Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/7f0a7d80-d167-30cf-ba27-53d404941cb1.roa
File:                     7f0a7d80-d167-30cf-ba27-53d404941cb1.roa (raw, json)
Hash identifier:          p3za9Zi1W1VKqv/y4fp4UVmeEtoFbEzrvyiG9jXwR1o=
Subject key identifier:   EE:64:07:66:C0:32:F0:EC:0F:B5:53:70:24:65:95:03:01:B3:03:C8
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584EA7886503EAA39B5906676180
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/7f0a7d80-d167-30cf-ba27-53d404941cb1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7950
IP address blocks:        142.87.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:65:03:ea:a3:9b:59:06:67:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=055ede4e-0bc3-4945-b9a0-9797024d5968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:d4:c6:f9:01:6a:ed:6c:b3:96:fc:84:d2:
                    d3:9c:49:18:a9:76:b6:99:b3:e4:f2:f3:79:a9:d0:
                    16:60:6e:1a:76:30:38:72:38:4b:e8:b3:a6:a7:fd:
                    5d:02:59:2d:cb:9b:1e:8f:60:8d:b9:eb:71:fa:92:
                    96:a1:40:b4:29:8c:f9:2a:ec:26:a7:1a:b3:27:16:
                    59:70:6e:ee:e4:8a:aa:c6:8f:e3:ae:ce:7a:9e:41:
                    82:6f:3b:2e:4c:b9:34:78:c3:3a:6a:fe:85:45:df:
                    28:96:b9:38:9f:32:c1:95:95:5b:bd:8a:c7:a7:93:
                    52:03:1a:31:f5:63:3a:44:c1:83:95:ce:95:bb:cc:
                    df:1e:98:c4:a2:67:c5:52:c6:87:8a:bd:cd:39:2e:
                    ff:80:98:24:5a:27:da:f3:54:89:94:d9:0c:a7:2b:
                    8f:d2:4e:41:a9:6d:7e:b3:61:7f:c3:0b:1f:d1:cf:
                    70:8b:8a:f9:cd:5c:54:e2:83:83:b2:cf:5f:d9:9a:
                    3a:ee:65:e2:4f:19:ff:29:0c:a3:c9:17:f3:de:06:
                    02:e6:98:02:08:6f:76:a2:39:27:71:75:51:db:42:
                    b7:e6:91:c5:34:d5:e0:80:bf:9f:70:9a:ca:41:b4:
                    59:11:bb:72:7d:bf:53:d0:3c:cf:b0:ed:58:b5:7a:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:07:66:C0:32:F0:EC:0F:B5:53:70:24:65:95:03:01:B3:03:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/7f0a7d80-d167-30cf-ba27-53d404941cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a7:6d:39:87:70:6e:41:5d:18:2e:fe:4b:79:ab:7f:ba:d6:
         d1:5b:98:df:1e:cd:87:38:46:5e:b4:9c:bf:c4:2c:90:4a:f9:
         80:26:3f:30:0f:02:83:77:86:4c:bc:11:b5:ac:c3:5a:d7:29:
         eb:2b:15:26:b4:11:be:5f:e2:dd:95:81:17:b5:c7:4f:b3:53:
         0b:7a:08:72:a7:ed:cc:ef:40:70:17:8d:6e:f3:d3:b6:37:c5:
         fe:c8:bf:99:20:8e:3d:f6:9d:86:37:67:81:eb:73:18:ab:99:
         4c:6c:61:6c:88:36:1c:b4:52:7c:1f:13:e5:6c:92:27:f7:f6:
         bd:74:9a:01:d2:c9:66:50:c4:c9:e8:38:e2:0f:dc:bf:93:bb:
         30:ef:e3:4b:53:18:53:94:82:8d:d8:da:12:d9:86:42:07:40:
         03:d6:3d:5e:82:a4:80:f7:cf:c4:89:84:b6:92:6b:f1:5a:89:
         4b:b3:4d:c4:b0:aa:3a:76:9f:1b:80:22:cb:d4:02:48:ac:6a:
         16:e8:b3:fb:f4:c8:80:a9:42:ae:60:77:df:9f:cd:e0:73:a8:
         70:97:4c:74:79:12:a7:5c:aa:81:19:24:6a:45:52:9e:17:10:
         f3:20:da:97:73:d2:ed:a7:0a:d2:4f:12:ee:02:2f:f6:83:51:
         49:54:3d:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGUD6qObWQZnYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTliNjBmOWMtNDhkNi00NTE1LWJhOWMtNTcxNjZhYzg1
ZTA2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDU1ZWRlNGUtMGJjMy00OTQ1LWI5YTAtOTc5NzAyNGQ1OTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGTUxvkBau1ss5b8hNLTnEkYqXa2mbPk8vN5
qdAWYG4adjA4cjhL6LOmp/1dAlkty5sej2CNuetx+pKWoUC0KYz5KuwmpxqzJxZZ
cG7u5Iqqxo/jrs56nkGCbzsuTLk0eMM6av6FRd8olrk4nzLBlZVbvYrHp5NSAxox
9WM6RMGDlc6Vu8zfHpjEomfFUsaHir3NOS7/gJgkWifa81SJlNkMpyuP0k5BqW1+
s2F/wwsf0c9wi4r5zVxU4oODss9f2Zo67mXiTxn/KQyjyRfz3gYC5pgCCG92ojkn
cXVR20K35pHFNNXggL+fcJrKQbRZEbtyfb9T0DzPsO1YtXo8JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5kB2bAMvDsD7VTcCRllQMBswPIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2
MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2NmFjODVlMDYvN2YwYTdkODAtZDE2Ny0z
MGNmLWJhMjctNTNkNDA0OTQxY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTliNjBmOWMtNDhkNi00NTE1LWJh
OWMtNTcxNjZhYzg1ZTA2LzE5YjYwZjljLTQ4ZDYtNDUxNS1iYTljLTU3MTY2YWM4
NWUwNi5jcmwwHwYDVR0jBBgwFoAUonBZakbskNHSoMX8ROHdZFJD6EswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2
NmFjODVlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjld7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKnbTmHcG5BXRgu/kt5q3+61tFbmN8ezYc4Rl60nL/ELJBK+YAmPzAP
AoN3hky8EbWsw1rXKesrFSa0Eb5f4t2VgRe1x0+zUwt6CHKn7czvQHAXjW7z07Y3
xf7Iv5kgjj32nYY3Z4HrcxirmUxsYWyINhy0UnwfE+Vskif39r10mgHSyWZQxMno
OOIP3L+TuzDv40tTGFOUgo3Y2hLZhkIHQAPWPV6CpID3z8SJhLaSa/FaiUuzTcSw
qjp2nxuAIsvUAkisahbos/v0yICpQq5gd9+fzeBzqHCXTHR5EqdcqoEZJGpFUp4X
EPMg2pdz0u2nCtJPEu4CL/aDUUlUPXg=
-----END CERTIFICATE-----
Generated at Wed Aug 26 12:21:16 2026 by rpki-client