Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9173c854-62ba-38f9-973d-5944843c3ad7.roa
File:                     9173c854-62ba-38f9-973d-5944843c3ad7.roa (raw, json)
Hash identifier:          BkVPgLDjxP5luY4wA/93bqJEaabWHXzwwsJ8MjV5S9Y=
Subject key identifier:   CD:FC:1B:35:47:28:96:73:01:E9:1A:8D:97:82:8E:A0:B5:B2:61:02
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584F093CF33B630476462ED4D780
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9173c854-62ba-38f9-973d-5944843c3ad7.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     398156
IP address blocks:        158.120.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f3:3b:63:04:76:46:2e:d4:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=d77a7775-a19e-4401-8d1d-5ddc0c4edc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:85:a9:bd:45:bc:bc:dc:82:f4:11:95:69:
                    9b:9d:45:95:fb:79:7f:3e:86:03:4e:be:2b:48:51:
                    a1:3b:e4:13:0c:f6:0e:e9:83:50:1b:c9:8d:31:96:
                    66:e1:b5:69:50:7d:aa:05:86:6d:a8:3e:ef:a8:e8:
                    c1:9e:7d:0c:72:ea:db:58:93:f4:d7:dc:5a:9c:a5:
                    fb:1d:d1:79:23:3c:81:30:a4:9a:1c:6d:71:a4:67:
                    d6:68:f5:d2:be:c8:9f:5f:20:5d:6f:f3:1f:3e:51:
                    72:4d:7d:54:47:6e:f4:a1:74:b2:37:26:af:07:0f:
                    36:ae:03:e6:b3:64:fe:13:f7:46:1b:d0:1f:ad:fd:
                    98:c1:6d:ac:ef:53:a2:0c:3f:8e:de:d8:18:74:c9:
                    fb:c9:c2:10:fd:0f:23:d0:97:c4:9e:59:30:7a:f1:
                    7c:c7:73:8a:eb:21:9a:59:d5:1d:49:f7:50:40:5e:
                    d9:60:2b:4f:ad:be:fc:d4:ae:de:42:f4:8b:60:2f:
                    9a:d9:08:8f:0a:b4:fc:26:fa:78:3f:de:07:2a:8a:
                    ef:ba:9b:5b:d0:5c:e9:e4:0a:00:c1:5c:60:fb:7b:
                    e6:e3:b0:b9:32:f1:49:bd:b0:82:bc:6e:3b:56:5b:
                    50:5b:f1:a9:3a:cd:5d:6b:91:65:4c:d6:97:f0:a9:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FC:1B:35:47:28:96:73:01:E9:1A:8D:97:82:8E:A0:B5:B2:61:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9173c854-62ba-38f9-973d-5944843c3ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:08:fe:f3:d8:a9:8f:7e:8d:54:a7:3c:a5:d9:53:35:84:74:
         eb:0e:48:37:e1:43:89:a4:7c:8b:3c:4d:6a:ea:ed:9f:20:32:
         12:fc:8c:51:0f:57:d7:95:75:44:79:11:86:66:09:90:34:9d:
         44:e5:8a:df:e3:a9:fa:6b:76:bd:f5:67:44:cb:c6:fd:af:9f:
         36:e6:77:cb:8c:34:7c:75:f6:6d:d2:9a:3f:c4:5d:75:8c:7a:
         24:7b:c3:bb:65:fd:00:99:49:e7:54:d0:37:c7:2a:55:19:66:
         9a:0d:09:b3:ce:b4:49:ba:77:29:ce:14:f6:0a:f3:fe:6c:aa:
         4d:8c:76:c6:3f:9f:31:c5:58:0d:55:bd:0e:c6:21:e3:4a:2a:
         95:07:22:3f:15:a7:06:ee:f4:cb:87:63:ca:97:ec:08:6a:a7:
         0f:7b:e4:1d:62:7b:a1:af:64:c0:18:55:a8:cc:6f:ff:67:ca:
         3c:f0:3d:99:65:aa:ad:4f:f0:f0:66:3e:1a:70:7e:ab:f8:1e:
         8c:af:5c:05:dd:0c:46:da:15:79:2d:02:2c:5e:95:ee:22:1a:
         5c:90:cb:5e:e7:66:cc:4d:7f:ea:64:a2:87:a8:13:74:c7:b2:
         6f:42:98:60:f4:17:3e:8d:a1:e8:41:b4:76:02:d1:95:9d:08:
         ff:6e:7a:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPM7YwR2Ri7U14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZDc3YTc3NzUtYTE5ZS00NDAxLThkMWQtNWRkYzBjNGVkYzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTGFqb1FvLzcgvQRlWmbnUWV+3l/PoYDTr4r
SFGhO+QTDPYO6YNQG8mNMZZm4bVpUH2qBYZtqD7vqOjBnn0McurbWJP019xanKX7
HdF5IzyBMKSaHG1xpGfWaPXSvsifXyBdb/MfPlFyTX1UR270oXSyNyavBw82rgPm
s2T+E/dGG9Afrf2YwW2s71OiDD+O3tgYdMn7ycIQ/Q8j0JfEnlkwevF8x3OK6yGa
WdUdSfdQQF7ZYCtPrb781K7eQvSLYC+a2QiPCrT8Jvp4P94HKorvuptb0Fzp5AoA
wVxg+3vm47C5MvFJvbCCvG47VltQW/GpOs1da5FlTNaX8KmVZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM38GzVHKJZzAekajZeCjqC1smECMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvOTE3M2M4NTQtNjJiYS0z
OGY5LTk3M2QtNTk0NDg0M2MzYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgI/vPYqY9+jVSnPKXZUzWEdOsOSDfhQ4mkfIs8TWrq7Z8gMhL8jFEP
V9eVdUR5EYZmCZA0nUTlit/jqfprdr31Z0TLxv2vnzbmd8uMNHx19m3Smj/EXXWM
eiR7w7tl/QCZSedU0DfHKlUZZpoNCbPOtEm6dynOFPYK8/5sqk2MdsY/nzHFWA1V
vQ7GIeNKKpUHIj8Vpwbu9MuHY8qX7Ahqpw975B1ie6GvZMAYVajMb/9nyjzwPZll
qq1P8PBmPhpwfqv4HoyvXAXdDEbaFXktAixele4iGlyQy17nZsxNf+pkooeoE3TH
sm9CmGD0Fz6NoehBtHYC0ZWdCP9uenc=
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:59 2026 by rpki-client