Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa
File:                     01688b26-89a1-3fa8-9d76-b1113324d268.roa (raw, json)
Hash identifier:          AgHNHVyXGYnstV5+v3eSQzCm7hSySSMvyCMIF9fr9nI=
Subject key identifier:   EA:BC:F6:1B:A0:5F:39:92:4A:64:56:6E:46:B2:C9:BD:62:1D:82:FD
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584F093CEC505B5E30044BCB4E00
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     398156
IP address blocks:        158.120.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ec:50:5b:5e:30:04:4b:cb:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=d9e13875-0d46-479e-b9e2-fe1e5f27f08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:f0:03:46:f0:56:24:da:82:18:eb:aa:45:
                    01:42:07:92:c0:78:ce:16:03:83:fe:f7:30:f7:6a:
                    c5:fc:f1:cd:eb:cd:d3:27:20:35:34:1b:34:3f:9a:
                    5c:79:71:f1:1a:0f:22:e7:c4:da:46:08:f3:90:c3:
                    c5:02:01:ed:57:44:9c:1b:eb:a6:33:26:4a:d8:50:
                    76:85:03:08:e6:97:58:44:55:48:79:a4:3a:df:e8:
                    5f:87:e7:9d:30:e5:a1:98:44:b4:5f:3b:01:ba:67:
                    d1:71:1b:bd:46:b8:f0:a0:b4:77:94:ce:b2:80:e3:
                    96:78:1a:fc:21:a8:a6:1e:ff:e4:ac:a8:36:1d:25:
                    69:93:c3:21:69:ef:65:3a:a1:56:5a:79:fd:83:12:
                    a1:ed:cf:9a:99:85:48:bd:cc:1c:90:0c:c6:bc:b0:
                    bc:76:bb:02:50:9c:b3:56:fa:ab:47:c6:f5:cf:00:
                    c7:1c:dc:db:49:cf:b3:ca:42:80:06:cb:b4:a6:ed:
                    39:58:e8:46:1a:dd:1e:a0:75:80:bb:7e:12:42:68:
                    ee:68:55:8a:50:17:81:ad:46:93:12:f1:bc:44:a7:
                    35:f1:b5:c3:b8:6b:4e:d5:0e:9f:8e:a2:48:2a:f5:
                    30:02:a2:c0:f7:f0:88:7a:0f:3c:5d:0f:ed:90:9a:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BC:F6:1B:A0:5F:39:92:4A:64:56:6E:46:B2:C9:BD:62:1D:82:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a2:73:b6:07:5c:4c:bc:59:d2:b6:01:ed:9e:09:dd:68:33:
         71:c6:00:e9:af:e9:b9:ca:f9:35:71:16:32:e7:63:81:8e:38:
         55:21:2a:d4:18:81:7c:00:87:ad:3e:e8:9a:a8:d0:20:ec:39:
         55:8c:f6:1e:0f:62:f7:c8:3a:9f:53:e5:e6:a0:90:6b:4b:ab:
         52:d3:50:ec:c6:46:93:58:44:0f:71:e2:8c:6d:9b:64:99:2d:
         d8:b9:90:24:c6:10:84:fd:db:01:69:51:e3:8a:3d:d4:2b:2d:
         65:96:bd:ff:ce:7f:21:93:3b:f5:1c:43:44:d4:d2:be:69:00:
         c8:be:3e:d9:0c:33:31:af:d4:d9:0d:c8:70:e0:b6:cc:5c:5b:
         3f:ba:0a:58:f6:3b:ee:23:e0:67:00:d4:20:80:fc:dd:28:4b:
         a7:67:53:b2:53:8a:89:32:43:0e:66:65:5c:58:24:aa:99:ce:
         f6:ae:8a:07:11:91:3c:dc:0f:69:4f:b4:f6:6f:63:a4:d4:33:
         b6:4e:bc:6c:3f:a7:c4:3c:1d:96:1d:df:7e:1a:75:31:b6:f6:
         82:e1:35:8e:25:b5:e1:00:bc:c8:3d:f6:b6:8a:ef:7c:ca:85:
         4c:cf:ad:55:c1:99:bc:e4:2d:3d:09:4f:3b:8d:2f:91:b2:0d:
         9c:32:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:57 2026 by rpki-client