Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa
File:                     fb865e5f-da52-3d31-8e1f-06468a13efda.roa (raw, json)
Hash identifier:          3f2wxtRZGgJ8Wjka97ydH4W9vy+nV9H3HBs+UN4wAnM=
Subject key identifier:   83:FC:C0:4A:61:04:A1:1B:2C:FF:A2:98:78:7D:E9:36:36:E2:B5:E9
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584CF6ECD1509DCE19032547AB00
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     7950
IP address blocks:        142.87.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d1:50:9d:ce:19:03:25:47:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=901a30cd-a993-491c-b7f1-defb0fe87873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:7b:57:37:95:07:4c:12:07:3a:94:82:50:
                    73:a8:53:f8:8c:ee:9e:25:fe:99:b6:4f:e3:d4:75:
                    5f:d9:cf:3d:2e:d9:75:12:09:cd:48:ff:dd:fe:2c:
                    02:a5:72:d9:f4:c4:1c:5f:97:17:dd:25:5a:93:2e:
                    af:4d:fd:8e:50:f9:05:da:bc:4a:4b:ca:38:00:54:
                    26:9f:cb:75:15:a2:19:5e:0f:07:0a:8d:82:9b:a5:
                    16:8c:97:2d:c5:31:cc:d6:34:33:38:be:51:68:f8:
                    00:62:58:13:cd:17:af:82:4e:46:16:d6:a6:4f:74:
                    cc:59:47:c2:e7:bb:c4:bd:85:dd:45:4a:e4:5e:aa:
                    90:5c:d6:02:9f:e8:30:95:01:e5:fb:c2:3f:5e:d7:
                    f2:23:43:ea:73:30:43:70:0b:d5:63:0b:d9:fb:b9:
                    30:37:10:51:e0:b4:35:fc:7f:e2:1a:15:36:ee:ee:
                    a6:e2:4e:5b:db:62:1d:87:df:5b:ce:72:6c:91:d4:
                    93:e8:59:66:73:f9:19:69:38:b4:48:31:df:57:fd:
                    d9:96:07:8a:92:4b:45:b9:8a:a6:2d:58:05:b3:4c:
                    c1:7a:5e:f8:d3:27:77:44:bd:0a:fb:36:fe:3b:60:
                    01:6a:51:5a:ce:03:a4:6f:ad:ed:37:2e:da:79:d6:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FC:C0:4A:61:04:A1:1B:2C:FF:A2:98:78:7D:E9:36:36:E2:B5:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:88:73:3a:08:8d:c6:b9:59:9e:26:e3:66:72:7b:4d:f4:
         92:4f:b8:30:1e:15:14:42:69:55:2f:4d:9a:95:e5:b9:9c:4c:
         a5:fe:01:8a:8e:13:cc:bb:af:66:c7:aa:ae:71:fd:67:82:7b:
         da:45:d2:41:fb:d1:3d:7c:4c:a6:cb:4a:33:b2:80:5a:af:c6:
         aa:d8:ea:07:77:8e:30:29:86:4f:29:2c:a6:09:55:29:c2:c1:
         2d:2a:88:73:ee:98:a2:7e:f7:74:26:dc:87:90:95:af:17:f7:
         3a:17:ae:f6:42:69:7f:b0:20:3a:45:a2:ec:08:1f:e1:44:af:
         35:ca:ee:7f:47:d1:a4:ea:e7:c2:f7:89:25:fd:7f:52:a2:5f:
         77:0c:d1:b0:1e:24:e8:2a:c6:de:20:c2:e3:0c:57:ce:8f:c2:
         02:25:51:99:ed:74:cf:99:b0:d0:92:f5:c4:47:67:37:e5:17:
         98:97:0f:27:ce:8c:3d:17:07:f8:c4:28:d7:f9:b6:bc:91:77:
         e2:b7:4d:b7:52:c9:1b:84:a2:e1:fa:d8:7e:3b:24:d1:da:6c:
         a4:e7:b3:50:21:94:60:c6:06:02:68:bf:f6:81:5f:84:d9:0f:
         61:6c:7d:8f:74:07:14:eb:47:0a:61:e1:d1:95:9d:83:45:fd:
         08:06:ba:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NFQnc4ZAyVHqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTliNjBmOWMtNDhkNi00NTE1LWJhOWMtNTcxNjZhYzg1
ZTA2MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
OTAxYTMwY2QtYTk5My00OTFjLWI3ZjEtZGVmYjBmZTg3ODczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiad7VzeVB0wSBzqUglBzqFP4jO6eJf6Ztk/j
1HVf2c89Ltl1EgnNSP/d/iwCpXLZ9MQcX5cX3SVaky6vTf2OUPkF2rxKS8o4AFQm
n8t1FaIZXg8HCo2Cm6UWjJctxTHM1jQzOL5RaPgAYlgTzRevgk5GFtamT3TMWUfC
57vEvYXdRUrkXqqQXNYCn+gwlQHl+8I/XtfyI0PqczBDcAvVYwvZ+7kwNxBR4LQ1
/H/iGhU27u6m4k5b22Idh99bznJskdST6Flmc/kZaTi0SDHfV/3ZlgeKkktFuYqm
LVgFs0zBel740yd3RL0K+zb+O2ABalFazgOkb63tNy7aedYgjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIP8wEphBKEbLP+imHh96TY24rXpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2
MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2NmFjODVlMDYvZmI4NjVlNWYtZGE1Mi0z
ZDMxLThlMWYtMDY0NjhhMTNlZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTliNjBmOWMtNDhkNi00NTE1LWJh
OWMtNTcxNjZhYzg1ZTA2LzE5YjYwZjljLTQ4ZDYtNDUxNS1iYTljLTU3MTY2YWM4
NWUwNi5jcmwwHwYDVR0jBBgwFoAUonBZakbskNHSoMX8ROHdZFJD6EswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2
NmFjODVlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjlehMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTXiHM6CI3GuVmeJuNmcntN9JJPuDAeFRRCaVUvTZqV5bmcTKX+AYqO
E8y7r2bHqq5x/WeCe9pF0kH70T18TKbLSjOygFqvxqrY6gd3jjAphk8pLKYJVSnC
wS0qiHPumKJ+93Qm3IeQla8X9zoXrvZCaX+wIDpFouwIH+FErzXK7n9H0aTq58L3
iSX9f1KiX3cM0bAeJOgqxt4gwuMMV86PwgIlUZntdM+ZsNCS9cRHZzflF5iXDyfO
jD0XB/jEKNf5tryRd+K3TbdSyRuEouH62H47JNHabKTns1AhlGDGBgJov/aBX4TZ
D2FsfY90BxTrRwph4dGVnYNF/QgGuq0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:47 2026 by rpki-client