Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa
File:                     fb865e5f-da52-3d31-8e1f-06468a13efda.roa (raw, json)
Hash identifier:          UXlBbDckLSt9QXkBOXPgc6EijVfcMshXoNdNaRG5TCw=
Subject key identifier:   68:BD:86:64:A2:08:8A:A8:B4:AB:FB:37:DA:86:BA:DB:66:65:60:B8
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584F4974472E8740E6CDF676BA00
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7950
IP address blocks:        142.87.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:47:2e:87:40:e6:cd:f6:76:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4a0a59c8-06e2-4fce-a42f-98f359b2186a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:03:d2:fb:c3:bf:23:5e:10:3b:94:81:85:
                    6b:84:3d:18:0c:92:f2:0e:57:cb:5e:7e:aa:2c:84:
                    22:07:f9:47:f5:0b:f7:ec:4c:d1:38:32:a0:04:09:
                    e3:c6:d5:51:c3:bb:a0:eb:29:8a:a5:17:2e:ad:cd:
                    bb:2b:56:d0:13:ec:42:d5:4d:9f:90:6b:1c:61:fb:
                    d7:12:f0:0a:c2:18:b9:60:82:c1:d0:7c:8e:b2:31:
                    84:33:49:04:43:ec:4b:0e:ed:10:1c:a9:d3:00:a2:
                    96:54:39:ea:37:2d:db:fa:9d:d3:6f:81:de:95:3c:
                    28:36:36:03:0e:48:fe:86:79:93:98:65:d1:c2:03:
                    e9:90:44:11:d7:37:aa:21:41:a9:cd:7f:a4:93:01:
                    dd:56:aa:85:e9:86:9e:bb:b6:23:74:eb:b7:48:a1:
                    42:29:12:9a:30:0b:18:2a:0f:19:fc:43:8c:2a:27:
                    59:58:80:03:22:03:ea:1d:88:b6:3a:53:6d:69:d3:
                    2d:bc:ee:87:89:f8:cf:92:a4:07:57:fd:13:d5:1e:
                    40:ba:25:ee:a3:ca:26:71:b9:28:aa:ce:36:cf:dc:
                    73:b9:53:14:57:39:fd:ea:58:f3:69:74:8b:a1:30:
                    70:22:e5:2b:2b:48:5a:dd:73:22:62:af:ae:73:69:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:86:64:A2:08:8A:A8:B4:AB:FB:37:DA:86:BA:DB:66:65:60:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:55:b7:a3:9f:78:26:1e:8f:5b:c8:18:19:e4:d3:55:af:75:
         6e:67:71:6d:9e:ab:bb:26:49:46:eb:86:a2:63:6c:55:78:c5:
         1f:7c:c7:4d:06:4a:96:6f:18:0e:25:24:79:ac:dd:61:06:cd:
         c6:dd:dc:49:82:64:ba:62:d6:c6:26:b2:99:57:98:78:47:6c:
         a2:4a:9a:c7:3e:c7:fe:c5:f9:ea:c7:72:5e:58:b0:1c:b6:cc:
         0d:53:d6:8a:98:22:87:fd:5b:64:90:d5:39:66:aa:0c:c3:17:
         c3:41:07:1f:b8:cf:80:c0:8e:59:c3:bc:07:4c:2f:0e:05:57:
         f9:73:c2:9a:fe:7d:7e:5c:70:0e:54:47:57:9d:18:9b:f0:2b:
         fa:04:58:44:e3:ca:ec:6c:cf:2f:5c:b9:2b:f7:59:9f:95:f9:
         b4:df:3d:80:f8:46:62:0c:05:40:3b:cc:5c:39:f3:95:e1:22:
         0e:f7:9a:73:69:21:5f:37:c9:74:b1:82:9b:f2:05:1c:ee:f5:
         f2:4c:90:a4:b6:99:16:d3:11:37:16:c6:ee:08:a5:ae:9c:28:
         05:44:31:26:c3:fb:3a:b2:f1:05:00:90:d9:9f:25:75:4b:72:
         a0:7e:f2:c9:26:cf:6c:3f:9c:cb:22:5f:40:a9:15:2f:5a:91:
         cc:c4:4b:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEcuh0DmzfZ2ugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTliNjBmOWMtNDhkNi00NTE1LWJhOWMtNTcxNjZhYzg1
ZTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGEwYTU5YzgtMDZlMi00ZmNlLWE0MmYtOThmMzU5YjIxODZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtoD0vvDvyNeEDuUgYVrhD0YDJLyDlfLXn6q
LIQiB/lH9Qv37EzRODKgBAnjxtVRw7ug6ymKpRcurc27K1bQE+xC1U2fkGscYfvX
EvAKwhi5YILB0HyOsjGEM0kEQ+xLDu0QHKnTAKKWVDnqNy3b+p3Tb4HelTwoNjYD
Dkj+hnmTmGXRwgPpkEQR1zeqIUGpzX+kkwHdVqqF6Yaeu7YjdOu3SKFCKRKaMAsY
Kg8Z/EOMKidZWIADIgPqHYi2OlNtadMtvO6HifjPkqQHV/0T1R5AuiXuo8omcbko
qs42z9xzuVMUVzn96ljzaXSLoTBwIuUrK0ha3XMiYq+uc2n/AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGi9hmSiCIqotKv7N9qGuttmZWC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2
MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2NmFjODVlMDYvZmI4NjVlNWYtZGE1Mi0z
ZDMxLThlMWYtMDY0NjhhMTNlZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTliNjBmOWMtNDhkNi00NTE1LWJh
OWMtNTcxNjZhYzg1ZTA2LzE5YjYwZjljLTQ4ZDYtNDUxNS1iYTljLTU3MTY2YWM4
NWUwNi5jcmwwHwYDVR0jBBgwFoAUonBZakbskNHSoMX8ROHdZFJD6EswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2
NmFjODVlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjlehMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtVt6OfeCYej1vIGBnk01WvdW5ncW2eq7smSUbrhqJjbFV4xR98x00G
SpZvGA4lJHms3WEGzcbd3EmCZLpi1sYmsplXmHhHbKJKmsc+x/7F+erHcl5YsBy2
zA1T1oqYIof9W2SQ1TlmqgzDF8NBBx+4z4DAjlnDvAdMLw4FV/lzwpr+fX5ccA5U
R1edGJvwK/oEWETjyuxszy9cuSv3WZ+V+bTfPYD4RmIMBUA7zFw585XhIg73mnNp
IV83yXSxgpvyBRzu9fJMkKS2mRbTETcWxu4Ipa6cKAVEMSbD+zqy8QUAkNmfJXVL
cqB+8skmz2w/nMsiX0CpFS9akczES5k=
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:01:22 2026 by rpki-client