Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa
File:                     2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa (raw, json)
Hash identifier:          bJ+r8+3VVz5kKKAb5DEjeavos23MEQ9WG9Y6k7ugETM=
Subject key identifier:   01:67:A1:4A:CB:07:32:B8:52:FF:DC:68:12:80:12:10:7D:C8:BA:EB
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584F093CEBDDF22EADEAD0FFF920
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     398156
IP address blocks:        168.220.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:eb:dd:f2:2e:ad:ea:d0:ff:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=18012d26-48df-45e4-9495-6be80832b48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:3e:96:50:4c:0b:10:f0:f0:8f:56:9d:64:
                    48:94:89:60:6d:3e:ec:ce:9b:3c:31:54:0d:b7:62:
                    37:8d:e3:c0:10:00:ba:a0:ee:b5:13:b2:99:66:0d:
                    ee:11:b8:ab:ce:7c:f7:d9:58:46:d3:98:be:a1:d5:
                    7e:4f:ed:ce:d0:74:99:e2:cd:c9:cf:72:73:0c:9a:
                    c4:fa:a9:f5:72:b1:4f:88:32:a6:b5:c2:be:46:5a:
                    6f:ce:ce:20:f2:ac:72:fc:f0:8d:3b:10:d7:a4:e1:
                    1b:40:34:9b:6a:4d:0d:da:87:45:d1:49:91:b2:70:
                    8c:c9:63:ab:a2:79:4c:3f:45:b2:cb:06:6d:e6:4e:
                    c3:af:a4:c0:0b:c6:3b:e2:e2:99:b6:ae:24:c7:d2:
                    87:7c:4f:4f:0f:68:f6:2d:8b:c0:b5:ee:23:8a:a4:
                    77:db:bd:a2:65:65:56:dc:89:8c:9c:d5:6e:e0:58:
                    27:16:15:ac:87:d1:39:2d:d6:de:67:8c:65:23:86:
                    42:af:53:73:18:b8:f0:2c:6b:1d:8f:ee:35:86:9e:
                    0b:78:c6:20:fb:13:e8:6c:c5:40:a4:e0:73:c0:83:
                    d8:55:24:f0:9a:86:f0:64:cc:d7:29:0f:91:18:4e:
                    ca:6b:68:2e:e7:e7:e6:b1:3b:14:48:da:a6:dd:10:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:67:A1:4A:CB:07:32:B8:52:FF:DC:68:12:80:12:10:7D:C8:BA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:00:a3:02:5f:40:c2:b0:78:3b:45:b4:8d:16:34:fe:e6:b5:
         72:a1:b0:30:c6:e0:c9:3e:a1:15:6a:8c:f8:79:df:ac:cc:a2:
         95:e2:4b:4b:73:f3:5b:fe:f2:b8:e6:b5:6e:d3:73:df:c3:db:
         62:78:8c:7e:3b:0c:98:c0:d1:d7:e4:4c:db:e1:33:ef:ce:22:
         50:19:03:26:5f:49:bc:6c:09:83:0e:79:fb:a0:53:83:e3:9e:
         91:38:42:9b:52:54:36:a0:cf:6f:e7:9e:72:d4:7a:88:18:83:
         20:a8:ac:77:1a:93:7f:4d:a5:93:92:0b:04:0a:f2:0e:b3:66:
         1c:d1:8c:5b:78:f4:e4:3e:f3:78:00:1f:7b:e2:b1:3f:1b:66:
         d1:35:56:46:17:13:e8:5f:35:c2:41:f2:78:d4:79:c0:72:92:
         ac:36:da:95:27:cc:b8:c4:7b:03:30:6f:e4:77:98:e8:5e:22:
         f1:aa:d4:5f:d8:4a:96:1b:4c:a2:f2:5d:ab:8c:88:55:59:53:
         b2:2d:39:36:4d:ee:e6:63:76:35:02:f8:ce:7c:d3:92:c2:cb:
         b4:ad:e5:cc:a5:96:30:89:67:bc:15:f9:6c:27:23:bb:eb:4b:
         25:e4:e6:2e:b7:86:44:39:bb:75:a2:b3:09:a1:2d:15:2b:77:
         9f:94:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:18:35 2026 by rpki-client