Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/7d2cc14e-6c3c-3679-9122-dc92b2970a4c.roa
File:                     7d2cc14e-6c3c-3679-9122-dc92b2970a4c.roa (raw, json)
Hash identifier:          88Xtt65XFfV1XnIb4JcHzccoEnhqT/ekeC19h0NSQus=
Subject key identifier:   9D:66:73:0D:99:C0:E5:5B:F7:EB:E3:05:A2:F7:93:23:B5:4A:EB:9B
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F43285849E79CB2E7C97BAABD056BB320
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/7d2cc14e-6c3c-3679-9122-dc92b2970a4c.roa
Signing time:             Mon 19 May 2025 12:01:17 +0000
ROA not before:           Mon 19 May 2025 12:01:17 +0000
ROA not after:            Sun 17 Aug 2025 12:01:17 +0000
asID:                     49
IP address blocks:        129.6.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:9c:b2:e7:c9:7b:aa:bd:05:6b:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: May 19 12:01:17 2025 GMT
            Not After : Aug 17 12:01:17 2025 GMT
        Subject: CN=f249d7ce-7bee-46e3-82fe-3e5eac71bf11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:bf:4d:89:9d:1f:7e:34:c6:d9:ea:81:7b:
                    30:8c:02:f9:ad:d5:e4:c7:b3:2a:7c:36:a5:b0:b4:
                    e4:84:26:54:03:20:aa:68:57:73:2e:d4:ab:95:aa:
                    2c:d6:32:ae:89:e6:5a:2b:9f:c8:18:01:7f:4d:83:
                    92:7c:39:8d:ac:4a:23:11:9c:9f:79:6a:77:59:c7:
                    4d:2a:49:bb:46:07:55:51:18:58:ae:e8:8a:cb:f7:
                    c6:a2:c0:f5:61:64:13:5e:6e:a7:02:ed:40:93:3a:
                    31:92:b9:1e:7b:30:db:e2:ac:cc:7d:e9:cd:66:b9:
                    ed:01:fd:0a:19:17:e8:d8:40:09:e3:ba:16:1e:5b:
                    4c:32:79:29:74:5d:14:94:e4:5d:76:c2:38:76:9a:
                    ce:20:61:42:48:76:77:fd:9c:69:34:2b:55:1a:d8:
                    c9:19:51:08:e0:2b:94:35:ab:13:25:a6:06:e7:72:
                    ec:ec:71:44:e4:c2:7a:f6:b7:b2:d4:88:15:25:7c:
                    df:04:37:9e:bc:aa:c1:e6:8c:0a:a6:dd:65:2f:76:
                    1d:f6:bd:76:2f:e8:cf:3d:ed:ad:9b:a6:d8:98:d3:
                    96:cb:51:9e:e8:a0:0b:bf:6d:e5:13:72:91:0b:1a:
                    0b:15:45:a4:cf:c1:4b:5c:a4:bf:61:09:ab:1e:3e:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:73:0D:99:C0:E5:5B:F7:EB:E3:05:A2:F7:93:23:B5:4A:EB:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/7d2cc14e-6c3c-3679-9122-dc92b2970a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d2:5e:b9:af:f5:88:41:3d:ed:df:bf:57:e8:20:01:37:cd:
         61:9d:4e:c8:d4:0a:68:47:3d:bf:27:a6:a3:13:e3:5f:bd:cb:
         9a:d9:98:a4:10:3d:a9:dd:9e:35:e7:63:15:49:df:42:56:56:
         05:e2:d7:92:a5:ec:28:49:72:d7:f9:9a:c0:f0:76:a3:53:f1:
         a6:dd:a7:e9:83:06:1a:59:dd:27:e5:d4:fd:45:c3:b1:08:d9:
         d6:dd:a3:36:2f:79:de:1d:63:7e:b5:d8:2c:a1:f9:db:76:5e:
         b2:e1:5b:25:6c:1f:5b:c2:e8:67:e5:c7:ef:6c:e5:19:a5:19:
         09:98:45:41:47:ee:c2:bf:0f:4c:fa:e9:77:d7:1d:38:77:7f:
         26:dd:cf:84:68:1e:bd:70:43:7e:d2:4a:dd:c3:26:1a:c0:a5:
         5c:ea:36:10:b4:61:d8:ed:d7:5d:1b:56:75:3a:cb:3a:cf:8c:
         3a:d4:93:dd:c2:94:a4:a0:22:a5:e2:55:ce:9a:b4:35:59:8a:
         9b:d8:e8:48:c0:9a:9b:e1:9d:2f:c6:cf:76:d9:bd:fb:54:85:
         0f:94:ea:88:24:c9:83:ac:6b:57:64:f8:5b:08:56:84:ff:20:
         89:13:c3:05:0a:c6:d7:36:7a:ef:8a:f9:29:45:98:49:fa:8c:
         8a:a1:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:17:01 2025 by rpki-client