Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8e3f06c0-790f-3059-8626-308c41c8a677.roa
File:                     8e3f06c0-790f-3059-8626-308c41c8a677.roa (raw, json)
Hash identifier:          3YwabKfTQr5nwcRRCOjpWF2rSKkijE5MS3EptuXM83w=
Subject key identifier:   29:DC:84:92:E8:DF:38:08:C0:A6:87:E3:2D:E3:99:3E:74:7F:FD:84
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584BA7CCE68C96A34B450CB41240
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8e3f06c0-790f-3059-8626-308c41c8a677.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     49
IP address blocks:        129.6.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:e6:8c:96:a3:4b:45:0c:b4:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=e93ba632-5d05-48a4-ba18-0f4815e608e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:98:35:a6:42:59:fd:f4:83:3a:9d:eb:dc:
                    66:14:62:e0:6f:d1:93:f9:52:02:7d:6c:c2:f9:8c:
                    02:3f:ac:62:bb:f8:3a:a2:cd:85:73:0e:77:66:b2:
                    96:50:e2:20:7a:54:55:c2:34:80:8b:53:ca:c1:2c:
                    f8:d1:54:04:90:4e:80:71:f3:57:cd:50:9f:7e:e1:
                    be:c8:fa:8e:5d:1b:b0:65:72:9b:91:57:36:60:e6:
                    0b:44:a4:09:93:27:5c:75:8b:f8:69:94:24:57:b3:
                    a5:0c:27:75:5f:33:0b:56:64:c8:81:30:c2:5d:27:
                    51:4a:8f:a4:8b:e9:2c:b1:63:b6:64:52:f4:7a:ee:
                    87:46:98:73:aa:ee:16:9e:9b:99:da:47:fe:07:24:
                    e1:a8:31:c0:f0:b4:20:f0:24:00:1d:95:40:89:e5:
                    38:84:2d:38:a0:09:dd:4f:4c:ba:9b:38:af:e0:2d:
                    60:be:a0:9a:7f:b1:c8:60:0c:5d:c7:f3:24:fa:a4:
                    1e:7b:04:67:b2:cd:75:dc:e5:6e:c2:47:89:6d:92:
                    50:30:48:7f:bf:f9:9f:f2:2f:8d:cd:3b:6d:6e:c0:
                    db:7d:1b:2e:71:89:9b:6b:3e:d6:9b:5f:9f:05:16:
                    b9:a3:35:e9:6c:2b:f9:7f:9a:51:6b:94:28:22:d3:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DC:84:92:E8:DF:38:08:C0:A6:87:E3:2D:E3:99:3E:74:7F:FD:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8e3f06c0-790f-3059-8626-308c41c8a677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:33:22:59:57:41:f1:67:e3:dc:cf:07:50:19:c9:c7:8d:50:
         5a:7a:c2:a4:f8:a1:ec:66:2e:d6:62:b4:99:e0:a1:6f:d8:11:
         a1:aa:6b:77:f9:44:dc:14:33:0a:6c:a8:61:e9:6c:c7:69:47:
         0e:85:50:ba:3f:09:d2:45:44:09:5b:36:ae:29:bd:25:23:f2:
         be:45:90:9e:e7:f8:f4:60:98:46:9e:9a:f7:d8:9b:53:5f:fa:
         c9:26:f8:9d:a4:f9:3f:6b:68:64:f0:a5:2d:fa:9d:75:01:66:
         c9:39:f9:fa:b4:d9:01:a8:f2:2d:f0:2b:76:35:56:14:c6:7a:
         86:b8:8e:fe:1e:18:cc:34:8c:c6:2a:6a:2c:a6:05:e5:20:99:
         ad:ea:0b:4e:e1:8c:18:f2:80:3e:01:9d:84:83:2a:d7:68:a2:
         bd:38:78:ff:ee:35:53:4b:e1:2e:79:9d:bd:8c:85:e5:79:fa:
         18:8a:7d:98:2c:de:b4:ea:a5:14:c5:9a:92:38:c5:6f:57:5a:
         97:e8:a9:84:61:d2:bd:f6:e2:ca:ca:fe:ef:e4:ef:c9:a3:6b:
         5d:96:56:f0:99:6c:a5:e6:77:5d:8c:c4:fe:7c:9d:a7:2c:7a:
         18:75:d9:8d:48:c1:81:f1:ac:d5:65:9b:f1:93:c8:33:e0:ff:
         8c:09:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:12 2025 by rpki-client