Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa
File:                     fb865e5f-da52-3d31-8e1f-06468a13efda.roa (raw, json)
Hash identifier:          7OB2ELv5aU4koU8Nh/WvxmsKDIy7fNa2apq5EM1u+E4=
Subject key identifier:   4A:CF:F0:84:93:79:45:69:A3:75:59:3E:1A:0B:26:C9:63:F7:05:1B
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584EA788646FEAE3601BA8F68D80
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7950
IP address blocks:        142.87.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:64:6f:ea:e3:60:1b:a8:f6:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=08ed6091-64d2-4cf8-ae55-e57f46bb05c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:12:c8:d2:c4:78:d3:6f:8e:e9:d7:ce:10:
                    29:03:47:7f:36:2d:be:ae:91:dc:d5:8c:ce:97:55:
                    c8:a0:62:48:19:56:88:c2:e6:7c:6a:99:9a:37:91:
                    90:e2:c7:9d:28:6a:fd:e6:a0:23:53:55:2f:fc:72:
                    52:5e:bb:14:be:1c:2c:7d:20:97:31:e8:24:00:ce:
                    49:79:ff:9e:d0:5c:42:8d:48:96:d6:5c:65:9d:42:
                    6e:e6:d7:12:cd:7d:13:7f:71:d1:40:0f:17:ac:cb:
                    af:d2:eb:c0:1d:a7:b9:46:a0:0b:68:8a:5b:65:a7:
                    59:33:81:ab:b5:fa:83:f7:35:54:1e:85:7c:3d:bd:
                    00:ac:50:04:74:1a:b1:d5:1c:29:d3:39:68:68:c1:
                    32:42:d8:96:4c:15:88:df:e0:bb:fe:5a:c0:5f:ec:
                    df:15:60:a4:39:b4:db:a6:7e:cb:2c:50:3f:63:e1:
                    f7:38:23:12:cb:4d:5e:e5:b5:35:d9:aa:6b:58:40:
                    d1:b7:56:eb:09:3f:eb:47:88:07:b0:52:d0:63:6a:
                    bc:51:b9:f9:a8:4d:e3:12:0e:bd:e3:2b:d2:12:b7:
                    63:93:ec:13:f7:18:c9:b8:5c:44:f1:1c:bf:17:8e:
                    31:1d:34:23:d8:ec:ce:08:fe:46:6f:45:bf:51:cd:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CF:F0:84:93:79:45:69:A3:75:59:3E:1A:0B:26:C9:63:F7:05:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:72:98:c8:4b:2c:37:80:db:07:26:7a:7c:79:54:2f:8a:
         d7:76:ce:2e:76:d9:f2:4e:b6:3b:8a:fa:ba:bd:5d:12:60:67:
         e3:8a:a8:d7:58:a2:4a:e6:0a:5c:f8:27:b6:91:5a:f2:78:b4:
         bc:82:03:4c:48:36:cf:58:a2:60:53:8c:42:8e:8c:0d:33:f0:
         b4:a4:03:55:89:dd:c3:e3:0c:81:45:57:81:78:24:c7:1a:17:
         27:2c:cf:ca:c3:1f:39:3d:61:01:7f:d6:42:4e:fc:d1:e8:fe:
         31:f6:1c:d9:14:88:b7:18:07:87:dc:4f:9a:71:d7:47:ea:ac:
         e1:2e:0a:06:5d:14:39:60:6d:7b:6d:14:70:3a:21:76:15:73:
         22:7a:7d:9f:87:cc:c5:e3:ac:53:b7:1d:37:82:8f:b8:d0:f8:
         10:31:16:2e:b3:cb:87:76:b6:ff:30:23:f8:3a:aa:34:94:2a:
         39:d5:61:41:28:c6:80:9e:17:45:1b:4c:ad:b5:4e:1a:af:20:
         0a:9f:17:c6:47:8a:60:f7:22:3d:7c:e0:3c:eb:80:34:54:e9:
         17:e0:d7:94:de:b6:22:73:46:0c:dd:74:53:84:8b:d9:98:c8:
         54:12:f8:1f:a8:7c:ee:f1:64:6b:02:1f:1f:35:58:1e:0c:31:
         f9:79:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:01 2026 by rpki-client