Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa
File:                     2c777c15-0aed-3183-a577-cc62d7729532.roa (raw, json)
Hash identifier:          1czgy9OudaoEIBFlMerLozg7r8xPIXmiQmJviA4KDb0=
Subject key identifier:   8B:0B:11:CF:74:47:B7:52:4A:C6:25:51:FA:0A:3F:D1:03:A7:0A:F7
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584AE5C674861B5988DEA0F82C80
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     398156
IP address blocks:        168.220.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:74:86:1b:59:88:de:a0:f8:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=e1eab9ec-16ae-4320-8db9-3508d9c481f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:a6:f8:a2:15:27:ee:23:e3:1a:85:8a:02:
                    ab:b7:27:51:ff:79:05:e7:5e:06:6c:d7:66:30:a8:
                    e5:f5:7c:c0:61:a8:8f:e4:74:97:f1:21:c8:05:59:
                    9e:15:b3:ec:94:10:c1:e2:03:6e:a9:b5:a7:47:e1:
                    6b:b0:9c:22:f1:5b:49:e7:59:d4:72:a4:7b:69:fe:
                    e9:72:d6:50:d6:22:7f:d5:43:07:c0:4f:77:72:8c:
                    04:bb:77:2e:13:8c:d0:cb:57:42:46:f4:32:e7:d9:
                    a6:ea:6a:5a:a2:2e:22:79:fe:e5:d0:b4:d9:fa:f4:
                    d6:b8:8c:40:52:ec:6e:f2:48:8d:55:5f:45:c2:c5:
                    62:ff:d3:c7:ba:c9:4d:4a:96:5a:ca:c8:44:ab:00:
                    2c:59:82:e9:c6:83:ee:ba:27:51:c2:ba:df:4e:e2:
                    04:f6:62:41:53:ed:d6:1f:fa:79:44:bf:25:bd:ca:
                    54:21:c5:af:00:f0:5c:05:14:92:ce:f3:27:9f:a9:
                    5e:16:ed:b1:3c:c6:17:cf:b7:a5:18:55:35:4f:fa:
                    2f:22:c5:59:f3:97:67:b9:e6:b3:f3:72:25:63:38:
                    c3:a3:5a:5f:84:6a:7f:99:a5:d3:a3:bc:39:ae:e6:
                    3d:2b:45:31:96:c5:fd:c4:9b:3f:49:6d:80:cc:ef:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0B:11:CF:74:47:B7:52:4A:C6:25:51:FA:0A:3F:D1:03:A7:0A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:5e:ae:d5:c7:65:bd:b7:0f:2d:a9:d2:3b:73:f9:bb:b7:
         50:d5:42:55:df:cb:2e:f9:1b:86:c6:f2:3a:c1:37:79:21:87:
         41:72:7f:f9:8d:ae:ab:1f:fb:69:df:67:b7:74:22:9f:ba:b2:
         53:78:3b:b2:eb:04:16:61:f2:37:e4:5d:b5:7f:a0:f6:d1:7e:
         0d:15:65:ae:3f:71:a4:19:09:74:d8:14:3f:5f:a7:f4:22:6b:
         28:c6:77:02:0e:3c:f6:a3:0b:1b:ca:93:21:45:e5:fd:51:e9:
         f7:cc:ec:24:79:48:fd:e6:df:80:b1:c8:34:5f:01:dc:ee:b9:
         2a:ac:e4:e4:8d:8c:33:48:c9:cb:d7:c1:72:97:6d:9c:77:ff:
         a3:d2:26:45:c1:38:ae:02:ec:8b:cd:03:82:55:24:c9:57:a2:
         0f:9e:9b:d8:1c:87:76:40:e7:89:68:99:6e:fb:65:91:59:01:
         94:6a:a4:0e:40:3b:ea:d7:be:48:10:6a:7a:55:34:15:ed:7d:
         47:ab:ca:4e:b6:a7:54:3f:98:ea:3d:fe:2a:7e:cd:69:91:05:
         42:36:37:1d:5b:83:b1:07:fb:25:4d:f6:89:fe:9a:4a:6e:bb:
         28:0e:ce:ec:9b:c5:3a:09:e7:d1:82:c2:f2:f8:a6:fd:e8:a8:
         d9:b5:13:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnSGG1mI3qD4LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZTFlYWI5ZWMtMTZhZS00MzIwLThkYjktMzUwOGQ5YzQ4MWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jym+KIVJ+4j4xqFigKrtydR/3kF514GbNdm
MKjl9XzAYaiP5HSX8SHIBVmeFbPslBDB4gNuqbWnR+FrsJwi8VtJ51nUcqR7af7p
ctZQ1iJ/1UMHwE93cowEu3cuE4zQy1dCRvQy59mm6mpaoi4ief7l0LTZ+vTWuIxA
Uuxu8kiNVV9FwsVi/9PHuslNSpZayshEqwAsWYLpxoPuuidRwrrfTuIE9mJBU+3W
H/p5RL8lvcpUIcWvAPBcBRSSzvMnn6leFu2xPMYXz7elGFU1T/ovIsVZ85dnueaz
83IlYzjDo1pfhGp/maXTo7w5ruY9K0UxlsX9xJs/SW2AzO+2xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIsLEc90R7dSSsYlUfoKP9EDpwr3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMmM3NzdjMTUtMGFlZC0z
MTgzLWE1NzctY2M2MmQ3NzI5NTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0gXq7Vx2W9tw8tqdI7c/m7t1DVQlXfyy75G4bG8jrBN3khh0Fyf/mN
rqsf+2nfZ7d0Ip+6slN4O7LrBBZh8jfkXbV/oPbRfg0VZa4/caQZCXTYFD9fp/Qi
ayjGdwIOPPajCxvKkyFF5f1R6ffM7CR5SP3m34CxyDRfAdzuuSqs5OSNjDNIycvX
wXKXbZx3/6PSJkXBOK4C7IvNA4JVJMlXog+em9gch3ZA54lomW77ZZFZAZRqpA5A
O+rXvkgQanpVNBXtfUeryk62p1Q/mOo9/ip+zWmRBUI2Nx1bg7EH+yVN9on+mkpu
uygOzuybxToJ59GCwvL4pv3oqNm1Ex8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:11:10 2025 by rpki-client