Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa
File:                     9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa (raw, json)
Hash identifier:          GdzJjh+h52pAqKytmSxmR1UvZnXcU9eDTZluwMXSvXQ=
Subject key identifier:   6F:4F:C5:1F:E6:85:47:4B:E3:39:DD:9D:00:A0:51:A3:B1:A1:2F:F0
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584BA7CD1732D055ED91C22E7D20
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     49
IP address blocks:        129.6.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:17:32:d0:55:ed:91:c2:2e:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=2e107622-d11e-43d6-b7c6-2f0a25fc6348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:2e:be:05:63:e0:e1:c1:fe:ce:69:b5:5f:
                    12:66:e2:59:aa:4d:30:72:c5:d5:42:c4:3d:c3:6d:
                    b9:bb:22:aa:df:fc:ba:25:02:9e:bb:a0:3d:b1:c5:
                    5d:03:fd:7c:69:e4:75:1e:28:41:34:b3:2f:99:86:
                    2d:89:13:9c:74:b9:19:30:43:73:a6:d8:39:df:70:
                    03:39:6a:bc:66:dd:ea:b6:38:f9:bf:2b:5c:d6:5f:
                    1a:0f:10:b4:38:02:c1:24:09:77:83:ad:24:13:63:
                    00:20:59:db:3e:cc:dd:42:92:fe:dc:ba:c3:99:c2:
                    30:56:20:b3:8d:d6:1a:29:85:6f:67:4b:d0:44:e3:
                    d7:35:02:bb:da:25:30:37:0b:7d:9b:2e:c2:91:7b:
                    59:f7:c9:76:cf:cc:fc:c3:07:b9:6a:2e:49:b6:5e:
                    83:78:43:a8:c8:a7:f1:fa:37:8c:b3:ee:b9:95:72:
                    00:8d:55:8b:9f:6c:13:21:02:f1:43:e8:41:5b:80:
                    38:01:d2:a4:98:aa:58:d5:68:bf:89:cc:0f:46:2a:
                    91:ac:79:a6:c6:02:2a:61:6d:88:2d:ae:af:10:53:
                    c9:47:14:76:41:64:55:46:55:48:9c:65:b6:b3:78:
                    83:77:c0:14:9d:78:45:b9:4b:43:20:05:8c:1e:47:
                    fb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4F:C5:1F:E6:85:47:4B:E3:39:DD:9D:00:A0:51:A3:B1:A1:2F:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/9dbcd6b4-6135-3edb-9317-e0f7cd6febdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:02:df:61:b3:24:c0:ee:b0:1f:b9:f6:40:93:11:de:f0:80:
         19:4d:c6:7c:91:2b:36:7d:ca:06:4f:e0:bd:0c:54:7d:3f:1e:
         cb:97:e9:91:4f:6c:f0:85:0a:c4:52:b2:a8:6a:1e:ac:85:65:
         3a:8c:81:35:ee:a4:b6:e2:27:3d:68:a1:22:c1:13:87:f2:9c:
         b3:3b:10:cd:30:3a:76:3d:ba:a6:c2:ad:e7:4c:f5:85:07:d2:
         50:a1:11:6e:34:17:7c:19:fe:1e:09:b6:05:c6:1c:61:2b:80:
         16:54:f7:0a:6d:43:77:da:e2:fc:56:5c:a4:02:8c:b0:34:03:
         16:94:cf:af:16:fc:16:1a:89:bc:a2:38:27:d7:48:bb:8f:e6:
         93:8f:b8:57:ba:ec:b0:d4:a2:d9:8d:6a:8f:f6:81:25:ee:a8:
         f7:b1:b8:be:1e:cc:56:93:b9:40:61:a2:0b:7b:68:a7:e6:0f:
         2f:37:25:1a:10:d8:04:91:8f:f3:5c:02:0f:72:6a:9f:1a:4e:
         3d:ef:33:89:bb:ea:38:36:88:a3:74:5d:58:a7:59:92:b8:fd:
         aa:cc:5d:68:bf:22:0c:18:9b:81:04:1a:e3:2e:39:c3:30:e4:
         0d:63:60:a8:c3:d3:52:93:91:df:42:22:13:9e:e0:41:2f:50:
         7c:af:3b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:29:55 2025 by rpki-client