Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa
File:                     ab422eee-cee4-35ad-bf8f-cf518f46443b.roa (raw, json)
Hash identifier:          AXxFNu5xuO+l6/5fVk272oVJiYdxyhRCRD3Yvb4aY2w=
Subject key identifier:   E5:CC:FF:EA:01:B2:21:A0:A1:32:52:02:F1:80:D8:BE:D1:F2:F1:75
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584F093CEBD293C24C4E5483D900
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     398156
IP address blocks:        168.220.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:eb:d2:93:c2:4c:4e:54:83:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=df5af8af-115a-4fc9-a468-6fab7c57985a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:42:27:ca:2d:a1:9e:45:62:cc:86:fd:67:
                    63:76:e1:2d:7f:29:ed:eb:5d:1c:57:9e:f1:53:ca:
                    f0:42:b7:5b:10:de:e4:50:77:6b:99:42:48:ce:44:
                    86:84:e3:be:63:64:d6:62:31:a8:a2:2f:17:95:ca:
                    92:f9:58:dd:83:91:8d:9c:cb:02:96:74:02:3f:e6:
                    df:63:f7:9c:06:cf:06:a2:54:34:65:2c:92:a6:fe:
                    ae:47:d5:49:35:23:6f:22:d0:a4:f5:77:1a:ea:01:
                    7c:ac:1d:dd:7e:b2:ea:ab:aa:9c:d3:50:a3:e9:3d:
                    b1:3c:c6:e4:df:f3:a7:40:1d:84:0c:92:ee:96:e3:
                    df:c1:f3:84:be:00:d0:e4:ba:b7:8f:11:51:55:86:
                    64:c3:14:af:4a:ae:15:ab:37:e9:81:e5:70:7d:e3:
                    c0:ef:99:2c:67:f6:0c:fe:43:0e:fd:f7:a4:84:31:
                    e6:7c:89:d1:8c:09:4a:38:16:49:39:4e:7b:27:c5:
                    72:b8:d6:2c:f9:7d:7d:ca:cc:86:59:6a:48:dc:b6:
                    6c:c5:4b:7a:87:1a:f9:db:41:81:c6:c9:a1:ee:d4:
                    18:a6:cd:a5:6f:cc:a4:11:d6:0e:f8:55:0b:36:ef:
                    ca:f3:2c:67:61:af:38:71:cc:8d:3b:a3:89:ba:6c:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CC:FF:EA:01:B2:21:A0:A1:32:52:02:F1:80:D8:BE:D1:F2:F1:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:17:7e:2c:c5:8f:aa:61:de:10:f3:70:0d:4d:a0:20:23:16:
         0e:b9:7d:82:ab:44:99:07:3d:ec:41:cd:03:af:6f:29:bc:2b:
         b7:cc:74:9e:40:90:7e:eb:4f:1f:00:31:6e:20:34:35:33:ce:
         3c:37:cb:26:e0:b4:1f:9e:e2:b7:f0:52:ee:1f:6c:1e:77:5c:
         23:5e:f3:12:06:68:3a:51:e3:5a:2b:4e:b3:e8:b0:51:1b:f4:
         74:8d:7f:84:35:9a:ec:ff:91:ef:95:f4:b3:b7:5e:60:b9:d1:
         8e:fc:28:8e:f1:e8:a8:b2:fa:9b:34:ab:fc:47:82:ae:05:ce:
         fc:c3:7c:33:96:a4:c2:44:2b:48:66:a0:3e:9e:d1:e0:93:fb:
         d7:3a:50:02:f9:8b:5f:42:bd:7d:e4:52:12:f3:05:92:94:86:
         2b:48:f3:5c:92:8f:97:cd:99:27:4e:25:af:4d:01:97:6b:eb:
         16:61:d0:57:a9:03:91:45:81:68:18:52:35:78:05:d8:ed:94:
         9f:d8:35:5f:10:c3:de:e3:08:6a:37:9b:aa:92:05:45:d9:0c:
         d6:d9:2c:73:2a:73:e0:19:a6:82:e9:59:02:a2:e5:b8:a6:24:
         0d:19:4a:93:a7:9b:a0:51:96:f0:fe:91:4f:07:23:af:ff:d0:
         85:00:bc:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOvSk8JMTlSD2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZGY1YWY4YWYtMTE1YS00ZmM5LWE0NjgtNmZhYjdjNTc5ODVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJtCJ8otoZ5FYsyG/WdjduEtfynt610cV57x
U8rwQrdbEN7kUHdrmUJIzkSGhOO+Y2TWYjGooi8XlcqS+Vjdg5GNnMsClnQCP+bf
Y/ecBs8GolQ0ZSySpv6uR9VJNSNvItCk9Xca6gF8rB3dfrLqq6qc01Cj6T2xPMbk
3/OnQB2EDJLuluPfwfOEvgDQ5Lq3jxFRVYZkwxSvSq4VqzfpgeVwfePA75ksZ/YM
/kMO/fekhDHmfInRjAlKOBZJOU57J8VyuNYs+X19ysyGWWpI3LZsxUt6hxr520GB
xsmh7tQYps2lb8ykEdYO+FULNu/K8yxnYa84ccyNO6OJumwMZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXM/+oBsiGgoTJSAvGA2L7R8vF1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYWI0MjJlZWUtY2VlNC0z
NWFkLWJmOGYtY2Y1MThmNDY0NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFoXfizFj6ph3hDzcA1NoCAjFg65fYKrRJkHPexBzQOvbym8K7fMdJ5A
kH7rTx8AMW4gNDUzzjw3yybgtB+e4rfwUu4fbB53XCNe8xIGaDpR41orTrPosFEb
9HSNf4Q1muz/ke+V9LO3XmC50Y78KI7x6Kiy+ps0q/xHgq4FzvzDfDOWpMJEK0hm
oD6e0eCT+9c6UAL5i19CvX3kUhLzBZKUhitI81ySj5fNmSdOJa9NAZdr6xZh0Fep
A5FFgWgYUjV4BdjtlJ/YNV8Qw97jCGo3m6qSBUXZDNbZLHMqc+AZpoLpWQKi5bim
JA0ZSpOnm6BRlvD+kU8HI6//0IUAvDI=
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:04 2026 by rpki-client