Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/af4abd7c-5018-3182-921d-9e1e8fd38f16.roa
File:                     af4abd7c-5018-3182-921d-9e1e8fd38f16.roa (raw, json)
Hash identifier:          T9sOMr3oPRk4f/p7avW8qIWmrkK5kTMUmQ/6Yzvs73s=
Subject key identifier:   97:35:B8:9F:F4:5D:5C:EF:68:DF:53:5D:5C:F5:FC:50:54:3B:AF:62
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584F4973670782AF402BA4E82400
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/af4abd7c-5018-3182-921d-9e1e8fd38f16.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     49
IP address blocks:        129.6.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:67:07:82:af:40:2b:a4:e8:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8ccbd8bf-f901-4a32-a5c2-4d6b08e52067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:79:35:0b:0d:2e:aa:31:a9:06:01:96:bf:a7:
                    eb:e8:32:11:2d:38:b0:0b:56:49:ee:25:80:b7:84:
                    10:bc:19:9e:ea:74:0d:06:aa:bc:b6:fa:5e:8f:c1:
                    83:33:c0:97:c7:23:1f:4a:f7:d8:73:78:40:51:99:
                    12:2b:ea:d7:3e:0d:fe:f2:37:ed:a9:e6:74:fd:57:
                    8b:7e:b0:50:dc:44:06:aa:57:a4:94:4c:00:4a:0d:
                    27:d3:9f:c6:3d:65:56:6f:16:08:9a:52:c9:58:9b:
                    eb:77:59:ca:1f:22:d4:02:fa:28:8f:6d:c9:81:0d:
                    2a:4e:65:da:fd:1d:32:b8:71:c7:9f:20:22:82:f8:
                    97:7e:9e:d2:dd:ff:88:47:10:a8:0c:3e:53:9d:58:
                    b5:d1:53:6c:64:44:f4:46:83:99:29:f4:ce:1d:b7:
                    62:5e:8d:4d:f6:ed:41:fd:18:d9:77:55:35:04:c5:
                    b5:4c:97:09:37:15:91:43:b7:aa:5e:66:a1:35:1e:
                    19:92:a9:27:82:01:5f:8f:eb:84:58:1b:a8:22:24:
                    2e:ca:68:e4:ea:9f:a5:8e:51:b2:4d:d8:fb:71:5a:
                    c6:59:2b:65:04:f9:b7:23:f4:f1:c2:33:73:93:13:
                    3c:b1:23:ea:ca:36:52:45:cf:c4:fa:d5:77:f3:82:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:35:B8:9F:F4:5D:5C:EF:68:DF:53:5D:5C:F5:FC:50:54:3B:AF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/af4abd7c-5018-3182-921d-9e1e8fd38f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:bb:ed:93:c0:97:a8:78:35:a1:a7:e4:19:fe:77:2a:12:
         83:ea:21:4f:5a:41:7e:cf:b0:1e:cb:6e:c7:c9:b3:b1:8e:a3:
         cd:3f:3d:9e:f7:79:97:1b:c4:fb:df:8c:3a:d6:d8:d2:ec:cc:
         0f:85:ac:c2:85:ae:9a:bc:5b:79:d0:9b:fe:cd:38:b5:5b:87:
         81:b2:18:89:1a:bf:97:bd:91:28:ce:35:97:5d:ef:77:ed:c2:
         8c:20:60:38:86:b2:d2:4d:59:a4:85:56:62:88:73:e3:b9:84:
         03:3e:a8:ce:c6:0a:f1:f5:3f:58:63:08:7e:35:11:1d:44:c2:
         8b:b7:f2:29:98:f3:eb:a3:85:3f:ad:c0:a9:a9:dd:81:2e:49:
         1b:7d:b1:2b:4e:2e:f0:c3:ee:31:ad:c2:44:d3:fb:7b:90:50:
         dd:e4:de:a3:aa:e1:e1:fb:6e:aa:32:50:dc:95:75:2b:ed:17:
         5c:69:6b:29:08:be:e4:40:03:c7:06:ff:bd:52:ce:2d:de:e6:
         1c:db:d0:85:9a:b9:4a:71:32:61:65:7d:7b:ca:c6:56:28:7f:
         3b:64:62:95:04:52:e7:db:82:e7:d3:b4:54:f2:71:93:3c:97:
         b3:fc:ab:a7:6b:d1:38:92:41:84:2c:6b:c9:d7:58:4c:75:7b:
         79:b1:b2:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2cHgq9AK6ToJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx
YzcyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OGNjYmQ4YmYtZjkwMS00YTMyLWE1YzItNGQ2YjA4ZTUyMDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xk1Cw0uqjGpBgGWv6fr6DIRLTiwC1ZJ7iWA
t4QQvBme6nQNBqq8tvpej8GDM8CXxyMfSvfYc3hAUZkSK+rXPg3+8jftqeZ0/VeL
frBQ3EQGqleklEwASg0n05/GPWVWbxYImlLJWJvrd1nKHyLUAvooj23JgQ0qTmXa
/R0yuHHHnyAigviXfp7S3f+IRxCoDD5TnVi10VNsZET0RoOZKfTOHbdiXo1N9u1B
/RjZd1U1BMW1TJcJNxWRQ7eqXmahNR4ZkqknggFfj+uEWBuoIiQuymjk6p+ljlGy
Tdj7cVrGWStlBPm3I/TxwjNzkxM8sSPqyjZSRc/E+tV384JmDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJc1uJ/0XVzvaN9TXVz1/FBUO69iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2
YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYWY0YWJkN2MtNTAxOC0z
MTgyLTkyMWQtOWUxZThmZDM4ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy
NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1
MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh
M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgQY0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8eu+2TwJeoeDWhp+QZ/ncqEoPqIU9aQX7PsB7LbsfJs7GOo80/PZ73
eZcbxPvfjDrW2NLszA+FrMKFrpq8W3nQm/7NOLVbh4GyGIkav5e9kSjONZdd73ft
wowgYDiGstJNWaSFVmKIc+O5hAM+qM7GCvH1P1hjCH41ER1Ewou38imY8+ujhT+t
wKmp3YEuSRt9sStOLvDD7jGtwkTT+3uQUN3k3qOq4eH7bqoyUNyVdSvtF1xpaykI
vuRAA8cG/71Szi3e5hzb0IWauUpxMmFlfXvKxlYofztkYpUEUufbgufTtFTycZM8
l7P8q6dr0TiSQYQsa8nXWEx1e3mxssw=
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:18:40 2026 by rpki-client