Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/3cd49df1-4dac-3a8c-a68b-77c00f5738cc.roa
File:                     3cd49df1-4dac-3a8c-a68b-77c00f5738cc.roa (raw, json)
Hash identifier:          DxUgR66M/YUbL8TOZQ93WeZ/m9SUImgZICVm2Ep5rLA=
Subject key identifier:   3E:E8:24:10:1C:1D:FB:A8:EB:AD:E1:79:0A:D6:F4:6E:18:AE:71:E7
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584CF6ECD25702D44062222F0780
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/3cd49df1-4dac-3a8c-a68b-77c00f5738cc.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     7950
IP address blocks:        142.87.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d2:57:02:d4:40:62:22:2f:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=b7f6cb92-2385-4de0-86a2-0732917ccb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:b3:81:b7:2a:ad:89:5b:dd:c7:4a:cb:d8:
                    91:b6:f3:c5:92:71:64:93:b4:9b:f6:af:4e:1e:41:
                    a3:36:6f:10:24:64:f8:2b:03:18:a2:66:cd:38:c4:
                    50:25:78:14:0b:f5:d9:76:b6:65:77:54:6a:d8:d9:
                    7f:62:4f:d7:dd:b6:16:20:44:84:82:0e:37:5f:75:
                    88:84:fc:07:da:07:03:1d:83:0d:f3:4c:53:1e:67:
                    fa:d6:70:75:84:66:8b:5f:17:22:63:39:f0:f5:ca:
                    de:df:26:d3:ae:84:1c:c0:78:48:f8:00:25:95:90:
                    d6:35:6a:fe:86:a7:6a:f8:0d:a7:7f:e3:78:05:e2:
                    ed:e5:0d:18:3d:10:36:27:e0:f1:2f:c9:9d:c1:b8:
                    74:22:e4:e4:59:18:e8:08:2d:69:3a:c8:0e:b2:86:
                    a1:e4:fd:40:68:44:1e:73:38:42:5f:cd:70:4b:44:
                    0b:50:53:ed:ba:64:8c:78:09:0c:a9:e6:2d:2b:13:
                    f2:31:3c:1e:c8:38:4e:41:9e:c1:e7:3f:09:5c:81:
                    5c:5c:8e:4c:39:d4:d5:f5:22:4f:81:f0:5b:50:1a:
                    4f:a6:fa:7f:17:bb:b7:6f:e3:5d:f5:70:09:c8:06:
                    87:c9:c6:bb:95:6a:9b:05:e8:06:a0:71:01:f7:fc:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E8:24:10:1C:1D:FB:A8:EB:AD:E1:79:0A:D6:F4:6E:18:AE:71:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/3cd49df1-4dac-3a8c-a68b-77c00f5738cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:5a:70:b0:5d:6e:2a:ca:8d:0f:88:1c:4f:97:9e:04:0b:
         16:fc:d0:69:0c:d8:ef:35:a1:d9:11:d7:f2:32:29:87:51:cd:
         e0:5f:3e:78:4a:f4:00:a4:16:1c:96:23:a2:02:18:e3:8f:7d:
         c5:d1:6a:26:93:37:bd:1f:a4:fe:bc:12:d2:9b:4d:c5:1f:b7:
         51:ce:0b:b7:12:f2:c4:fa:33:7b:c2:2b:f6:ca:96:8e:9a:87:
         c8:bf:94:6f:3b:6d:61:1b:6b:41:da:9d:70:cf:03:e8:b6:51:
         a8:47:aa:eb:53:fd:43:78:86:85:1a:f2:a2:60:ab:a2:27:f8:
         a5:3a:7e:0b:ce:e3:56:0b:93:69:8d:96:f3:c4:48:97:01:96:
         3d:0b:9c:83:69:45:5e:23:68:19:08:37:94:83:62:af:57:1f:
         18:f7:d3:ae:59:6e:a5:0a:ce:c1:c3:95:e8:64:f1:3b:69:a8:
         56:b3:58:ca:cb:0f:b7:76:d8:a1:bd:5b:c0:b5:4d:0d:e4:71:
         da:4d:35:9b:8a:f9:2e:f9:e9:6b:75:bf:1f:e1:10:27:6d:23:
         79:8d:36:fd:0f:ea:80:ea:b2:db:b0:48:79:06:0c:28:0e:24:
         d8:79:79:e4:fa:4f:be:ed:f9:3a:30:c1:7e:bd:8a:0f:fd:d7:
         d7:ec:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:01 2026 by rpki-client