Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa
File:                     3c70d43d-85bd-39c4-974b-b26dc07b9073.roa (raw, json)
Hash identifier:          RzRj72kbqlLeURrUKL4gf1GyvYnC9lWI+ZmDtP8kd8s=
Subject key identifier:   3F:54:37:36:E3:98:E8:8A:4E:B8:61:12:78:57:C1:21:DE:8C:D2:5D
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584FAB28AFF4937D2A2E46F1E8E0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     398156
IP address blocks:        168.220.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:af:f4:93:7d:2a:2e:46:f1:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=2f0a244f-8f10-427b-9a43-a9ee61ffb43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:f1:ba:30:72:9a:71:ac:7f:70:39:46:a5:
                    9b:72:76:ff:24:5a:fb:28:52:f0:1c:ec:b1:93:88:
                    7a:81:57:c4:35:1c:eb:b7:4f:46:b8:a0:89:7f:9f:
                    ca:44:56:a4:d5:ef:8b:5a:6b:b5:ab:d0:e3:bb:44:
                    5c:00:b8:3e:5f:26:ba:c6:8f:49:fb:3f:96:ab:88:
                    7a:fc:55:71:b3:51:65:b1:8e:6c:b9:70:8c:41:01:
                    69:ef:a4:c8:10:3f:bd:9f:35:08:ba:15:4c:90:f3:
                    46:9a:db:1b:7c:3b:13:61:ef:1f:fe:93:b5:a7:25:
                    be:ba:57:82:75:37:92:a4:1f:2d:2f:22:0a:39:89:
                    94:01:20:ee:1e:2e:2f:98:67:cd:ac:8d:c2:95:6d:
                    70:7b:18:93:a4:c2:22:50:a7:74:60:78:b0:3c:53:
                    6a:45:e3:6c:5b:c2:cd:95:dd:c8:b9:6b:16:90:25:
                    9e:e0:1d:ad:6e:81:12:1d:f2:64:c8:ec:4f:78:e9:
                    e6:69:a8:02:0a:71:62:2c:e7:f5:eb:e7:28:38:64:
                    a5:71:94:95:0a:0b:49:f0:01:cc:a6:ff:5a:34:6f:
                    2f:1f:7e:01:23:0b:52:fd:f3:b7:5d:97:b9:91:b0:
                    2d:49:f6:83:b7:2a:a6:a4:c8:84:25:3f:f4:39:c2:
                    7f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:37:36:E3:98:E8:8A:4E:B8:61:12:78:57:C1:21:DE:8C:D2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1b:5e:b4:7a:66:0e:3c:bf:80:16:90:81:1a:71:7d:f4:71:
         12:dc:3b:6c:b2:91:a2:bd:e3:0a:bd:6f:f1:b2:db:85:fb:18:
         00:45:b1:8c:2f:dd:7f:86:ac:0d:47:8b:ca:cf:0c:74:a4:b7:
         46:70:dc:4f:57:ea:82:7c:3a:5d:fa:90:d5:fe:7d:b5:47:51:
         59:38:f5:c4:4f:1c:d5:78:cd:ad:20:d2:ee:86:4b:cd:90:40:
         c8:ff:62:7c:3c:88:6d:54:14:e0:3a:ff:6f:03:71:b5:1e:67:
         41:12:34:29:59:17:41:e1:3a:d9:6e:e2:01:fd:ee:44:e5:d3:
         45:90:8d:0e:45:40:92:b6:ba:32:22:68:dc:1b:32:c7:a9:c9:
         51:87:a6:57:5e:7d:85:93:ab:cc:ec:0d:b4:3a:f2:4b:9f:24:
         94:2b:24:18:5f:d0:95:79:ca:d6:15:3d:1e:62:b0:a6:17:bd:
         ba:cc:dd:c2:36:d9:d8:0f:af:e6:d9:04:f8:c1:cf:33:b1:bf:
         d6:6d:43:fb:0e:30:99:05:b2:77:b1:b5:c8:7e:c3:d7:31:3f:
         21:5e:9e:2a:c9:99:45:ae:1f:f3:ec:73:80:1c:28:b3:9f:ee:
         6f:72:12:4a:28:c6:c8:04:9b:fd:a2:34:ce:87:f5:39:ac:aa:
         72:3c:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 06:35:41 2026 by rpki-client