Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/8664ea7e-a254-3455-8bb9-364a53e2cfb6.roa
File:                     8664ea7e-a254-3455-8bb9-364a53e2cfb6.roa (raw, json)
Hash identifier:          mBPsExg54Yf95cXOfAMT7UVPr0cMSfKBXHM+p6n6EjU=
Subject key identifier:   9A:96:1A:FF:74:03:9E:F6:4D:9F:C1:0C:63:F1:D0:91:A3:8D:83:62
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584D39CF7F1288082914BC495180
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/8664ea7e-a254-3455-8bb9-364a53e2cfb6.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     62874
IP address blocks:        142.147.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:7f:12:88:08:29:14:bc:49:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=3b5f19c8-0cc6-4807-bde0-3b1e2a1120fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:d3:fc:93:c5:5a:02:3a:04:00:d1:bd:19:
                    69:9b:c0:7b:d9:a3:cd:2c:bc:a1:bc:28:df:50:98:
                    50:8b:d2:b3:61:18:fc:8a:43:0e:b9:8b:cb:c4:1a:
                    d1:0c:f2:73:7c:95:cf:1e:18:8b:41:68:72:45:61:
                    59:60:b6:0d:88:d3:49:3d:34:f1:7f:a7:10:d7:28:
                    ac:06:53:b5:62:e7:21:6d:95:78:32:1e:a5:5d:cd:
                    bb:27:eb:60:e5:46:cf:95:aa:01:c7:cf:82:99:8a:
                    b1:df:54:c6:98:d4:7f:b9:ae:3f:88:de:8a:00:a3:
                    cb:c7:7c:3e:a2:9a:40:02:85:eb:9e:a3:88:30:bb:
                    a3:7e:31:8f:89:44:d3:09:39:4e:43:d0:e7:7c:92:
                    fa:47:9e:74:7a:43:36:b3:89:14:e1:92:da:62:b3:
                    13:9a:b2:14:85:53:f6:92:72:c7:71:16:91:35:16:
                    1c:1c:e5:e8:af:d2:c1:80:91:65:82:b6:a9:0f:d3:
                    bb:06:d5:db:34:49:ef:ad:ef:e0:90:b0:bc:fe:5d:
                    16:f8:1f:55:83:e7:92:ef:9c:e9:08:b8:11:96:72:
                    bd:64:a6:7e:11:60:80:3a:1b:da:a5:f2:e1:ef:e0:
                    5b:c4:00:9c:20:a2:c3:53:ad:62:6a:f0:56:33:7f:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:96:1A:FF:74:03:9E:F6:4D:9F:C1:0C:63:F1:D0:91:A3:8D:83:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/8664ea7e-a254-3455-8bb9-364a53e2cfb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:02:98:63:17:87:c2:6f:df:12:e2:9f:ea:c3:06:35:7a:4d:
         5d:98:ea:70:51:4e:ad:53:1f:82:8c:c7:79:f0:6d:43:f3:16:
         5e:5d:77:a3:c9:4c:6c:8c:1a:cc:fd:69:6f:3e:20:b6:78:e5:
         23:f9:7e:26:47:26:cc:1d:17:b2:17:2a:17:c7:0d:ab:e5:f9:
         04:3d:10:69:d1:1a:e7:5c:3d:dd:88:6f:99:e4:71:6a:b4:98:
         00:9a:74:12:2d:86:aa:9b:c0:03:40:45:39:2f:51:09:b5:61:
         3d:46:b9:84:85:bc:7f:e7:4e:28:86:f0:cd:67:ef:4d:ac:bb:
         e0:ab:a7:bd:b2:f6:1a:7e:d3:f0:b5:83:aa:40:d2:19:95:68:
         59:17:2a:ca:04:1b:cb:a5:29:d0:14:bb:44:0a:8f:10:89:26:
         1f:57:46:7d:3c:21:2c:f6:68:92:d2:76:ed:69:2b:a8:c9:14:
         00:7e:69:ca:0f:71:76:73:37:9b:8c:3e:20:de:30:a1:c4:34:
         43:39:68:8d:18:ba:54:e7:59:9e:1f:96:88:db:4b:61:39:5d:
         3e:a4:d1:03:46:f3:7d:0d:06:74:69:1e:b3:44:11:d4:97:c6:
         3f:79:f4:ab:07:3c:7c:b1:2f:6e:ae:2f:b6:be:8e:64:c4:8a:
         7a:7b:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:00 2026 by rpki-client