Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa
File:                     48c449b8-36b9-3e35-a8d4-23ac559186ef.roa (raw, json)
Hash identifier:          EehDFF6A6xyOj37+i8hZ05Ijs0mpcAiCWCBWVw52ll0=
Subject key identifier:   4F:75:CC:4E:13:A2:A0:41:1B:EF:01:20:E0:FC:E2:A6:AE:C6:4B:85
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584E66DA18B07187D5B5BB213B08
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     398156
IP address blocks:        168.220.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:18:b0:71:87:d5:b5:bb:21:3b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=34c3ef50-55b4-4c79-a775-405f18793c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:bd:38:e8:ec:aa:af:1e:75:99:1a:f5:5c:
                    b9:f7:c6:ab:be:03:78:99:fd:4d:ee:18:ce:da:cd:
                    d6:4a:62:fd:97:e1:5b:56:57:ac:fd:a5:3d:29:1f:
                    68:ba:77:44:07:ab:6c:27:95:53:7a:63:1e:d2:04:
                    75:f2:d7:f9:42:d8:f6:82:60:0b:33:eb:12:eb:93:
                    f5:28:62:f0:49:43:fa:18:86:32:85:33:27:cf:04:
                    bd:49:86:6f:fe:73:38:be:f7:bb:39:95:c9:aa:f7:
                    e7:88:8c:51:e9:87:d3:c1:dd:0c:67:56:61:74:f5:
                    19:5c:24:c0:37:5a:5c:b4:8e:f3:7e:b9:91:35:86:
                    a3:27:ef:da:d3:a8:45:fc:94:1e:8b:a4:ba:d3:b8:
                    b8:58:dc:9f:1b:01:3e:31:a6:6b:29:72:a7:8c:6a:
                    6f:c3:0b:86:f1:6d:1f:eb:e0:80:94:fb:a5:97:b3:
                    9d:40:fd:15:6d:ee:1d:07:1c:dd:7f:08:8d:09:d7:
                    cd:b5:0f:5f:f5:c7:71:54:c8:2a:29:1e:e7:bc:92:
                    bc:44:7c:f6:09:96:3b:7b:08:ad:c3:df:88:c1:74:
                    50:42:88:42:75:14:4a:ed:81:45:d9:f4:e2:a7:31:
                    c2:cf:19:1f:c5:16:89:ee:4a:07:2a:01:75:2f:fb:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:75:CC:4E:13:A2:A0:41:1B:EF:01:20:E0:FC:E2:A6:AE:C6:4B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:7e:33:95:e1:ac:1e:4c:77:55:89:4f:54:b2:b9:55:c3:
         d3:7b:42:f2:07:2c:02:db:5a:bc:a9:62:74:63:aa:d4:17:6c:
         62:b9:e3:de:f9:6e:13:05:2f:ab:de:36:98:28:76:65:aa:3d:
         9c:8b:9e:13:21:cc:3d:c6:09:b6:aa:41:1a:b5:18:b7:28:99:
         49:0b:78:9f:c4:e8:f8:85:7b:62:ac:dd:f0:15:de:e7:c1:fe:
         36:3c:fd:7b:a2:ad:c9:7d:05:85:0a:4f:06:8f:93:cb:4b:bb:
         93:57:4d:78:d0:95:ca:ea:8c:8f:c0:ce:d4:ac:74:c0:83:3b:
         98:55:90:e1:29:e9:94:d1:fa:d0:cc:6b:97:82:37:2a:51:af:
         cd:af:bb:5b:a8:c3:b0:fa:69:5a:9a:a3:61:a4:2b:48:79:e1:
         f6:c7:5a:33:80:dd:ee:02:c2:b1:5e:1f:b8:6e:6c:57:3a:b0:
         1f:6d:80:6f:85:84:17:69:3d:07:49:a1:e4:72:08:71:b0:c0:
         94:4b:c5:96:6f:8e:f2:0e:53:fe:d1:fa:0c:10:c7:2e:1b:aa:
         ca:25:2a:c3:a6:8f:e8:f8:2e:a1:ca:3c:c1:24:b2:5e:32:20:
         e9:7f:0f:12:74:26:53:b9:ad:d1:11:ab:f4:60:9e:8f:b1:36:
         29:1d:b3:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hiwcYfVtbshOwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
MzRjM2VmNTAtNTViNC00Yzc5LWE3NzUtNDA1ZjE4NzkzYzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIC9OOjsqq8edZka9Vy598arvgN4mf1N7hjO
2s3WSmL9l+FbVles/aU9KR9oundEB6tsJ5VTemMe0gR18tf5Qtj2gmALM+sS65P1
KGLwSUP6GIYyhTMnzwS9SYZv/nM4vve7OZXJqvfniIxR6YfTwd0MZ1ZhdPUZXCTA
N1pctI7zfrmRNYajJ+/a06hF/JQei6S607i4WNyfGwE+MaZrKXKnjGpvwwuG8W0f
6+CAlPull7OdQP0Vbe4dBxzdfwiNCdfNtQ9f9cdxVMgqKR7nvJK8RHz2CZY7ewit
w9+IwXRQQohCdRRK7YFF2fTipzHCzxkfxRaJ7koHKgF1L/ucvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE91zE4ToqBBG+8BIOD84qauxkuFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNDhjNDQ5YjgtMzZiOS0z
ZTM1LWE4ZDQtMjNhYzU1OTE4NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNKfjOV4aweTHdViU9UsrlVw9N7QvIHLALbWrypYnRjqtQXbGK54975
bhMFL6veNpgodmWqPZyLnhMhzD3GCbaqQRq1GLcomUkLeJ/E6PiFe2Ks3fAV3ufB
/jY8/Xuircl9BYUKTwaPk8tLu5NXTXjQlcrqjI/AztSsdMCDO5hVkOEp6ZTR+tDM
a5eCNypRr82vu1uow7D6aVqao2GkK0h54fbHWjOA3e4CwrFeH7hubFc6sB9tgG+F
hBdpPQdJoeRyCHGwwJRLxZZvjvIOU/7R+gwQxy4bqsolKsOmj+j4LqHKPMEksl4y
IOl/DxJ0JlO5rdERq/Rgno+xNikds+k=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:36 2026 by rpki-client