Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3511fa9-e4a3-38cd-b40d-beda7bf52618.roa
File:                     d3511fa9-e4a3-38cd-b40d-beda7bf52618.roa (raw, json)
Hash identifier:          ICL702ds6EVzyXwP0UdLcV+nrH+eMXZAcyITXz+3WVE=
Subject key identifier:   7A:DE:D6:CA:42:E8:E4:69:0C:71:7D:C0:6A:30:AC:DB:66:F2:A2:48
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584F498C21D947EF4C0ACCF6ABA0
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3511fa9-e4a3-38cd-b40d-beda7bf52618.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     49
IP address blocks:        129.6.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:21:d9:47:ef:4c:0a:cc:f6:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0499c242-b8e3-4062-b040-e1fabfd93564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:6c:8a:9a:73:cd:2f:e2:87:1c:b2:19:1a:
                    de:a7:2d:a5:80:a5:00:94:a0:3f:75:9b:88:8f:9e:
                    07:e7:2d:ea:91:b2:51:61:fb:c7:81:ad:01:38:cf:
                    ab:d4:99:98:8b:20:8a:ea:49:33:fe:25:72:7c:a4:
                    5d:2b:87:37:78:5f:80:a6:60:75:a5:41:9d:9e:41:
                    ce:5f:47:3c:55:b9:c0:db:f0:d6:8d:df:ab:0d:69:
                    87:f7:ed:bf:65:6a:c3:4d:c9:66:9b:7f:fa:96:33:
                    9a:08:20:87:50:d3:13:ea:84:63:ee:9f:9a:b8:0e:
                    fb:1a:bb:7d:a9:1e:9c:90:0a:2b:69:da:c4:72:7d:
                    07:f2:f0:f6:87:94:b1:53:bc:65:63:30:7d:f2:b9:
                    c5:64:cd:bc:56:ea:92:35:8e:14:6e:0c:74:a7:67:
                    c6:f6:79:51:92:70:88:28:71:4b:d3:c2:d7:ef:64:
                    7f:e4:52:ef:48:4d:fe:37:01:df:fe:d0:21:8a:40:
                    aa:c7:c8:1b:9e:7c:c6:53:5c:59:68:08:eb:38:cd:
                    af:92:35:5a:a4:9d:0f:26:2e:5c:38:29:72:9a:28:
                    32:d0:cf:6b:24:01:19:05:93:da:c3:3a:cb:36:90:
                    11:c1:33:22:24:25:ed:21:75:aa:af:b2:e0:9d:d5:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DE:D6:CA:42:E8:E4:69:0C:71:7D:C0:6A:30:AC:DB:66:F2:A2:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3511fa9-e4a3-38cd-b40d-beda7bf52618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:55:25:6e:5f:1c:4b:2e:74:4c:25:7a:a7:0e:7a:91:d2:a0:
         d5:00:66:b5:21:c5:8f:b4:1f:de:c4:32:7f:25:8c:94:84:ac:
         8f:0e:0b:a6:05:30:95:29:23:3d:d7:e2:57:61:c7:a0:95:ed:
         d1:96:8a:b8:9b:fa:43:a3:6d:27:59:3a:26:0f:d4:aa:c9:a0:
         db:f0:3b:9a:02:38:11:93:75:d3:07:b8:1d:15:54:45:44:5b:
         83:d2:c4:60:5c:be:ce:0b:45:47:f8:6c:71:dd:b6:36:b7:b2:
         bf:dd:f2:da:a2:87:58:28:56:39:51:cc:2b:53:fe:47:0e:cf:
         fb:61:b8:2c:9b:8e:aa:79:7c:1b:81:e4:d9:bf:7c:e3:58:37:
         a9:f8:ea:a9:41:87:ca:78:7b:b3:e5:02:6a:63:c7:8b:cf:f2:
         78:f5:88:ef:0b:23:7e:db:58:59:ec:94:0f:19:8f:34:c8:f2:
         f4:1a:88:0e:89:ec:c9:9f:31:f8:45:19:6b:e5:12:f3:6d:d2:
         35:ef:f3:d0:0b:da:13:ba:3b:0a:66:20:47:f4:b9:7b:5e:ac:
         0c:09:72:ec:44:ae:ce:fc:ec:ce:20:a4:c7:40:f5:21:c5:95:
         68:e4:47:22:22:e6:7b:06:97:cd:2f:68:1d:bc:68:b7:c0:29:
         03:aa:45:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:16 2026 by rpki-client