Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/8664ea7e-a254-3455-8bb9-364a53e2cfb6.roa
File:                     8664ea7e-a254-3455-8bb9-364a53e2cfb6.roa (raw, json)
Hash identifier:          UvFGbXSgvfxXVIVN3vAy+Odjj/tI9AOMJFbyRMkGz64=
Subject key identifier:   8F:4F:CC:E5:F9:F6:27:F0:7F:4D:F6:91:76:1A:52:19:6C:19:CD:D4
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584A9B64A5BAB8DE901EDE670B10
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/8664ea7e-a254-3455-8bb9-364a53e2cfb6.roa
Signing time:             Tue 22 Jul 2025 21:33:51 +0000
ROA not before:           Tue 22 Jul 2025 21:33:51 +0000
ROA not after:            Mon 20 Oct 2025 21:33:51 +0000
asID:                     62874
IP address blocks:        142.147.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:64:a5:ba:b8:de:90:1e:de:67:0b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Jul 22 21:33:51 2025 GMT
            Not After : Oct 20 21:33:51 2025 GMT
        Subject: CN=6485b8d7-50a7-4412-a253-9577bf9823f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:3a:8d:36:f9:31:c8:7e:b7:53:95:f0:bd:
                    2c:36:07:b3:c9:d3:dc:92:fe:02:3a:e1:cf:5c:e6:
                    53:5b:1b:18:ea:93:a5:95:7e:e5:9e:bd:4b:e0:15:
                    58:e4:b7:45:e6:66:f0:1f:df:88:8d:9d:dd:80:32:
                    88:0a:a8:fb:08:22:fb:a5:98:31:c2:53:7f:e1:ab:
                    16:50:bf:09:e1:96:01:64:95:ed:3f:82:32:b7:5f:
                    f1:9f:e4:5c:0c:42:6e:3a:67:f6:99:41:de:8d:d1:
                    bd:d4:74:65:d7:c5:5b:a9:54:22:48:5f:80:d7:82:
                    29:24:f1:75:e1:a7:d6:2a:93:42:41:96:9e:9d:70:
                    5f:35:aa:ae:c0:00:ee:12:63:b2:5e:26:39:47:c9:
                    12:c2:83:c6:0c:cc:fc:96:13:fd:f9:1a:6a:78:e9:
                    e3:74:2f:3c:f3:bf:53:33:0e:e8:1b:ad:01:07:f7:
                    90:92:20:1c:f3:cf:1f:e7:98:6a:3c:e5:56:08:63:
                    d0:34:0b:f0:08:b4:20:cb:20:43:d3:ce:b4:c9:a0:
                    a4:26:82:5f:24:31:b7:50:1c:8e:8f:5a:4b:ca:da:
                    58:64:5e:1b:9a:a0:60:c4:6f:1d:0d:4a:f8:4e:d4:
                    9f:8a:16:35:d3:6d:1c:08:dd:74:38:8a:66:25:0a:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:CC:E5:F9:F6:27:F0:7F:4D:F6:91:76:1A:52:19:6C:19:CD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/8664ea7e-a254-3455-8bb9-364a53e2cfb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:8c:7e:13:5f:4a:3e:81:10:47:89:f4:cd:e2:e1:01:90:
         d8:50:61:80:61:ab:0f:59:9d:d8:8f:ba:4e:33:60:6c:2b:b8:
         98:b0:0e:52:bd:d5:9f:49:ed:01:fb:17:16:b6:59:a0:70:ed:
         2d:c2:67:98:e4:2b:17:b6:f3:f9:d9:7a:91:82:91:be:85:46:
         12:0a:90:3d:d4:29:11:ba:b6:9b:52:80:e4:55:89:5e:0c:d9:
         89:95:b8:3b:72:a1:2c:7d:a4:37:ee:86:5f:c8:a1:bb:37:92:
         85:b4:72:97:0b:20:4e:7d:8b:d0:f8:d6:2a:ea:bf:67:3a:e0:
         b5:14:8f:a1:af:f0:a4:cf:a1:45:9e:9b:34:43:cb:7c:0f:d7:
         48:00:9a:a2:5f:24:19:d5:81:31:53:ff:bf:17:4e:ed:32:10:
         7f:7e:41:23:a2:17:58:c5:e6:60:af:75:ad:9a:c8:b7:0c:6a:
         ca:5f:a7:12:e6:46:b3:63:37:53:2a:41:f1:87:e4:30:71:f8:
         a8:22:b1:68:7d:f5:7d:e3:c5:54:46:31:93:fe:d3:8b:c6:9f:
         ed:b2:32:4f:4d:f0:56:0f:1b:72:06:0a:f7:28:43:d8:43:01:
         fc:46:80:91:a8:54:b3:d3:75:96:a8:7f:98:31:c8:3a:70:31:
         12:28:96:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:44:58 2025 by rpki-client