Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa
File:                     48c449b8-36b9-3e35-a8d4-23ac559186ef.roa (raw, json)
Hash identifier:          e68N2uk9IcUN0Cz2HuRp3OiwxQEGx1dZsdvXApEK4Dk=
Subject key identifier:   0A:7F:4C:97:B9:CA:F7:0D:58:87:60:45:DC:27:F2:90:BF:9F:16:2A
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584AE5C67517E845577FC9020460
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     398156
IP address blocks:        168.220.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:75:17:e8:45:57:7f:c9:02:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=593ac599-5f3f-4023-97d9-949e6bbe780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:2d:0e:b0:20:9e:a0:c0:4c:f1:1f:90:d8:
                    d4:12:09:65:05:67:e7:01:95:5e:b8:95:6a:f4:b8:
                    de:1b:74:6a:23:c9:13:fb:4f:87:a5:34:65:4e:46:
                    97:99:88:7f:19:aa:b6:32:30:63:c7:3c:bb:64:39:
                    da:eb:28:24:8e:03:b0:98:8f:9d:15:f2:98:85:b0:
                    de:72:1e:bd:38:51:40:fb:bb:87:6c:7e:3e:f1:e2:
                    b4:25:7c:f5:8a:64:79:a1:fb:a3:c3:4e:7d:60:fd:
                    41:86:c9:e0:38:1a:6b:40:a9:34:d3:0f:b4:41:51:
                    a4:38:db:ed:20:2f:1b:05:7c:29:e5:3f:e5:29:35:
                    77:d6:cb:74:a1:a6:64:fc:4e:0f:d5:e4:eb:8a:74:
                    84:29:0f:79:36:43:76:87:5f:db:87:e8:25:82:a6:
                    e6:28:57:da:11:e0:92:81:f2:b2:c1:74:df:87:d2:
                    72:a7:f2:21:7c:89:fb:7c:8c:23:13:a8:6c:70:54:
                    9e:12:c5:97:ec:ff:7e:aa:c5:3c:90:77:04:c9:4c:
                    01:a5:5e:cc:d9:e4:ef:0c:95:c0:66:c2:3f:e6:b8:
                    90:2d:2e:25:58:13:4f:d1:9b:78:84:be:e2:9f:61:
                    f4:35:51:2c:3d:90:03:48:75:bd:34:cd:cc:f5:29:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7F:4C:97:B9:CA:F7:0D:58:87:60:45:DC:27:F2:90:BF:9F:16:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:50:e5:92:53:78:b7:47:d7:49:88:96:e3:0d:78:27:ee:f3:
         bf:fd:fb:0b:6a:05:54:15:21:a3:c1:58:a5:bc:81:e5:0a:b4:
         19:e4:9a:04:9e:d0:c5:ae:73:92:35:1f:a3:8c:e4:02:2a:06:
         12:b8:b6:0c:e8:78:42:a9:98:c5:cc:a9:37:b6:9e:1b:9a:71:
         7b:7a:39:ff:ea:b5:43:65:79:6e:05:a0:ba:ec:a3:8c:ee:53:
         99:98:b9:50:6a:98:b8:10:ed:f4:a6:45:3f:e4:85:21:64:5c:
         c1:39:d0:9e:52:81:e4:27:0e:10:b0:7f:a8:3c:aa:8e:cc:1a:
         99:5a:be:60:a4:4a:f5:91:e3:c2:9b:f9:38:01:74:03:92:80:
         8e:2f:f9:f4:f7:be:57:53:01:c9:24:8c:30:d0:71:f3:f9:a7:
         46:36:1f:72:f5:b6:01:f5:0c:58:0a:d2:c9:ac:fb:3c:07:ac:
         2e:d8:cb:2f:0e:d0:ac:72:12:da:71:aa:af:3d:b9:87:70:8d:
         6f:dd:c4:b6:7c:50:7e:be:f9:48:a0:2e:66:5b:29:a0:65:77:
         12:ab:12:1f:ec:b9:4b:50:ee:fe:82:b5:bd:c3:4f:e3:85:cd:
         eb:24:69:58:a1:c9:4e:e8:98:cd:b8:be:28:a4:3d:ec:34:89:
         ec:3b:26:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnUX6EVXf8kCBGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk
NTkzYWM1OTktNWYzZi00MDIzLTk3ZDktOTQ5ZTZiYmU3ODBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BMtDrAgnqDATPEfkNjUEgllBWfnAZVeuJVq
9LjeG3RqI8kT+0+HpTRlTkaXmYh/Gaq2MjBjxzy7ZDna6ygkjgOwmI+dFfKYhbDe
ch69OFFA+7uHbH4+8eK0JXz1imR5ofujw059YP1BhsngOBprQKk00w+0QVGkONvt
IC8bBXwp5T/lKTV31st0oaZk/E4P1eTrinSEKQ95NkN2h1/bh+glgqbmKFfaEeCS
gfKywXTfh9Jyp/IhfIn7fIwjE6hscFSeEsWX7P9+qsU8kHcEyUwBpV7M2eTvDJXA
ZsI/5riQLS4lWBNP0Zt4hL7in2H0NVEsPZADSHW9NM3M9SlIywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAp/TJe5yvcNWIdgRdwn8pC/nxYqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNDhjNDQ5YjgtMzZiOS0z
ZTM1LWE4ZDQtMjNhYzU1OTE4NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxQ5ZJTeLdH10mIluMNeCfu87/9+wtqBVQVIaPBWKW8geUKtBnkmgSe
0MWuc5I1H6OM5AIqBhK4tgzoeEKpmMXMqTe2nhuacXt6Of/qtUNleW4FoLrso4zu
U5mYuVBqmLgQ7fSmRT/khSFkXME50J5SgeQnDhCwf6g8qo7MGplavmCkSvWR48Kb
+TgBdAOSgI4v+fT3vldTAckkjDDQcfP5p0Y2H3L1tgH1DFgK0sms+zwHrC7Yyy8O
0KxyEtpxqq89uYdwjW/dxLZ8UH6++UigLmZbKaBldxKrEh/suUtQ7v6Ctb3DT+OF
zeskaVihyU7omM24viikPew0iew7Jm8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:10:27 2025 by rpki-client