Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8d27df24-28b3-3a08-a0a0-bc964278cb89.roa
File:                     8d27df24-28b3-3a08-a0a0-bc964278cb89.roa (raw, json)
Hash identifier:          83pz0RZaFqvMxuEpbSTxGnb6RxY/uUXcpbat5gflSpk=
Subject key identifier:   A5:65:2A:02:70:F2:EF:85:97:B6:27:92:8F:5A:B5:14:4D:9B:DA:C5
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584BA7CCE4DFC9577F8E7810E3A0
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8d27df24-28b3-3a08-a0a0-bc964278cb89.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     49
IP address blocks:        129.6.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:e4:df:c9:57:7f:8e:78:10:e3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=172b2ac1-cb07-4ef7-b907-e6556cd444ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:fc:ac:74:20:80:41:16:d9:57:25:ee:b0:
                    dd:6a:d1:b1:fb:2f:41:04:b9:00:70:96:64:a0:9b:
                    06:12:db:39:84:90:63:53:e7:96:67:fa:72:ff:c5:
                    52:2e:04:20:26:67:f4:b4:2a:ac:f9:d6:eb:59:89:
                    9a:f1:76:56:a4:e3:5a:63:c1:28:36:b6:23:af:9c:
                    35:18:ac:39:03:9d:ad:c5:0e:54:28:7b:01:9d:61:
                    07:e2:d3:f6:a9:06:0b:46:df:bd:59:d2:66:80:84:
                    a7:50:45:95:8e:02:1b:e3:8c:1d:a4:be:88:de:61:
                    63:23:98:5b:b9:71:6c:4b:1d:4e:2e:9e:16:9c:cc:
                    05:bc:20:d9:72:1a:a5:aa:62:6b:4d:6d:34:96:36:
                    fa:f0:ab:16:81:ee:75:82:5b:4e:b6:98:0c:ae:02:
                    c3:89:08:8e:19:af:dd:69:77:23:b3:ea:a1:2b:3b:
                    05:21:b4:a7:c3:2f:b1:70:66:ab:f4:62:64:b1:55:
                    ea:18:98:f4:4b:ff:fe:fc:66:83:47:02:70:6b:a1:
                    84:a6:8c:7b:b3:88:20:a0:1a:18:51:2c:e6:57:7c:
                    cf:fb:ab:ea:a7:b2:b1:6a:03:f3:69:9d:c7:e2:d5:
                    09:7f:aa:5c:cf:60:14:ba:2e:d1:de:60:54:68:3b:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:65:2A:02:70:F2:EF:85:97:B6:27:92:8F:5A:B5:14:4D:9B:DA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8d27df24-28b3-3a08-a0a0-bc964278cb89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:64:cb:43:fc:82:5c:c5:41:45:51:31:25:dc:1e:61:3e:4e:
         c5:24:d6:2c:66:b6:84:bb:46:ab:1c:6f:ff:4e:59:d5:7d:c5:
         15:21:33:db:2b:34:a9:eb:85:fc:01:1a:45:05:8b:90:e2:8a:
         e0:fc:4a:6d:ca:cf:78:1e:ca:90:2d:05:c4:89:45:86:f8:d9:
         78:39:65:c4:23:60:89:78:78:94:63:3f:da:30:33:0d:8b:a7:
         85:b2:ce:a8:07:56:64:18:21:ea:0e:ba:d9:40:b4:cd:b1:e8:
         49:b6:1b:05:f4:4f:3a:59:be:b8:52:3e:00:bb:4d:16:a3:08:
         86:61:09:b0:f3:e3:eb:57:a7:9e:91:1e:04:40:f6:b3:64:3b:
         36:9a:6a:a2:d8:34:ee:20:ae:e9:24:f9:8b:00:c4:8c:ef:54:
         5b:a7:c0:7e:e5:e6:e6:d6:91:06:8d:0b:71:25:f4:1e:5d:1e:
         3a:a2:f3:2b:bf:a3:39:64:08:7a:38:22:ae:50:83:8c:b5:b0:
         05:bc:03:24:90:2c:84:4a:87:9f:6c:54:50:50:6a:e2:b2:3f:
         e3:eb:68:7c:0b:13:0f:52:6f:b6:2e:cf:27:cd:5c:e1:c4:22:
         ac:41:b8:c3:08:15:d5:40:e3:19:5f:d3:4e:08:fc:2d:b3:86:
         b3:a0:23:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOTfyVd/jngQ46AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx
YzcyMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
MTcyYjJhYzEtY2IwNy00ZWY3LWI5MDctZTY1NTZjZDQ0NGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIP8rHQggEEW2Vcl7rDdatGx+y9BBLkAcJZk
oJsGEts5hJBjU+eWZ/py/8VSLgQgJmf0tCqs+dbrWYma8XZWpONaY8EoNrYjr5w1
GKw5A52txQ5UKHsBnWEH4tP2qQYLRt+9WdJmgISnUEWVjgIb44wdpL6I3mFjI5hb
uXFsSx1OLp4WnMwFvCDZchqlqmJrTW00ljb68KsWge51gltOtpgMrgLDiQiOGa/d
aXcjs+qhKzsFIbSnwy+xcGar9GJksVXqGJj0S//+/GaDRwJwa6GEpox7s4ggoBoY
USzmV3zP+6vqp7KxagPzaZ3H4tUJf6pcz2AUui7R3mBUaDumFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVlKgJw8u+Fl7Ynko9atRRNm9rFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2
YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvOGQyN2RmMjQtMjhiMy0z
YTA4LWEwYTAtYmM5NjQyNzhjYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy
NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1
MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh
M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgQaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRky0P8glzFQUVRMSXcHmE+TsUk1ixmtoS7Rqscb/9OWdV9xRUhM9sr
NKnrhfwBGkUFi5DiiuD8Sm3Kz3geypAtBcSJRYb42Xg5ZcQjYIl4eJRjP9owMw2L
p4WyzqgHVmQYIeoOutlAtM2x6Em2GwX0TzpZvrhSPgC7TRajCIZhCbDz4+tXp56R
HgRA9rNkOzaaaqLYNO4grukk+YsAxIzvVFunwH7l5ubWkQaNC3El9B5dHjqi8yu/
ozlkCHo4Iq5Qg4y1sAW8AySQLIRKh59sVFBQauKyP+PraHwLEw9Sb7YuzyfNXOHE
IqxBuMMIFdVA4xlf004I/C2zhrOgI3k=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:45:01 2025 by rpki-client