Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/93497be9-d4a7-37b2-a828-c5e8d039363b.roa
File:                     93497be9-d4a7-37b2-a828-c5e8d039363b.roa (raw, json)
Hash identifier:          gqSlWzY8KCsrujpnTPXegy2cvmYlx2iaP2kKDzmMiKY=
Subject key identifier:   45:41:04:FA:4E:AC:15:4F:B5:79:E6:DB:93:83:E0:18:EF:A6:4B:40
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584FAB28A94A07824D9184F4A498
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/93497be9-d4a7-37b2-a828-c5e8d039363b.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     398156
IP address blocks:        168.220.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:a9:4a:07:82:4d:91:84:f4:a4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=2c63ba38-c3a7-42ee-982c-ad0368c54548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:f3:e7:b9:67:75:c7:53:0e:c1:5a:78:b0:
                    c3:cb:f0:93:0f:71:25:07:26:c3:4a:d3:e1:44:8a:
                    3a:24:f0:34:76:7b:41:9f:3f:d5:e1:c7:81:a0:26:
                    8d:9a:52:44:4e:15:33:48:4a:01:d0:48:c0:7f:bf:
                    3f:79:2d:58:0e:98:d5:4e:ad:6a:06:97:12:51:e7:
                    55:3f:94:69:b7:19:63:73:3a:74:5f:8d:6e:74:4c:
                    ba:78:91:00:8b:b9:cc:91:cb:87:55:de:5b:ed:ad:
                    44:48:3b:31:46:01:85:d9:c7:75:7b:eb:83:3b:28:
                    a5:68:b2:07:2a:84:83:7f:ee:cb:bc:3b:e7:df:cb:
                    83:6e:3a:5c:3c:68:4a:1e:86:90:76:5b:43:2b:58:
                    99:07:26:46:5b:b5:79:00:88:3e:06:af:67:a3:48:
                    09:65:3a:6e:9c:21:7a:97:ce:8f:1d:ec:c9:f9:fb:
                    51:51:eb:66:95:e4:66:bc:9b:2d:b5:ea:a5:52:de:
                    26:73:a9:75:a9:e6:b6:3f:ef:9c:65:53:a3:db:97:
                    e8:46:c3:4c:47:30:23:54:6c:71:31:74:8e:49:84:
                    f2:9a:5a:e1:54:57:40:ae:90:d4:80:06:4c:04:3d:
                    67:08:f8:c6:75:89:49:8a:09:61:82:bd:3c:3c:ac:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:04:FA:4E:AC:15:4F:B5:79:E6:DB:93:83:E0:18:EF:A6:4B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/93497be9-d4a7-37b2-a828-c5e8d039363b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0d:5e:5e:a8:f0:55:6c:f5:51:b7:59:9d:24:2d:7a:ef:c9:
         6d:33:b3:87:23:db:d6:e1:62:39:4b:68:33:a5:39:4d:db:4b:
         14:e6:99:77:9f:eb:23:0d:e8:c0:c8:93:76:8d:cc:06:58:c2:
         90:17:47:f2:85:2d:1a:c2:d2:3c:64:02:78:e1:44:d3:69:18:
         ca:77:aa:5d:05:d8:4a:10:2f:82:39:0e:e0:9d:be:be:c3:2e:
         4c:31:17:94:09:16:7a:3a:a3:ba:39:14:c3:22:6d:5c:4b:38:
         02:a7:b8:a9:af:22:fc:69:2b:39:2b:1e:00:4d:9d:61:4a:80:
         9a:aa:07:47:db:69:69:93:78:9a:75:8b:64:ed:50:2e:8d:84:
         06:10:b0:98:6a:a6:97:4d:5c:f1:7c:0c:8c:2d:84:e7:47:83:
         0e:22:3c:13:ac:b1:33:a1:fb:cc:8c:90:8a:5c:b3:a3:0c:ad:
         62:86:c0:c6:13:5b:ad:22:bd:97:d5:41:15:ad:49:25:54:40:
         2e:86:8e:ab:45:54:02:44:c1:60:77:83:75:59:aa:57:57:57:
         5c:e4:bf:95:06:d2:3d:9d:04:70:a1:32:39:62:55:c7:ca:03:
         ca:74:fb:bb:0e:6d:a9:ac:57:16:74:5e:75:87:49:f1:89:b3:
         4c:9c:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 06:35:44 2026 by rpki-client