Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa
File:                     c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa (raw, json)
Hash identifier:          zDKxiyQsaxPEOsJvI7MCLqVfOdWqxywC/1hiolXTWRk=
Subject key identifier:   5C:76:21:9D:E4:2E:00:F1:73:91:58:DA:EC:0E:AC:B6:A9:26:62:3E
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584E66DA190D25493B11BCB2A0D0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     398156
IP address blocks:        168.220.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:19:0d:25:49:3b:11:bc:b2:a0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=4df11919-a0a2-4be9-90b2-c94a897dce8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:2d:7d:4a:0b:ff:4d:c5:3d:ee:9a:aa:ed:
                    c3:ec:ef:47:2f:05:46:d3:2c:2e:b0:1c:f5:99:3c:
                    33:b5:cd:e5:c9:43:7b:91:fd:d9:22:35:5d:00:9b:
                    16:da:a8:24:e2:e8:4a:fa:4d:35:fd:39:b8:a0:c7:
                    e3:f4:d7:51:0a:36:cf:54:0a:d4:fd:76:0e:48:60:
                    ac:b9:ee:32:cc:43:f8:5e:e9:55:bf:c6:c4:cf:2d:
                    42:7d:9b:5c:1e:22:81:8d:1b:cb:46:a9:b2:58:7f:
                    48:82:2b:d8:3b:db:b3:e7:44:81:e0:56:35:ac:f6:
                    77:bf:a8:90:e3:f6:3b:c7:22:d8:7d:27:66:2b:db:
                    8f:22:84:d1:1f:2d:4b:88:12:db:59:cd:37:96:b2:
                    cb:2b:bb:27:f4:35:38:1e:f9:81:b3:1b:2c:5f:74:
                    e7:ea:de:c0:8c:0a:21:14:70:71:4b:98:8a:22:52:
                    76:86:d7:d8:93:b6:be:6f:7c:97:7f:c0:6c:28:8e:
                    de:78:9f:f2:29:3e:4a:9d:86:e2:ea:4b:0a:3f:e8:
                    92:b7:b2:f7:a2:49:69:67:41:be:1c:69:c3:d2:80:
                    79:f6:9a:9b:d5:99:55:5f:af:17:e4:06:39:b5:88:
                    88:c6:c3:7d:0d:c0:17:21:a5:28:df:fd:11:d5:8f:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:76:21:9D:E4:2E:00:F1:73:91:58:DA:EC:0E:AC:B6:A9:26:62:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9b:f6:96:c8:cf:9f:0f:72:a8:2f:12:85:1d:4f:f7:7c:0d:
         1d:fc:48:54:f6:6c:c1:ba:26:c7:80:b0:89:c6:b1:e4:3b:a8:
         96:1d:33:b2:f2:b9:57:21:38:da:b4:3a:05:70:fd:fe:6e:86:
         ff:bc:6e:5e:59:52:17:28:e3:e9:e6:9b:61:17:83:0f:d8:ef:
         60:32:ff:be:99:c3:d4:bc:a6:45:bd:f0:9b:82:1d:4d:a6:43:
         80:5d:61:d9:ca:77:2c:83:2d:16:dc:99:f2:a8:a9:16:8a:da:
         2b:87:d2:11:52:30:36:3b:06:f4:ea:48:43:f6:dc:ac:94:84:
         48:75:e3:70:27:c7:0a:39:0c:c8:63:ee:06:30:c2:1c:b4:ac:
         b4:84:6e:42:ea:d6:08:15:84:24:88:55:a5:06:ce:84:eb:27:
         f8:78:a5:21:3d:23:7a:7d:de:b9:07:de:6a:3b:ee:13:17:de:
         28:6b:75:0b:5a:c1:04:a9:f3:87:18:17:66:59:fe:bf:4c:db:
         24:f0:5b:36:9c:0b:56:a1:65:be:19:dc:93:24:e1:cd:4f:15:
         7a:97:3e:f1:75:1d:af:80:56:bc:42:21:5b:93:50:a8:b7:a2:
         7c:8e:50:9f:47:b5:bf:1b:26:75:81:3c:cc:0c:94:33:8c:ff:
         cb:85:c5:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hkNJUk7EbyyoNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
NGRmMTE5MTktYTBhMi00YmU5LTkwYjItYzk0YTg5N2RjZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkYtfUoL/03FPe6aqu3D7O9HLwVG0ywusBz1
mTwztc3lyUN7kf3ZIjVdAJsW2qgk4uhK+k01/Tm4oMfj9NdRCjbPVArU/XYOSGCs
ue4yzEP4XulVv8bEzy1CfZtcHiKBjRvLRqmyWH9IgivYO9uz50SB4FY1rPZ3v6iQ
4/Y7xyLYfSdmK9uPIoTRHy1LiBLbWc03lrLLK7sn9DU4HvmBsxssX3Tn6t7AjAoh
FHBxS5iKIlJ2htfYk7a+b3yXf8BsKI7eeJ/yKT5KnYbi6ksKP+iSt7L3oklpZ0G+
HGnD0oB59pqb1ZlVX68X5AY5tYiIxsN9DcAXIaUo3/0R1Y+JiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFx2IZ3kLgDxc5FY2uwOrLapJmI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYzhkN2VlMDQtNTRlMS0z
ZWEyLWFmODMtYzIwYWY1MjcyYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADeb9pbIz58PcqgvEoUdT/d8DR38SFT2bMG6JseAsInGseQ7qJYdM7Ly
uVchONq0OgVw/f5uhv+8bl5ZUhco4+nmm2EXgw/Y72Ay/76Zw9S8pkW98JuCHU2m
Q4BdYdnKdyyDLRbcmfKoqRaK2iuH0hFSMDY7BvTqSEP23KyUhEh143Anxwo5DMhj
7gYwwhy0rLSEbkLq1ggVhCSIVaUGzoTrJ/h4pSE9I3p93rkH3mo77hMX3ihrdQta
wQSp84cYF2ZZ/r9M2yTwWzacC1ahZb4Z3JMk4c1PFXqXPvF1Ha+AVrxCIVuTUKi3
onyOUJ9Htb8bJnWBPMwMlDOM/8uFxcM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:39 2026 by rpki-client