Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/ba1dad00-8c06-3197-b049-011b2b1c2806.roa
File:                     ba1dad00-8c06-3197-b049-011b2b1c2806.roa (raw, json)
Hash identifier:          Tw/OSxLAiX/CsxTab24Mj+QMaE1PaC390O+CXEu09rw=
Subject key identifier:   5B:63:9D:C3:D2:98:D8:5B:1D:B8:8F:D8:03:B9:7B:FB:7C:EE:28:3A
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F43285849E79874EC2216866AE9036400
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/ba1dad00-8c06-3197-b049-011b2b1c2806.roa
Signing time:             Mon 19 May 2025 11:52:44 +0000
ROA not before:           Mon 19 May 2025 11:52:44 +0000
ROA not after:            Sun 17 Aug 2025 11:52:44 +0000
asID:                     49
IP address blocks:        129.6.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:98:74:ec:22:16:86:6a:e9:03:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: May 19 11:52:44 2025 GMT
            Not After : Aug 17 11:52:44 2025 GMT
        Subject: CN=7d9a015a-f454-4e9f-be91-e94f7c8d5e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:0a:8c:34:54:dc:50:2f:f4:d2:52:18:6e:
                    12:bc:9f:bb:3c:50:47:df:fd:f3:c0:6d:b2:7d:88:
                    a8:c8:cf:8f:13:29:90:50:e7:03:d5:34:c5:32:34:
                    95:10:a9:0d:52:e2:27:d6:af:76:6b:b7:4f:d8:1e:
                    a6:87:20:de:ba:10:75:e0:16:45:26:e0:25:ee:14:
                    e7:33:46:c5:7e:cc:92:8a:b9:17:46:ec:fe:84:5b:
                    68:4c:74:2b:88:e6:9d:af:d9:e1:05:d4:e9:14:85:
                    9d:cc:99:15:e1:92:47:24:3b:36:ff:6c:e9:21:ff:
                    18:7b:7c:aa:97:80:a0:d5:f0:6c:9a:bb:1a:b2:8d:
                    44:6a:3b:37:98:77:8c:ef:f6:0a:39:f0:4d:b8:7e:
                    69:19:67:55:1d:0c:1d:12:a3:97:b4:9e:4d:03:dd:
                    5b:af:7c:a3:eb:a9:35:bc:a8:1d:ff:58:b1:61:2d:
                    0d:8e:06:46:2a:42:82:d6:ae:9d:f8:81:23:15:18:
                    bf:d5:39:c6:9e:4b:3a:49:26:8c:d9:7c:20:3b:ee:
                    7c:e6:e8:47:ed:a1:da:99:7b:20:ea:65:1f:4d:ce:
                    b7:43:99:a6:e5:f7:16:27:3f:51:ce:b6:2b:9a:11:
                    db:15:3d:14:58:c3:c9:58:52:07:7b:05:31:9c:28:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:63:9D:C3:D2:98:D8:5B:1D:B8:8F:D8:03:B9:7B:FB:7C:EE:28:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/ba1dad00-8c06-3197-b049-011b2b1c2806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:77:46:6e:c9:9b:6c:46:95:f3:1a:87:6c:ad:85:b4:59:
         2b:77:1b:10:97:f7:f3:b1:7d:80:7f:cc:a0:75:2f:37:9a:6d:
         63:d8:8f:3f:16:e3:b1:30:72:f6:b4:71:c0:76:a0:a8:0f:96:
         7f:c2:71:8d:d0:96:fc:18:83:c3:57:ba:b7:24:be:d2:d4:75:
         2d:69:f5:35:79:4c:fa:52:78:5b:51:4e:7d:de:c6:7f:30:38:
         66:b2:1c:50:4d:58:d0:24:d9:f3:60:61:c3:0e:95:57:81:b4:
         9d:25:ad:02:c2:98:ca:57:03:d5:8e:f5:c4:18:0d:62:b9:4e:
         bc:a3:50:33:88:e3:e7:3d:26:93:43:95:1e:10:5e:d2:a6:ba:
         70:1a:db:8a:72:53:bf:72:09:13:a0:ae:13:cc:7b:f1:00:f9:
         8a:25:81:c5:7e:8e:42:9c:bd:1f:ef:61:f0:28:8b:96:de:3a:
         99:55:9e:0c:7e:f2:cf:52:17:29:91:16:83:d8:7c:ae:c9:28:
         f5:ed:c4:ed:ac:38:85:b7:65:ac:2e:5c:c3:16:d5:c6:ba:f4:
         cc:81:45:27:67:d2:8b:b0:76:f8:06:66:d2:21:78:18:f3:fd:
         8f:9b:48:f1:6d:fe:ba:43:d6:f3:58:5c:05:27:3c:65:3f:01:
         44:a2:28:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:29:21 2025 by rpki-client