Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa
File:                     d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa (raw, json)
Hash identifier:          cHD6N0/mCNMLnsSuqgzKeV86G1BEZK0rweP6EiLvV2E=
Subject key identifier:   DF:65:7F:A9:4F:C0:83:09:48:C0:D9:37:35:33:44:B7:B9:AA:34:29
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584A5600481081C5EA1547AA0180
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     7950
IP address blocks:        142.87.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:48:10:81:c5:ea:15:47:aa:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=d977d376-b83f-4e9a-abd4-eb9777d375e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:1b:41:68:c8:85:38:b3:48:03:12:29:76:
                    de:37:a2:cd:33:56:ea:6c:f6:1a:46:62:fa:1d:62:
                    29:14:52:e9:d9:e8:b1:42:5d:22:e7:f1:ea:cd:cb:
                    b5:6f:8a:e3:6b:ea:56:34:12:28:f1:21:54:78:80:
                    96:39:80:54:fa:b7:1a:27:6f:8a:70:a9:58:7b:ca:
                    28:d6:ef:22:4f:c4:6d:b0:52:bd:ae:f6:ef:83:82:
                    22:67:76:81:2a:c6:1c:f9:78:4d:9d:ac:59:5f:94:
                    a5:63:4b:a8:fa:3a:16:6a:65:20:bd:c3:54:b9:59:
                    ec:e7:2c:1f:5c:95:f3:d7:86:9c:9a:aa:70:42:88:
                    4d:2f:d6:bd:37:54:fa:88:9f:3d:ec:00:68:e1:a1:
                    0d:4a:d6:63:33:1e:42:6a:da:eb:63:a5:b4:2a:81:
                    6b:55:be:13:1a:47:ce:e7:62:e8:11:d7:77:bc:19:
                    65:3f:22:84:ae:89:58:61:b6:ec:b7:66:69:99:d9:
                    51:1c:86:da:47:f0:ad:db:97:9c:b9:2f:06:6d:b8:
                    7d:fb:6b:23:c9:d1:d1:be:88:28:a0:2d:6b:c9:70:
                    38:d6:98:f4:03:40:82:f0:08:a6:df:41:18:e5:ec:
                    91:e8:0f:42:bd:fa:fb:ff:0d:7b:92:24:4d:e4:d4:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:7F:A9:4F:C0:83:09:48:C0:D9:37:35:33:44:B7:B9:AA:34:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0a:fc:d1:0e:07:02:b0:17:56:48:43:1e:c6:ba:e2:c4:60:
         f5:65:ca:c0:a9:5b:0e:14:cc:e8:23:c5:91:7c:f1:d9:58:50:
         e2:94:9e:a9:ea:88:fd:1f:1d:eb:fb:eb:8b:b1:75:a6:2a:5b:
         bc:42:9b:d8:36:8d:9d:43:bb:cc:19:86:27:87:45:11:17:50:
         e9:95:de:1b:2b:ba:aa:e0:7f:94:fb:93:4b:8b:df:e0:9d:95:
         fa:1f:a2:c6:e6:10:8c:2e:f1:fb:1d:58:33:04:1e:1c:7d:e1:
         72:f1:ce:5e:13:42:09:4e:1d:7c:30:2b:0a:ab:70:02:a1:02:
         f2:95:fc:78:c5:1c:45:76:2c:bb:a3:f7:0a:9a:48:20:86:94:
         a2:9b:59:ea:9b:98:6e:a6:b5:8c:63:2b:c6:e6:19:f1:a2:bb:
         f7:59:51:93:b8:ae:30:4f:19:87:db:71:ac:58:2a:9c:4b:13:
         63:31:cd:cb:b0:24:e2:32:9f:42:fd:32:68:e2:e7:29:c3:27:
         a7:52:f2:2c:0c:33:b5:49:1f:b1:8a:5d:1d:fe:ef:6d:40:79:
         cd:f2:b4:39:b7:f2:af:db:0e:68:f1:99:28:d8:81:15:c4:e8:
         a6:8e:69:ab:c7:34:f8:16:c9:1f:6a:23:45:04:f7:53:e5:8d:
         aa:8a:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:12:02 2025 by rpki-client