Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa
File:                     f6064a69-8e2a-30ff-a4e0-a91669f30752.roa (raw, json)
Hash identifier:          7KLcRx1B+meklseWSsVm69s4PzFTVyESFBP8qr/5yaU=
Subject key identifier:   83:E5:AB:CF:2E:8A:9F:A3:AA:67:AE:0C:85:86:E0:35:7A:82:2F:CE
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584F093CEC7EFE1D680DC02D0700
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     398156
IP address blocks:        158.120.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ec:7e:fe:1d:68:0d:c0:2d:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=33b947ce-1b47-454b-892b-4769a2284127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:4c:f5:c1:3d:44:db:a3:5c:9f:88:d9:f0:
                    79:96:14:5b:58:03:00:0c:88:47:2b:f4:fe:98:06:
                    59:74:5f:81:85:50:12:c7:f7:18:d0:f4:19:f9:bb:
                    c9:ac:4e:ea:40:10:9b:85:e2:84:96:1e:f7:ed:ee:
                    e1:ac:02:bf:3e:7c:20:a4:b8:be:35:8d:20:8e:07:
                    24:3e:c5:92:81:da:6c:41:c9:32:74:76:0a:11:7a:
                    50:65:b5:0d:69:97:e5:24:50:24:77:4d:e1:2d:53:
                    18:dc:b1:ea:51:6b:4a:b3:88:4d:d1:c6:dc:a3:11:
                    cc:25:be:56:2f:09:e3:34:87:3a:d7:98:30:86:da:
                    cf:d3:05:17:68:74:13:19:9b:b2:f1:89:61:35:0e:
                    1c:b2:5c:72:2f:b8:13:4d:bd:4e:da:dc:cc:bf:74:
                    81:48:59:8c:7b:88:af:8c:c9:29:cb:a2:00:1c:f5:
                    32:29:7f:b7:9f:6e:5e:1a:8f:57:a9:03:1b:13:d7:
                    8c:bd:bf:33:4c:4c:9c:3f:fa:32:7a:92:ce:28:04:
                    fc:99:e1:a7:04:cf:52:6d:30:ac:e2:70:5e:5d:aa:
                    a1:1b:9c:4a:82:e3:f0:f2:95:59:f6:37:95:bf:31:
                    46:09:96:09:9b:55:fc:0e:dc:4d:0f:b2:5b:be:a4:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E5:AB:CF:2E:8A:9F:A3:AA:67:AE:0C:85:86:E0:35:7A:82:2F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:66:bf:de:f6:8a:c4:93:fd:ab:e5:c8:be:81:5b:bd:9e:00:
         cc:38:33:02:c2:28:47:4f:ca:9b:f4:e6:e4:2c:dd:8a:40:df:
         63:78:cf:1c:21:1a:44:e7:1b:ed:2a:75:74:87:05:a9:74:f0:
         b3:93:c8:48:1e:c5:bc:01:9c:14:7c:c6:e4:be:c6:68:b7:b3:
         f1:16:c3:cc:3e:bd:40:67:b7:ce:e1:fb:b1:6f:95:ca:45:d5:
         be:97:28:cc:b0:c1:7b:55:a6:a4:d5:9d:f8:55:60:ed:88:0a:
         50:7d:a5:b9:9c:1f:b3:05:25:1f:f4:13:ee:62:a9:fd:e9:6c:
         2e:c2:ce:df:43:11:9e:99:92:6b:50:dd:e7:66:92:3e:99:1b:
         8a:87:53:b9:87:44:e6:2d:50:c1:f1:ad:4e:1d:e1:bf:d4:f4:
         39:1d:a9:69:ac:d2:0d:67:83:0f:04:da:3d:cd:b3:1d:3e:55:
         11:2e:e1:ed:0b:75:6d:0f:10:07:da:3b:80:bc:f7:2f:03:a3:
         c8:25:78:53:5c:41:8d:41:3a:e4:ce:bb:e1:03:8e:12:10:6f:
         fa:b5:d9:9b:3b:90:f2:e7:fc:ac:6c:cd:b3:fe:b6:b1:14:8c:
         4f:83:1d:5d:f3:37:4d:ef:0f:a7:65:35:5d:2f:14:6d:96:77:
         ee:bf:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:18:57 2026 by rpki-client