Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa
File:                     ab422eee-cee4-35ad-bf8f-cf518f46443b.roa (raw, json)
Hash identifier:          silhpiMo3iB/Yaeu8niCijzLXF8DjjALgBFa0rYd5QM=
Subject key identifier:   BC:D2:9B:E9:25:EB:74:BC:57:05:40:22:72:EF:AB:A9:42:F2:D0:27
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584AE5C675541969F50B6D4FAE00
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     398156
IP address blocks:        168.220.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:75:54:19:69:f5:0b:6d:4f:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=6125b22b-70a0-4aba-9693-80cef73fe0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:20:fe:d5:d9:59:f5:91:a9:8f:18:e8:ab:
                    1c:24:fb:b7:d9:6a:fb:44:40:a6:6e:e7:66:0f:19:
                    0d:d0:74:6e:fe:1e:c6:1f:39:37:3d:3e:85:62:c7:
                    12:51:2b:cf:1d:3b:9f:82:15:be:c5:d9:0d:83:bb:
                    2c:f1:17:a6:ea:7e:23:fa:e8:9d:4c:a4:41:fc:a7:
                    a3:b5:37:58:28:d1:06:00:20:1a:66:54:15:05:dc:
                    94:ca:76:42:36:6c:5f:6a:58:33:c6:be:30:38:7b:
                    27:27:91:7f:a9:ea:55:7a:c9:ac:84:af:b7:13:62:
                    c7:be:d9:e3:21:75:13:7e:00:69:3a:c4:84:ee:9c:
                    8b:0c:ae:78:53:84:91:9b:f4:9b:91:c3:40:d3:36:
                    4a:3c:ba:85:d0:ca:c1:6d:0a:dd:1d:49:34:02:20:
                    38:54:18:de:77:36:bf:59:01:82:b3:7e:7b:56:1b:
                    fb:5c:b3:69:4d:e3:f7:a1:19:d6:94:99:a1:9c:74:
                    a1:39:cd:ef:51:f8:0f:c0:a0:aa:45:54:59:17:1b:
                    1f:2b:2a:f1:49:fb:9b:17:7b:7f:1d:71:0c:cf:c3:
                    9a:28:75:d2:6e:17:15:38:56:9f:93:a2:e0:6f:4b:
                    e5:e9:76:bb:15:5f:e6:91:1c:d2:ed:d5:b1:6c:15:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D2:9B:E9:25:EB:74:BC:57:05:40:22:72:EF:AB:A9:42:F2:D0:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:6a:03:23:21:0a:a4:29:4a:ec:f0:f8:65:9a:0f:51:e8:
         92:fb:78:76:64:5a:e9:15:0d:2f:78:69:fb:ac:4c:58:7e:a4:
         06:cb:77:ac:bc:45:64:69:32:70:13:82:98:f6:8c:cd:99:ad:
         7a:0d:d8:f2:47:e1:2b:d3:06:d5:a3:03:ae:ec:20:d0:a3:a5:
         9a:2c:56:92:ad:e6:65:9b:99:40:d0:c2:a2:a9:c7:cb:c7:1f:
         8f:fc:d4:f4:f5:a1:50:57:c5:bf:46:94:d8:72:48:0f:c5:13:
         59:94:3d:c8:f5:8a:c4:fe:fa:52:7a:bb:33:57:0a:9a:7c:73:
         3a:aa:f0:7f:15:2e:9b:15:b1:37:62:fc:f7:70:e9:87:df:9c:
         f2:25:06:84:a5:89:de:1d:ae:e9:f5:30:28:03:ca:9b:2e:14:
         7b:3d:d2:90:d5:70:42:72:43:ca:86:e4:04:70:20:b8:1d:4c:
         68:f9:2d:57:25:0a:82:53:6c:e6:20:20:48:9b:85:27:79:66:
         79:2f:7d:f1:d7:14:40:b7:57:61:e3:0e:c8:31:eb:ea:bd:35:
         b9:c4:de:fd:fc:f7:8f:fc:4d:c3:c1:01:58:c8:6b:ae:21:b6:
         f7:e2:af:85:d6:ed:b1:9d:65:fd:37:5b:6d:a4:a8:1a:38:17:
         b2:3f:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:15:26 2025 by rpki-client