Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/acd81aac-ca4f-30f0-9dc1-56b756579f1e.roa
File:                     acd81aac-ca4f-30f0-9dc1-56b756579f1e.roa (raw, json)
Hash identifier:          U92gVM18d5j1CICMPAfZPfSVATmbvNWS2kT3o9GqaDc=
Subject key identifier:   15:52:EB:14:4C:64:22:6E:AB:2E:B4:EB:8E:E8:C0:5E:C5:36:CF:5C
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584DD78B13071FA5CEF8BCD8A600
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/acd81aac-ca4f-30f0-9dc1-56b756579f1e.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     7950
IP address blocks:        142.87.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:13:07:1f:a5:ce:f8:bc:d8:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=9fa5fdc7-9cdd-49a6-9f73-36982de029c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:d1:38:cd:89:8d:1e:79:5c:8a:29:2c:26:
                    b6:0a:7d:7e:a2:30:e0:f4:e5:eb:97:a1:b1:90:11:
                    50:99:cc:bd:25:57:54:e4:c7:93:be:66:91:04:35:
                    8a:d5:18:0f:15:c2:b5:1e:de:ab:d0:95:76:a3:f3:
                    23:63:54:6a:73:bc:67:00:ea:3b:1b:b3:66:f4:38:
                    58:75:23:c2:64:4c:5c:40:8a:10:75:be:ff:a3:31:
                    31:b8:df:fc:a8:08:2c:13:24:74:b4:72:57:11:13:
                    99:0e:e1:f5:79:dd:8f:44:a9:da:d0:6b:0f:f5:65:
                    6d:41:d4:f9:fd:32:f0:75:6a:dd:c5:77:1d:e5:51:
                    c0:b0:9c:fc:45:44:1e:f8:d2:c3:99:eb:c2:1e:41:
                    a2:96:99:1e:c0:09:67:a1:20:84:fa:b0:19:24:4c:
                    d8:bd:02:ac:b0:37:68:7f:49:36:83:e8:87:46:9c:
                    da:61:7c:de:be:8e:3f:18:f3:32:08:6d:48:04:2b:
                    a5:a0:ff:8c:16:d2:c2:1a:08:f1:99:9d:20:5a:80:
                    51:f6:fc:2a:21:8e:c2:62:99:75:6e:86:96:bc:f2:
                    49:50:0c:75:5d:d7:b5:70:a9:b5:51:a3:65:38:7c:
                    fb:9c:44:d7:e2:82:e7:6a:1c:80:95:7e:54:69:9b:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:52:EB:14:4C:64:22:6E:AB:2E:B4:EB:8E:E8:C0:5E:C5:36:CF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/acd81aac-ca4f-30f0-9dc1-56b756579f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5a:4c:31:18:a4:cb:a7:06:d7:91:b8:da:4d:d8:24:84:54:
         b5:d9:f7:4b:7d:5f:f0:e0:1d:da:10:72:7d:94:ad:37:db:0d:
         fe:1f:33:eb:26:58:92:f2:42:c3:e0:57:bd:52:c1:d4:bf:36:
         06:0a:c6:bf:91:b5:af:08:c2:e2:91:ff:a8:38:94:ac:1a:65:
         0c:a6:9f:ea:ec:e2:29:a5:83:2a:1d:b3:d5:bb:e6:e1:73:cf:
         e4:33:e7:c2:1c:18:4a:cf:9e:6c:d0:87:15:f4:2e:75:b8:b6:
         2b:2d:80:db:ff:61:e7:a0:01:52:fa:07:6e:0e:70:41:7e:b9:
         51:b2:69:46:b2:aa:5e:87:bc:a3:5e:b4:98:ce:0d:0c:31:a5:
         44:f6:8e:53:1d:a9:47:48:e3:49:4d:23:19:44:0e:75:a2:ad:
         95:f4:f4:7e:24:8e:53:4e:9e:91:06:02:31:8c:de:2b:6e:c6:
         2a:64:b3:b1:48:9f:8f:85:d7:01:4f:f5:43:8f:4a:e4:78:37:
         d5:de:6c:53:22:5a:b1:57:86:dd:e5:51:74:40:43:6b:e2:5f:
         f7:f6:0e:c1:ec:e9:0d:7d:49:7e:ec:d5:ad:de:fe:f6:ec:0b:
         82:e1:95:c7:f6:bb:41:48:99:33:d6:6a:f5:61:70:65:df:a7:
         82:3e:ab:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3XixMHH6XO+LzYpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTliNjBmOWMtNDhkNi00NTE1LWJhOWMtNTcxNjZhYzg1
ZTA2MB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk
OWZhNWZkYzctOWNkZC00OWE2LTlmNzMtMzY5ODJkZTAyOWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok/ROM2JjR55XIopLCa2Cn1+ojDg9OXrl6Gx
kBFQmcy9JVdU5MeTvmaRBDWK1RgPFcK1Ht6r0JV2o/MjY1Rqc7xnAOo7G7Nm9DhY
dSPCZExcQIoQdb7/ozExuN/8qAgsEyR0tHJXEROZDuH1ed2PRKna0GsP9WVtQdT5
/TLwdWrdxXcd5VHAsJz8RUQe+NLDmevCHkGilpkewAlnoSCE+rAZJEzYvQKssDdo
f0k2g+iHRpzaYXzevo4/GPMyCG1IBCuloP+MFtLCGgjxmZ0gWoBR9vwqIY7CYpl1
boaWvPJJUAx1Xde1cKm1UaNlOHz7nETX4oLnahyAlX5UaZvzFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVS6xRMZCJuqy60647owF7FNs9cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2
MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2NmFjODVlMDYvYWNkODFhYWMtY2E0Zi0z
MGYwLTlkYzEtNTZiNzU2NTc5ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTliNjBmOWMtNDhkNi00NTE1LWJh
OWMtNTcxNjZhYzg1ZTA2LzE5YjYwZjljLTQ4ZDYtNDUxNS1iYTljLTU3MTY2YWM4
NWUwNi5jcmwwHwYDVR0jBBgwFoAUonBZakbskNHSoMX8ROHdZFJD6EswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2
NmFjODVlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjld4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdaTDEYpMunBteRuNpN2CSEVLXZ90t9X/DgHdoQcn2UrTfbDf4fM+sm
WJLyQsPgV71SwdS/NgYKxr+Rta8IwuKR/6g4lKwaZQymn+rs4imlgyods9W75uFz
z+Qz58IcGErPnmzQhxX0LnW4tistgNv/YeegAVL6B24OcEF+uVGyaUayql6HvKNe
tJjODQwxpUT2jlMdqUdI40lNIxlEDnWirZX09H4kjlNOnpEGAjGM3ituxipks7FI
n4+F1wFP9UOPSuR4N9XebFMiWrFXht3lUXRAQ2viX/f2DsHs6Q19SX7s1a3e/vbs
C4Lhlcf2u0FImTPWavVhcGXfp4I+qzI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:12 2026 by rpki-client