Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9771eade-2840-3a81-a8a9-f6503e180310.roa
File:                     9771eade-2840-3a81-a8a9-f6503e180310.roa (raw, json)
Hash identifier:          x5uFglM8pjZr1R+FwVCNy4lD1Kt3K4sW5IHf+krjp6c=
Subject key identifier:   2B:13:22:CB:B2:7F:8F:F5:07:0C:02:43:3F:68:BD:C8:B8:AF:DB:71
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584EB84728C0D52748AF0F5F07E0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9771eade-2840-3a81-a8a9-f6503e180310.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     398156
IP address blocks:        158.120.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:28:c0:d5:27:48:af:0f:5f:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=2068792e-5bc6-4ae7-bc3e-545254fb7ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:45:8c:34:c7:5b:90:8d:47:f1:e0:e6:55:
                    03:f3:16:a9:96:0a:02:6f:90:da:c1:0d:26:2e:22:
                    93:6d:14:3f:12:60:d4:39:1d:cb:90:71:e2:5f:42:
                    fb:9b:e3:11:95:9a:b1:4a:4f:7b:41:bd:63:a8:c9:
                    00:d6:d1:82:99:38:e8:62:1d:4d:8b:63:f4:8c:d2:
                    10:6f:24:49:bc:98:e1:9b:6a:39:2b:78:43:a1:5d:
                    7a:ea:21:bb:47:99:8d:44:89:c1:a3:2e:d6:b4:e9:
                    8e:ff:c7:eb:96:a1:34:e2:26:41:ec:95:33:fc:ab:
                    34:da:ca:7e:aa:f2:40:25:0e:3d:86:d7:50:3d:45:
                    80:00:d0:9c:74:62:00:d3:05:35:39:75:61:48:ec:
                    53:0e:10:5a:de:2e:56:a0:b9:4d:13:99:d5:30:05:
                    a7:67:2f:1f:13:28:2c:b7:0c:94:44:c7:a1:b3:01:
                    0b:97:20:ce:19:7f:3f:d5:c6:36:77:06:b0:0e:ad:
                    eb:c4:4a:b6:b3:88:f3:b7:0b:bc:08:83:6f:9e:b6:
                    19:1b:c0:aa:e2:d1:a2:47:d7:73:47:f1:c3:07:4b:
                    ab:83:36:26:cb:7a:2a:2a:02:e4:5c:33:67:7b:1f:
                    af:e0:c4:88:66:ed:e5:95:9f:ff:89:98:32:9a:c3:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:13:22:CB:B2:7F:8F:F5:07:0C:02:43:3F:68:BD:C8:B8:AF:DB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9771eade-2840-3a81-a8a9-f6503e180310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:14:60:8c:d2:fe:be:fd:7f:ee:be:a9:d1:cd:07:58:a7:2f:
         2d:79:db:d3:68:15:b3:ac:de:7f:d5:0f:71:4b:f2:49:6a:ae:
         ea:cc:ec:97:09:3d:b9:35:60:58:0b:5d:b9:4b:5b:2c:22:81:
         5d:99:7a:91:38:4b:a9:0f:56:36:7b:c9:d7:d7:73:19:47:4f:
         41:c6:b2:2c:91:59:2a:4e:bb:45:70:b0:2a:40:89:48:26:79:
         d7:4b:34:f8:14:fa:4a:e9:e4:fd:ea:80:21:97:dc:07:fb:cb:
         5d:15:9e:0f:79:04:b4:db:54:22:19:f6:6b:d4:f6:cf:66:a1:
         b7:39:16:ff:6c:bc:a3:c6:0e:c4:36:fd:06:47:b3:34:d0:74:
         c3:fb:52:62:cf:7d:b2:14:8e:37:cf:9a:8c:71:75:e6:fc:60:
         ee:26:0f:9c:40:ef:70:7b:45:41:5b:15:92:b8:99:76:4a:80:
         71:d7:8c:eb:32:c8:21:e9:58:df:ba:ab:2f:53:f8:47:fe:38:
         9f:60:ba:a7:3b:1b:cd:b6:af:61:11:6d:01:9a:a1:66:78:d3:
         7c:ff:ab:4a:57:bd:1a:c8:02:ae:82:d2:f7:ea:60:a4:e1:fc:
         d0:cb:5a:65:87:77:b1:2e:6b:2d:57:77:a6:90:1c:1f:5f:4c:
         28:5a:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:20:46 2026 by rpki-client