Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0806eddb-bc10-370c-a922-0ff688f3c442.roa
File:                     0806eddb-bc10-370c-a922-0ff688f3c442.roa (raw, json)
Hash identifier:          FOZJddZINu66/qNpuCH0s/hNdKaAe8Xv4nsBky/qta0=
Subject key identifier:   97:5A:EF:66:05:DE:BF:D9:DA:1D:07:FA:98:8E:54:28:00:85:10:E5
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584F093CF2B71F18BEE3B8493B80
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0806eddb-bc10-370c-a922-0ff688f3c442.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     398156
IP address blocks:        168.220.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f2:b7:1f:18:be:e3:b8:49:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=9702af0d-965d-44d6-9535-47d87cd69057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:47:a3:e1:a0:63:ae:36:af:ec:11:e1:6a:
                    06:d7:d9:2f:f3:6c:dd:39:af:0d:73:16:e4:9a:5e:
                    43:90:b1:d7:d4:fb:9e:ab:73:cb:d2:51:ab:f1:06:
                    1e:37:65:1a:d2:9a:de:90:93:e5:e2:ee:a8:e5:21:
                    ea:b6:8c:e1:74:04:c6:52:6a:15:74:1a:8b:73:2b:
                    f6:56:1f:74:91:a8:34:a6:87:64:68:b9:65:5b:fd:
                    1b:43:9f:5a:f9:8d:3f:ac:46:d1:39:b9:08:4f:1d:
                    15:64:59:c0:d5:a8:9e:62:0d:56:d0:11:fb:de:1c:
                    62:ba:42:de:cf:c2:6d:c7:96:42:9e:3d:3a:e1:ad:
                    12:cf:37:95:f7:3f:9d:b1:f6:f1:e5:ac:ac:c2:8c:
                    14:50:96:f9:78:c9:bd:ce:f1:48:7a:40:74:f8:6f:
                    e2:22:b8:6d:57:d9:09:4f:7d:8a:7e:a6:27:7d:86:
                    82:c8:89:94:ca:f5:74:b6:68:e2:04:7e:b9:c9:28:
                    b3:2c:55:90:7b:b9:c9:59:6e:12:3f:a6:fc:94:d7:
                    53:22:3f:6d:21:40:ce:4d:e9:e0:da:2c:0e:60:98:
                    f0:fa:c0:f9:f0:8a:56:81:e3:4c:ab:79:04:c6:e5:
                    81:e0:35:1a:55:43:47:1c:45:48:4f:0a:0b:43:3b:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5A:EF:66:05:DE:BF:D9:DA:1D:07:FA:98:8E:54:28:00:85:10:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0806eddb-bc10-370c-a922-0ff688f3c442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:1d:83:6e:1f:01:9a:25:00:12:86:24:41:85:fa:4c:bb:
         4d:b4:32:a0:85:83:ce:f6:82:f0:80:69:8f:92:94:44:46:d4:
         7a:50:12:5e:05:77:1a:95:44:8e:8f:db:e8:87:a7:18:e5:99:
         e5:61:a0:9a:f6:44:00:88:6a:6c:88:b4:50:76:23:b1:27:15:
         28:aa:cc:92:23:c3:b7:62:7e:fd:3a:b5:09:a1:87:da:d3:b6:
         87:a7:21:e5:d9:14:37:23:af:73:f5:0a:ed:95:5f:3b:0c:ac:
         cd:8b:a8:61:40:3c:99:f6:65:6c:03:bd:41:db:88:3d:86:db:
         d5:0f:31:2f:07:f7:4c:fc:49:89:d6:3e:0c:b5:f1:d9:67:86:
         1b:a9:ac:0f:4a:90:23:09:be:4c:45:0a:13:67:d0:14:01:58:
         8d:f8:6e:38:5b:55:ba:7a:bb:6d:f5:fc:96:7c:d0:0c:38:d1:
         4f:9a:bd:8e:2d:f8:23:55:e4:e1:c0:ab:bf:70:89:b3:16:33:
         b8:e8:54:e8:ae:54:2e:63:ff:d7:b5:8c:52:c4:1a:91:2e:3b:
         05:95:25:5f:d4:bd:21:0e:dc:0d:4f:d8:5a:a3:ad:c2:31:0e:
         7b:08:80:34:48:79:03:6f:29:cb:0a:6f:57:e1:5a:e6:29:99:
         65:ef:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:32 2026 by rpki-client