Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/85d2d882-50ee-3f0b-b191-7803ca3df9a3.roa
File:                     85d2d882-50ee-3f0b-b191-7803ca3df9a3.roa (raw, json)
Hash identifier:          kO1rsUfG5at50sZHJkrKaFW0tMv6dMw0CzQ9d0uXe2E=
Subject key identifier:   2C:61:05:5E:BA:6E:86:F7:89:5C:00:96:3E:76:A4:55:CA:C9:38:A4
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584D67DFF8EC636DFFD81EC4AA00
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/85d2d882-50ee-3f0b-b191-7803ca3df9a3.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     49
IP address blocks:        129.6.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f8:ec:63:6d:ff:d8:1e:c4:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=e64baa78-2cc9-4af7-abdd-584bce344f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:73:28:a2:86:7a:fb:19:cf:33:c1:27:bb:
                    a9:09:51:93:85:87:2f:f0:0a:77:c6:3b:cd:ca:f7:
                    0c:e7:6c:60:b8:7e:50:53:48:64:36:66:07:4a:55:
                    8a:91:9b:d5:08:c3:a4:a8:ca:d7:bd:0b:5f:13:60:
                    09:87:35:3f:3f:45:4e:16:cd:8f:4e:14:c6:4c:4c:
                    28:3b:41:dd:3b:5d:a5:d1:25:ee:01:fd:f6:5e:3a:
                    09:58:98:ab:a3:f0:74:f2:77:a5:4f:15:f8:90:63:
                    a4:32:0c:54:b0:19:5a:1c:41:e2:23:54:de:df:5f:
                    33:95:30:15:90:65:67:35:b8:1d:7e:06:8f:63:f8:
                    08:4e:85:78:a3:23:27:bd:d6:50:7c:be:d6:30:9f:
                    6d:97:e3:36:02:7e:30:ca:5e:e5:ca:4d:f9:a8:14:
                    d4:7c:f7:86:44:22:f9:66:5c:f6:51:3b:27:0c:65:
                    0b:ff:74:8f:17:3e:87:5a:cf:69:6d:dd:dd:0d:1d:
                    c9:80:8a:b4:52:08:af:d3:6c:a9:23:f4:c7:0e:c4:
                    1d:b0:25:da:ea:5b:81:e8:07:1e:dc:0a:3d:59:53:
                    d1:b6:2d:b4:ea:0d:6a:be:be:da:e6:ae:2f:a8:13:
                    1b:20:b8:4d:c7:0b:33:54:50:a5:d8:47:66:db:d4:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:61:05:5E:BA:6E:86:F7:89:5C:00:96:3E:76:A4:55:CA:C9:38:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/85d2d882-50ee-3f0b-b191-7803ca3df9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:45:6f:46:38:74:67:8d:d2:bc:b0:dd:9e:9c:c8:b9:f8:f2:
         bc:2e:bb:d2:a4:71:cc:65:6c:79:0a:2c:b2:ea:bd:3b:81:11:
         a7:33:6c:eb:9f:da:39:56:86:b4:bb:ac:0a:8d:62:4a:82:0d:
         88:0f:e7:52:40:81:30:fd:13:e6:e8:8f:8b:9c:a6:08:e8:8b:
         d9:a4:7d:62:bf:e1:fa:3b:a8:98:09:2b:20:86:83:e2:9f:ba:
         0d:86:69:64:f0:f8:08:6b:e5:fe:e4:59:e3:05:6b:a6:fd:67:
         00:9b:73:76:f4:2e:7f:60:5d:25:bf:7a:ce:03:3f:90:ed:2f:
         23:56:b0:1c:8e:f2:d1:a3:74:bc:bb:0e:ac:ea:a9:5f:e6:ed:
         0d:37:21:ba:bf:54:28:03:f7:ed:10:15:c3:26:fd:5d:7b:00:
         a8:1f:0a:51:b5:46:4f:14:67:63:38:54:78:37:80:cd:53:5e:
         9a:23:1b:81:2b:eb:fd:c1:e6:73:20:f7:cd:4e:95:e3:98:e5:
         be:de:f5:ac:0e:9e:ce:15:66:ca:a1:fb:c9:f0:94:f9:30:82:
         1c:80:fa:5c:da:9f:2d:b3:98:25:6b:61:e1:48:4a:3b:94:e4:
         e0:5d:f2:34:75:f7:cb:a8:9d:f5:39:c9:0f:09:50:95:18:76:
         02:94:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:59 2026 by rpki-client