Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/74fc9cbe-885d-3c4b-9021-622efcb307e1.roa
File:                     74fc9cbe-885d-3c4b-9021-622efcb307e1.roa (raw, json)
Hash identifier:          PE+fXvhSRmjHvL5eFvlHsbovPLS1QABhWqcsMcA9eWk=
Subject key identifier:   E6:6D:41:82:A5:30:AD:4D:B4:A1:91:51:AD:6B:DD:68:92:98:6B:C2
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584AE5C67A97C3C96679E970F200
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/74fc9cbe-885d-3c4b-9021-622efcb307e1.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     398156
IP address blocks:        168.220.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:7a:97:c3:c9:66:79:e9:70:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=d8406c09-01ef-44ba-b632-cc295c8402cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:05:80:eb:5d:ab:31:25:9d:59:2a:0b:5b:
                    66:20:e6:fd:39:28:d3:95:97:4b:4a:7e:e9:4e:e9:
                    4b:bf:4f:ea:95:ca:a0:30:64:f2:4b:30:ac:2b:cf:
                    fe:db:ae:9e:e5:5a:5e:5d:9d:2d:53:b4:21:b1:66:
                    ab:52:3b:41:b3:90:64:ac:c9:3f:ca:20:67:24:51:
                    58:57:6f:94:c7:59:fe:08:b7:25:e2:eb:4e:1e:15:
                    c2:55:26:92:ec:a4:49:c2:6c:04:2d:c4:aa:14:fa:
                    c4:62:88:6e:a0:2a:03:db:65:d6:fe:c2:37:5f:54:
                    72:d3:85:3e:d2:c2:38:9a:0c:68:72:34:6d:97:02:
                    ac:89:04:13:90:63:81:a1:75:76:4b:c5:61:6e:ab:
                    4f:39:ca:35:20:ca:86:47:80:cb:81:44:2a:6b:be:
                    18:9b:d1:f9:36:c3:dc:70:0a:10:58:00:7d:0d:37:
                    4f:f5:27:14:7c:fc:3d:d9:c3:a6:fe:57:30:fd:91:
                    48:93:09:55:01:f5:18:88:29:56:d3:ca:9b:49:7e:
                    11:fc:18:51:4b:ef:0e:ff:a6:1c:14:5d:a5:91:95:
                    11:1e:b7:83:86:5e:1f:9c:d8:76:ef:4b:82:49:f3:
                    9b:63:6c:66:18:e2:d2:39:1f:b9:67:1c:ec:4f:05:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6D:41:82:A5:30:AD:4D:B4:A1:91:51:AD:6B:DD:68:92:98:6B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/74fc9cbe-885d-3c4b-9021-622efcb307e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:df:1e:32:fa:27:84:15:f8:3c:03:86:86:b8:63:ab:62:35:
         ca:38:e2:ad:9e:2e:bc:3e:c1:ee:af:e3:7e:9e:05:6c:47:99:
         d4:fe:48:ec:7e:74:12:31:95:e6:38:34:47:e0:7d:db:c2:da:
         06:08:9c:33:fe:27:13:ea:cc:16:61:36:02:6f:98:2e:38:cf:
         b1:ab:f4:1e:98:e0:37:f7:9a:c6:8c:23:2d:40:09:fa:d0:9f:
         a2:ca:2d:87:10:86:ab:95:d3:a9:8f:76:cd:b3:f1:13:5f:d9:
         18:d7:90:e6:98:53:c1:50:09:f2:a2:d8:b0:df:0b:7d:70:de:
         09:bf:4e:52:aa:f9:e7:ab:36:0c:b0:8b:b9:e5:52:33:d4:b0:
         07:0a:45:dd:27:0b:7f:d0:af:e7:6c:8e:6f:1d:dc:38:ee:92:
         36:c7:5c:7a:8a:7b:24:6b:50:ae:84:80:8a:15:ad:37:4c:e6:
         ea:b9:84:24:6f:97:b8:65:54:f8:11:8b:be:21:c8:ec:c0:a2:
         ad:91:76:2c:95:be:b1:ac:d1:46:00:46:54:f6:b2:7a:71:f0:
         71:21:c5:9c:b4:e6:f7:ef:df:75:fc:7a:15:a2:f7:91:a7:4f:
         39:2c:a3:6d:12:83:21:50:72:cc:b4:09:ee:c8:17:ae:60:33:
         45:5d:96:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnqXw8lmeelw8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZDg0MDZjMDktMDFlZi00NGJhLWI2MzItY2MyOTVjODQwMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUUFgOtdqzElnVkqC1tmIOb9OSjTlZdLSn7p
TulLv0/qlcqgMGTySzCsK8/+266e5VpeXZ0tU7QhsWarUjtBs5BkrMk/yiBnJFFY
V2+Ux1n+CLcl4utOHhXCVSaS7KRJwmwELcSqFPrEYohuoCoD22XW/sI3X1Ry04U+
0sI4mgxocjRtlwKsiQQTkGOBoXV2S8VhbqtPOco1IMqGR4DLgUQqa74Ym9H5NsPc
cAoQWAB9DTdP9ScUfPw92cOm/lcw/ZFIkwlVAfUYiClW08qbSX4R/BhRS+8O/6Yc
FF2lkZURHreDhl4fnNh270uCSfObY2xmGOLSOR+5ZxzsTwWNSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZtQYKlMK1NtKGRUa1r3WiSmGvCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNzRmYzljYmUtODg1ZC0z
YzRiLTkwMjEtNjIyZWZjYjMwN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbfHjL6J4QV+DwDhoa4Y6tiNco44q2eLrw+we6v436eBWxHmdT+SOx+
dBIxleY4NEfgfdvC2gYInDP+JxPqzBZhNgJvmC44z7Gr9B6Y4Df3msaMIy1ACfrQ
n6LKLYcQhquV06mPds2z8RNf2RjXkOaYU8FQCfKi2LDfC31w3gm/TlKq+eerNgyw
i7nlUjPUsAcKRd0nC3/Qr+dsjm8d3DjukjbHXHqKeyRrUK6EgIoVrTdM5uq5hCRv
l7hlVPgRi74hyOzAoq2RdiyVvrGs0UYARlT2snpx8HEhxZy05vfv33X8ehWi95Gn
Tzkso20SgyFQcsy0Ce7IF65gM0Vdlj4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:59:57 2025 by rpki-client