Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa
File:                     2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa (raw, json)
Hash identifier:          fAA/AmoGFeaD7qRyWiS6TA6vVEPl/BqHFNhPG8Vx2Jc=
Subject key identifier:   69:93:C7:EC:A3:98:0C:02:E1:99:43:28:08:D7:64:15:22:1F:8C:C6
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584FAB28A90E72DAF3397CEDC700
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     398156
IP address blocks:        168.220.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:a9:0e:72:da:f3:39:7c:ed:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=37314a15-8b6d-4b9b-9f7f-3ae2c3c260d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:d4:83:39:77:03:d3:70:88:3b:2b:ba:07:
                    47:5f:36:f3:14:f8:b4:40:39:d2:82:ac:e9:57:76:
                    21:b9:08:68:c5:c3:0b:62:0d:1d:d8:9a:39:ef:ed:
                    7a:2c:a1:3f:f3:c2:88:22:2c:ab:e0:ca:2c:2e:38:
                    d4:65:a5:82:70:de:af:18:1a:3f:0e:22:99:b5:36:
                    21:9c:b0:2f:d5:6a:e6:cd:9b:f2:35:0c:52:cc:f7:
                    6f:6a:fe:dd:01:9b:1b:8f:a1:47:a1:5a:47:95:2d:
                    5f:df:aa:8e:09:b5:49:d3:07:c7:b7:b4:cc:91:77:
                    3c:c6:b1:c8:bd:62:ab:85:fd:64:56:a7:48:84:74:
                    ba:26:60:0b:42:93:0c:74:79:d2:2f:ed:aa:ac:3e:
                    ab:34:ac:9f:84:3c:36:dc:ca:e6:14:f9:25:dc:16:
                    37:2d:8c:0b:21:90:f1:04:14:22:ca:5c:2c:08:0f:
                    28:70:73:d6:e6:01:36:24:21:d2:8b:d4:9f:c7:c3:
                    cd:d8:31:94:29:4d:6a:44:8c:57:09:94:1c:fd:d7:
                    bc:d8:5c:8f:9d:0f:28:fc:bf:47:d6:70:09:d7:13:
                    f7:06:29:a1:47:3b:dc:35:b5:ac:90:ae:72:ce:3c:
                    ed:ea:ee:7e:4e:b3:e2:2d:4a:78:3a:6e:00:1b:f4:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:93:C7:EC:A3:98:0C:02:E1:99:43:28:08:D7:64:15:22:1F:8C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:39:c1:a2:bd:4d:77:e2:5b:bc:14:84:81:7d:d9:59:c8:66:
         dd:9b:18:75:da:95:af:b7:62:80:4f:c8:89:6b:dc:88:dd:d8:
         ec:56:a8:be:7b:2d:1f:e1:91:6c:72:65:5c:99:65:3e:27:9a:
         3a:15:6e:4b:8f:da:8c:97:a2:ba:39:b8:41:d4:24:61:dc:e6:
         71:87:f9:8e:5e:c4:da:03:28:a0:fa:19:fb:80:a9:07:90:a7:
         10:05:d2:7b:cc:b0:bf:66:18:c4:dc:1b:32:08:e3:91:d1:ce:
         26:a7:f8:1a:22:f6:50:63:ac:c5:25:e8:4f:77:36:f8:07:b4:
         67:58:6a:1a:36:08:61:c2:31:a8:45:6f:32:fd:ef:32:be:09:
         40:b0:8d:62:21:e3:20:c8:62:79:44:33:ca:75:97:3c:a5:b5:
         69:5e:a3:91:95:f6:d3:1a:d3:0f:e1:88:a6:03:0c:41:fa:21:
         d4:b9:20:85:e1:ea:7a:cc:3a:15:f0:cf:7e:a3:79:15:ff:c3:
         bc:c7:f2:8f:51:64:eb:01:fe:b4:e1:5c:da:a9:e1:d4:ae:90:
         d1:dc:09:09:70:de:ba:2d:b6:d8:0a:3f:ee:a7:fa:af:60:72:
         17:b0:cf:22:6b:bb:a0:08:5e:b5:08:81:5b:73:41:ff:53:55:
         73:69:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:21:30 2026 by rpki-client