Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8e3f06c0-790f-3059-8626-308c41c8a677.roa
File:                     8e3f06c0-790f-3059-8626-308c41c8a677.roa (raw, json)
Hash identifier:          k0wbTQXTPToRX6mB2uT0lOYyLNDHiztUzciVraPbOxo=
Subject key identifier:   61:E6:7F:3A:3A:FE:BA:F7:1B:E6:1F:FE:3E:16:97:0C:EF:2B:39:B4
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584D67DFB75B4C7212C9DB3C2640
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8e3f06c0-790f-3059-8626-308c41c8a677.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     49
IP address blocks:        129.6.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:b7:5b:4c:72:12:c9:db:3c:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=3db1eb13-ca2e-4ac6-af21-c7e8dafd05f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:96:42:0c:b9:88:7e:44:78:3d:bf:de:b9:
                    99:e0:b2:fe:5a:f7:90:50:ff:43:9f:58:30:ba:73:
                    7b:f8:41:42:f3:7f:7e:6d:03:84:b4:43:8b:ab:2b:
                    86:e1:73:fb:d0:ff:5e:1b:e8:45:33:60:94:77:de:
                    65:5e:2e:cf:74:15:fc:af:bc:fe:15:c4:52:15:a7:
                    a1:a6:36:2e:47:a7:58:d3:ee:4a:d9:96:c3:79:a3:
                    61:ab:e7:c9:8d:5b:2c:64:3c:74:87:20:aa:9c:82:
                    13:0a:39:b1:9d:c9:b7:1d:47:de:b8:36:6a:18:cd:
                    cd:a3:c3:bc:81:36:c3:b9:82:4a:67:79:7b:ba:23:
                    b6:59:b9:fd:ee:f4:41:b6:aa:9d:97:9f:9f:31:00:
                    71:4d:05:64:82:41:11:5c:88:1a:12:53:53:15:42:
                    70:ed:95:28:d2:db:85:0d:90:0b:5a:5b:a3:8c:94:
                    a8:78:d0:80:c9:e5:9e:87:f8:b5:57:a6:33:9b:62:
                    9f:fc:85:c1:1a:49:45:b1:da:51:e4:c4:7f:11:aa:
                    72:af:b6:0a:d8:70:d1:58:db:11:6a:d2:3f:4f:9a:
                    ab:df:26:12:e8:5a:9a:1e:f9:dd:fd:2d:4b:b7:ed:
                    ac:b7:fc:b2:85:dd:09:80:dd:79:d9:17:9e:59:45:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E6:7F:3A:3A:FE:BA:F7:1B:E6:1F:FE:3E:16:97:0C:EF:2B:39:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8e3f06c0-790f-3059-8626-308c41c8a677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:bb:6f:43:fa:59:66:e1:f6:db:a8:d4:0d:b9:f6:7b:16:
         b5:33:27:f4:25:c9:54:30:03:3e:4c:5e:3f:7f:32:fc:e2:af:
         a7:49:20:3c:f4:b4:5d:12:c4:7c:80:d6:0e:89:91:e7:e9:71:
         8f:32:3c:f8:db:9d:6e:51:5f:e4:b6:a3:f1:56:8b:71:1d:fd:
         3d:43:d8:11:8c:01:b8:2d:5d:d3:6b:d1:ff:b0:a1:f4:24:3a:
         c8:1a:52:16:1f:0f:fe:97:04:9e:97:a5:c3:a6:58:3a:61:e1:
         72:67:30:df:d4:f6:4d:f7:20:59:1e:f1:0a:75:23:79:af:35:
         d9:88:ed:54:cc:3f:8f:86:e2:d8:a1:c8:74:c0:cb:c2:05:3a:
         86:27:b4:a6:4c:2c:cf:1b:af:89:be:d1:2f:76:99:b5:20:8b:
         a1:01:d9:9e:9f:ef:96:9a:05:d3:38:c4:73:17:2f:c3:68:d1:
         05:11:54:c5:d1:38:91:32:c8:00:8b:89:b5:8b:cf:42:28:8b:
         e5:f7:4a:f5:08:67:6f:2c:77:cd:90:55:ff:bc:bd:fe:9b:5c:
         70:09:88:94:50:17:a6:97:5f:47:e2:24:4f:7d:ff:bc:e7:10:
         7a:7d:fa:ae:fa:5c:ce:ba:57:35:0c:07:75:c6:e9:6a:d2:c8:
         60:a5:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:47 2026 by rpki-client