Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa
File:                     01688b26-89a1-3fa8-9d76-b1113324d268.roa (raw, json)
Hash identifier:          7Uku5DMf4XhKOBiM3T7ND4RzsBt66GTRiRuRG8yAwJk=
Subject key identifier:   87:F7:CA:7A:AE:CC:1B:4F:FC:F1:43:A2:F1:AC:D2:9D:8D:16:1B:AF
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584A050A779F66766DE0A6D69060
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     398156
IP address blocks:        158.120.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:77:9f:66:76:6d:e0:a6:d6:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=00954120-498c-4e3c-b8dc-eb9745b180b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:ab:20:53:e7:97:92:f6:ed:47:a1:23:d2:
                    1f:f5:15:25:35:74:6a:46:e6:24:3d:52:af:c5:6e:
                    3e:a3:b9:7f:45:13:21:0c:b1:a5:f4:9c:68:41:bb:
                    78:7f:67:99:53:97:fe:53:b5:72:eb:65:65:1a:e7:
                    d4:3a:da:4b:0f:c4:65:70:b0:61:38:f6:b7:87:aa:
                    c6:22:7a:fe:84:85:07:07:d1:85:c0:f0:1f:7b:62:
                    d8:90:6f:81:c6:ab:65:78:3a:a2:aa:4a:23:bb:46:
                    db:57:c9:ab:77:8b:72:22:f9:00:16:a3:51:1c:0d:
                    9a:7d:bb:58:fc:3c:3a:6c:2a:ee:c2:7a:9c:97:fa:
                    ab:49:09:15:05:80:8c:2b:d8:08:1b:70:11:55:c7:
                    e2:7a:23:c4:21:c6:98:9c:1b:a8:f8:b9:3d:17:3e:
                    e0:9b:59:d7:64:c3:e5:63:e9:6b:9b:1b:5a:a3:a7:
                    c6:c8:55:60:2d:bc:d5:b0:30:f6:05:24:c2:a8:04:
                    ae:aa:28:3c:ba:6c:c7:68:eb:44:65:2a:05:c1:76:
                    37:f6:b4:0d:da:63:f0:6e:da:3e:97:8d:87:d9:1b:
                    d3:1c:c7:e4:59:82:2e:64:ce:17:bb:20:a1:26:8c:
                    40:ba:c1:e0:ae:00:ac:e8:62:53:53:32:de:e8:2b:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:CA:7A:AE:CC:1B:4F:FC:F1:43:A2:F1:AC:D2:9D:8D:16:1B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f1:c7:ba:b0:94:69:f9:5c:48:b2:57:b9:b6:6e:ec:ba:5e:
         e8:39:fb:24:4c:bf:41:7e:6f:af:86:a4:e6:69:d0:e1:36:bd:
         3a:9e:ea:1d:53:54:4a:fa:dc:05:a7:49:93:96:19:62:7b:1e:
         71:7d:b9:64:19:67:92:4a:90:44:21:01:f9:84:98:4f:8a:c1:
         4e:cf:98:f9:74:35:c0:b1:65:c9:4a:1a:4f:e6:51:83:bd:89:
         c8:4c:14:e6:c3:5b:5e:c6:ba:e9:14:e4:69:21:86:08:31:b2:
         f9:ab:08:50:79:1c:16:29:07:84:ab:ff:b9:99:2f:eb:66:a7:
         3e:8a:8d:6b:66:e4:5a:c7:b3:48:fe:80:aa:2f:60:98:89:9a:
         1a:79:93:dc:40:e9:83:70:e4:71:d6:3c:1e:a4:88:74:c4:c8:
         89:75:43:79:a7:63:33:64:38:79:60:87:99:76:1e:e9:e3:85:
         cf:e4:38:5c:d2:69:7f:af:4c:80:e9:a0:9b:5d:d6:4a:ed:62:
         3c:c9:ea:18:ec:35:5f:50:bd:b2:9d:90:80:6e:03:08:43:5e:
         51:3f:e7:69:b4:b3:41:b9:b5:70:c6:b3:61:4c:62:fa:dd:5c:
         e9:31:86:5e:79:26:1d:7e:c8:f4:6a:65:bb:47:ef:04:65:4a:
         3b:70:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:48 2025 by rpki-client