Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/74e03646-1930-3422-8375-67f7ba92b761.roa
File:                     74e03646-1930-3422-8375-67f7ba92b761.roa (raw, json)
Hash identifier:          YnFuKzJ6uQhC/LjfsbTHmJ3zbiEcBZv8pb9FH5yfQdw=
Subject key identifier:   FC:AF:BF:36:3F:C5:30:E5:BF:7C:FF:16:65:9D:2C:86:37:D4:56:E7
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584B36BC57C7C8DABAED3DF1AD00
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/74e03646-1930-3422-8375-67f7ba92b761.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     7950
IP address blocks:        142.87.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:57:c7:c8:da:ba:ed:3d:f1:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=c18f6945-08f1-4271-86a4-263b4be2c67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:ad:94:b2:8b:93:c4:45:93:61:cc:09:4d:
                    64:cb:ce:df:c2:15:0e:9e:ab:4a:da:1b:4e:23:80:
                    1e:c0:fd:ed:ca:11:28:68:4a:30:9e:cf:85:c3:67:
                    26:a9:a4:5d:8f:36:f2:96:8f:04:e5:05:95:83:63:
                    bb:05:11:45:ba:c0:d0:f5:24:b4:07:3b:6d:72:97:
                    5a:92:0c:4b:c4:fa:10:e5:0c:2c:2c:9c:15:15:aa:
                    1e:3f:88:56:78:70:a7:d9:36:2d:cb:56:43:07:ae:
                    7a:2c:eb:dc:d1:2b:6e:49:5f:d9:85:5c:11:4e:ab:
                    44:6a:00:7d:9c:26:d4:67:95:b5:33:91:d5:14:12:
                    53:2c:33:bd:14:18:b2:23:fe:b6:a2:a5:3c:8e:d8:
                    23:df:31:f8:7b:0d:61:2b:5c:78:a6:c7:ce:ce:e1:
                    75:b7:68:76:66:2f:a8:c7:80:8f:38:12:c3:7c:ec:
                    a9:ad:3f:11:fa:00:23:f4:5d:44:eb:ac:10:57:19:
                    1b:d0:5e:3d:a0:92:2d:bf:b4:ed:2d:69:88:48:1f:
                    f3:fa:9c:c9:75:f2:6f:09:eb:12:00:fa:ac:5d:ff:
                    6c:dc:88:2f:7a:3f:56:6d:f5:85:29:f8:ad:34:90:
                    17:02:d6:df:85:25:55:10:7b:ff:48:4d:f6:f1:73:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AF:BF:36:3F:C5:30:E5:BF:7C:FF:16:65:9D:2C:86:37:D4:56:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/74e03646-1930-3422-8375-67f7ba92b761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:40:2b:ff:9a:4b:dd:7f:76:eb:35:79:0a:bd:40:1f:f8:
         3e:9c:c9:7b:58:a9:65:dc:a8:2c:b1:ef:41:e5:cb:f3:76:68:
         9f:74:77:07:c8:6b:0e:01:c7:89:4f:cf:32:52:57:27:9b:20:
         8b:13:39:25:86:ea:bf:aa:61:bc:de:22:a0:eb:30:9f:51:00:
         2b:7d:40:37:fe:e2:96:3d:88:98:3d:98:aa:8e:ed:26:d1:7d:
         e5:ff:94:5f:14:61:7e:a1:e6:43:8f:33:54:55:47:4b:09:cc:
         b8:40:67:bb:5f:9b:8d:bc:bb:50:42:0c:78:65:c8:8c:b1:b0:
         1a:73:28:8f:05:d3:8e:42:c6:e1:2d:bb:5f:36:2f:2d:9e:d2:
         e9:80:ba:a0:32:42:8c:3a:05:f6:f6:a3:e4:2b:f9:f9:b7:fc:
         7d:6d:9d:a6:e8:77:d8:ea:cf:e0:6b:00:1f:d7:e2:fa:19:d0:
         fc:5c:43:5b:c8:37:6c:ed:61:7e:3d:67:ac:a2:82:cd:b0:0a:
         7c:69:06:c9:ca:bc:dd:46:bc:09:5b:40:11:18:fe:a9:b2:c6:
         7d:6e:51:d1:2b:6a:3a:93:bf:5d:d3:d5:10:31:15:ae:8e:67:
         f3:e2:ad:1a:4d:de:79:76:2c:51:49:4a:a3:e3:ee:17:e8:8e:
         24:fb:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:29 2025 by rpki-client