Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa
File:                     8c842234-5cac-3023-af77-9c58ff2c7c7c.roa (raw, json)
Hash identifier:          9lsKRg/pw3pge8Fa/XGRgphY0E3EtSS1DIj7F2FJRrI=
Subject key identifier:   65:DD:D7:18:44:9E:36:46:71:7B:15:A8:58:B1:06:02:EA:80:75:42
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584EEA874B0B712D530264E0DF40
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     49
IP address blocks:        129.6.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:4b:0b:71:2d:53:02:64:e0:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=4581ac50-3c94-4dea-8696-598a10edb35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:27:39:d3:8a:5e:71:5a:5a:fe:30:0e:2a:
                    40:e7:bc:a0:41:50:cf:51:b6:49:4f:db:5c:8c:83:
                    20:5d:ab:26:bd:2b:77:fb:e5:70:cd:39:87:a9:5c:
                    11:b2:bb:13:a0:12:a7:39:80:ee:f8:43:38:9d:11:
                    ce:f7:50:04:94:95:b1:30:55:bf:c2:99:00:9b:20:
                    e2:46:82:23:a5:68:01:b5:4c:32:21:ac:77:52:13:
                    ea:7f:36:68:c5:8a:16:b6:a1:8d:43:61:ad:39:4d:
                    21:19:a7:51:0f:d9:b8:18:e5:9f:a0:94:97:af:c1:
                    18:02:72:d2:0f:33:1a:cf:c5:dd:55:97:04:98:75:
                    8d:d4:68:50:4b:f6:50:3a:f0:04:5b:4c:9f:8e:75:
                    8c:76:32:48:d3:af:02:20:82:7b:23:6d:c9:e1:90:
                    53:4f:79:ca:00:c9:9b:de:98:26:da:59:e5:0d:06:
                    f6:6b:b7:2a:8b:97:00:71:ca:e9:98:02:b3:9b:c5:
                    9d:70:f4:87:3a:d6:80:37:fe:5d:37:5c:87:a8:9e:
                    ed:68:32:37:27:0d:10:24:e1:fd:ff:27:c2:eb:6a:
                    19:c9:45:95:6e:7a:d3:05:da:30:b7:2c:94:a4:f5:
                    84:a9:32:c7:69:81:56:15:d5:27:37:cd:1e:5c:9f:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:D7:18:44:9E:36:46:71:7B:15:A8:58:B1:06:02:EA:80:75:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:d2:4f:f3:56:3b:5d:0d:dd:8f:f0:cb:cc:3b:32:e0:6e:
         61:32:e7:3c:98:22:91:e3:68:fd:19:f1:68:09:20:90:e3:38:
         5b:bb:8b:93:8f:2a:89:13:33:ec:76:d4:d6:4b:9a:98:f9:9b:
         51:47:d1:c4:d3:51:06:12:25:51:c7:40:cb:68:9c:95:42:2c:
         9c:00:29:6e:2e:a9:d0:18:4a:0b:ff:47:b5:4c:c0:60:cb:8d:
         4e:47:17:cb:23:6d:30:c2:6e:0e:ce:d2:6f:5d:e3:d9:60:fa:
         a1:43:f9:15:c6:8b:68:9f:9a:67:9c:57:6b:4c:53:2f:7b:08:
         8a:77:fa:ba:32:ed:f8:f2:67:ec:92:43:88:91:4b:89:cd:2d:
         a0:eb:9c:13:84:0c:29:af:74:c1:67:a6:3a:3b:78:94:88:14:
         d3:a0:15:28:4a:e6:af:16:c9:06:88:e2:89:1e:fd:03:58:b5:
         e6:54:58:4a:0d:fa:c2:52:cc:63:3a:b3:d1:16:88:85:c6:dc:
         ad:3e:3d:d0:a0:1f:61:e0:b2:49:70:a8:8c:92:c3:88:24:30:
         8d:0e:1a:77:92:69:32:fb:ab:1d:34:7c:d6:00:73:7a:f1:f4:
         b4:64:5b:86:bf:a6:85:35:72:44:7d:84:8a:03:8b:33:a8:06:
         8b:1f:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 08:33:27 2026 by rpki-client