Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/acd81aac-ca4f-30f0-9dc1-56b756579f1e.roa
File:                     acd81aac-ca4f-30f0-9dc1-56b756579f1e.roa (raw, json)
Hash identifier:          IbtHsupUb3tqDiq+PWirn7KUFUeDuozevRray8bExCM=
Subject key identifier:   C2:BC:2D:96:24:AC:C9:36:F8:8A:73:AF:2B:FA:F1:8B:1C:BD:80:D0
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584A5600488B96575C62F1FF0780
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/acd81aac-ca4f-30f0-9dc1-56b756579f1e.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     7950
IP address blocks:        142.87.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:48:8b:96:57:5c:62:f1:ff:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=4eed6fae-1fc9-420f-b249-8868d42f6444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:92:c1:c1:b1:8a:74:07:c1:15:5e:a5:87:
                    5f:27:42:ed:21:b1:0c:fb:c6:94:42:a4:63:c8:4a:
                    9d:75:3b:dc:32:88:20:dd:a0:9c:78:09:77:6b:e3:
                    64:c0:53:83:42:df:79:fb:be:c2:71:b2:0b:65:c9:
                    93:59:6a:32:2a:ed:3e:2e:c9:36:87:5e:38:c8:02:
                    89:dc:96:f6:e8:2d:1a:37:ad:17:25:08:55:4c:b4:
                    fd:22:2d:87:31:da:02:89:cd:ae:b9:3c:fe:80:5f:
                    0d:2d:c5:d3:59:82:90:13:80:19:de:0e:2d:91:6b:
                    f3:b1:ed:47:34:31:31:31:6c:d0:fa:7b:30:59:0e:
                    bc:93:15:4d:1c:2c:c2:78:f3:39:1d:23:6b:e0:06:
                    16:06:44:3a:56:af:d9:c4:52:40:65:d1:4c:50:1a:
                    d3:cd:b5:6e:05:8e:d1:e6:61:73:37:e3:78:4b:39:
                    96:f3:15:97:44:2f:44:e8:c5:a7:c5:af:78:20:2d:
                    0a:dd:be:b9:96:ab:03:38:01:85:e1:32:9c:d4:6c:
                    15:e4:4b:26:84:bf:08:c9:0d:13:93:69:a4:fd:d2:
                    a1:1c:91:df:20:ff:fd:b8:57:10:1d:96:a5:40:d3:
                    69:d3:58:de:dd:56:db:7a:60:53:1b:6f:95:66:1d:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:2D:96:24:AC:C9:36:F8:8A:73:AF:2B:FA:F1:8B:1C:BD:80:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/acd81aac-ca4f-30f0-9dc1-56b756579f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:ab:20:e7:75:a0:82:9e:e4:86:ca:03:12:10:20:9f:d9:
         45:c5:7a:17:94:c1:cf:fa:33:a7:0a:a1:5e:ca:e9:1e:ba:8d:
         45:86:e6:fc:44:53:5a:60:3a:ca:bb:0b:19:8a:8a:58:8d:0f:
         1f:75:56:ff:70:4a:1d:c5:bd:4f:ec:a2:ca:f1:d1:e8:de:d0:
         d8:95:aa:e7:91:6e:f5:fa:4b:cf:51:e7:e0:4a:78:a0:99:81:
         55:9d:49:b4:61:fc:75:90:92:69:77:02:fc:0a:cb:1b:50:54:
         c7:2a:cf:0b:fe:3e:bf:61:9b:1f:93:7a:55:cd:26:b6:79:da:
         ab:62:64:0e:0b:90:75:39:06:e2:78:67:de:bb:eb:e9:ad:05:
         2c:2a:5b:81:57:04:bc:5e:ee:54:03:db:2f:81:35:50:1a:0b:
         a7:de:76:f9:c1:6b:1d:05:8c:43:4c:5d:da:0d:44:8b:8d:2e:
         18:cf:c7:f4:88:d6:ca:ec:46:67:69:f4:2c:01:5d:0c:1d:37:
         25:75:e7:13:88:6b:f4:b6:8e:61:aa:60:98:91:81:23:56:bd:
         30:1c:27:1e:96:2e:be:25:56:7c:99:8c:60:8b:c4:3c:f5:f3:
         91:18:2a:42:d2:36:17:9b:fb:04:ca:72:ee:01:16:7f:ba:46:
         c3:c8:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:16:58 2025 by rpki-client