5:79:24:5c:b0:00:1f:
                    d8:1f:2b:8a:49:a3:26:9b:eb:0d:d7:a5:1d:ac:1b:
                    6e:02:de:ca:f7:b2:3d:65:3a:9d:fa:1c:6a:56:4e:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EC:27:F9:0E:F0:2A:A2:4C:31:F4:04:B5:32:7A:F0:B3:2D:96:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/3c33faa8-da57-3ca9-a69a-04b2658919cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:53:d0:05:a7:b9:6f:51:87:07:73:2d:05:10:0d:80:45:be:
         ce:1a:36:4a:13:c0:d9:58:c8:7f:11:fa:0b:19:23:c7:e9:67:
         c0:94:42:59:7f:2e:cd:0f:ca:d6:63:c3:63:28:50:aa:97:81:
         59:59:ac:10:51:14:ef:0d:a6:63:9b:4a:8c:e0:81:37:3b:3c:
         a1:57:97:a8:21:9e:78:7c:cd:d9:2b:e1:51:1e:97:c7:c6:0f:
         f0:52:1f:21:bd:fc:e7:7f:fb:f0:88:e7:da:ef:d6:11:72:da:
         0c:db:54:ee:3a:64:08:50:1b:2a:29:ae:f6:c3:e5:5f:dc:8a:
         a9:e2:f7:26:02:aa:0a:e1:51:34:0b:65:dd:ec:7b:83:26:05:
         96:b6:ca:35:d5:6f:a4:36:fd:c6:3f:e0:90:8f:c6:f4:cc:a8:
         9d:39:c0:07:ba:e4:87:f0:66:9b:86:55:bd:c2:83:3c:b4:e5:
         34:e1:75:16:a8:c5:38:be:48:60:2e:13:a1:43:a3:e6:21:10:
         9f:ef:75:17:f2:8a:77:69:02:e4:63:14:df:79:b2:4e:13:21:
         48:39:52:2a:d6:f5:1b:3f:c1:db:a9:23:7b:9f:65:97:d2:cc:
         d0:8e:c2:8d:35:74:ed:6c:cc:06:30:9e:2b:39:92:16:0d:1b:
         b3:a9:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:06:16 2025 by rpki-client