Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa
File:                     68c230d0-a323-356a-a12c-934c81d3da7a.roa (raw, json)
Hash identifier:          Q+6NQZ19SfKCXBBwzr7DivTEOn4mQXdvlj/+W8yCaQw=
Subject key identifier:   B5:DA:C6:11:E7:CC:D6:E2:08:85:BD:51:59:C2:CB:74:50:24:E5:72
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584D359FD36946857E5BF8530800
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     398156
IP address blocks:        158.120.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:d3:69:46:85:7e:5b:f8:53:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=53cc2b0b-d239-4a9d-b68d-29fe263e9fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:c4:90:d9:52:8e:bf:9f:71:82:9f:73:27:
                    c0:95:88:df:91:89:5b:63:dc:88:8f:bd:54:85:2e:
                    31:9c:bd:d6:33:fb:80:62:5a:4f:6d:6f:ff:f6:1f:
                    99:eb:b9:27:3c:d4:ea:fd:91:db:29:30:3b:44:14:
                    57:72:df:82:bb:a6:28:34:91:57:c0:e5:29:de:f6:
                    98:38:80:0f:af:56:f0:44:e5:76:8d:02:ee:3a:a3:
                    3d:c2:fd:74:2d:99:dc:be:8c:63:b1:2f:3f:b8:2f:
                    9a:b6:17:ff:04:49:a1:92:a6:b6:cd:1e:30:50:19:
                    a2:6b:d6:ec:3a:82:b3:f8:f3:4b:66:55:b2:5e:f1:
                    58:60:4b:56:d6:76:63:0c:50:f0:4f:e7:06:07:08:
                    91:c6:46:70:22:4e:2a:fb:9a:c9:72:de:aa:07:bd:
                    b0:7f:41:df:38:80:d8:e1:56:b6:aa:43:91:42:cd:
                    56:24:0f:02:0b:01:38:28:e7:53:81:41:4f:c4:90:
                    10:28:70:ea:43:06:1d:eb:c7:5d:8a:08:9e:2d:3e:
                    32:7c:44:4c:82:59:34:8f:f6:f7:77:20:8b:35:a3:
                    d2:88:92:22:e4:66:8a:04:ad:56:f9:45:90:54:8d:
                    43:05:df:e2:59:36:19:a9:c0:df:ed:4b:cb:54:5e:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:C6:11:E7:CC:D6:E2:08:85:BD:51:59:C2:CB:74:50:24:E5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b9:bd:51:6c:f5:2f:83:b3:11:5d:e3:eb:a9:78:08:9c:5e:
         e4:7d:c8:0f:03:48:09:5f:56:ab:92:71:0f:20:ad:d9:16:e4:
         57:80:a0:2d:df:a8:6d:31:14:47:55:59:5a:42:05:3e:bc:24:
         b7:d2:cb:93:5f:14:89:d7:96:f5:c4:16:3e:c2:ba:ac:5d:f2:
         68:98:eb:8b:b9:6f:bb:7c:47:45:e4:a6:d1:39:bf:31:0f:db:
         0d:c9:ed:09:2e:6a:5e:e6:79:14:60:cc:47:02:a9:ed:1b:ff:
         f7:d2:19:15:7a:54:64:a3:ca:b3:ed:de:ab:02:b6:a0:d8:68:
         e6:6e:cb:a2:27:dd:32:d5:7e:fc:47:5d:7a:95:17:94:aa:e4:
         27:8b:62:44:bf:53:b7:c6:02:52:2b:01:72:38:1a:d1:3b:f7:
         3e:93:cb:0a:ce:8b:5c:f1:4f:71:5b:c1:c5:78:b5:27:98:c3:
         b1:9d:35:fd:e2:93:d3:42:cc:89:ac:b0:a1:0a:5b:80:f8:e2:
         34:d4:11:bb:b7:17:ac:72:b0:ef:db:36:55:56:74:41:eb:7e:
         5b:fd:3a:47:8d:f6:79:66:49:62:a9:01:f2:08:ab:08:3b:a0:
         c7:8d:0b:87:7e:c5:73:67:4f:b9:33:33:b0:47:90:a4:3f:92:
         ec:cc:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:44:13 2026 by rpki-client