Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa
File:                     0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa (raw, json)
Hash identifier:          nq75sDMyA/1CoKVjDefLYwf23g/RHnsVO9LZff/fXSw=
Subject key identifier:   F9:09:10:9E:1F:37:AB:C3:FD:D0:BF:BC:3D:9F:2F:98:F1:3A:73:E8
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584D869557642BD78A8BB27C2680
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     398156
IP address blocks:        168.220.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:57:64:2b:d7:8a:8b:b2:7c:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=5df2d7f5-3a74-4bcc-a221-b27dd9655517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:30:3c:ec:df:6e:89:61:f7:4c:80:a6:fa:
                    35:8a:15:37:22:38:f2:df:e5:bd:2a:d3:d1:42:77:
                    31:5d:9d:66:1e:25:6a:2d:2c:c1:58:c9:9e:31:68:
                    0a:48:1d:ee:86:a0:a1:0b:8e:c5:e4:92:df:88:93:
                    af:2c:14:d5:a1:5d:96:0d:83:f4:60:9e:18:49:25:
                    1d:85:50:1c:51:70:89:d5:d4:5e:1a:fd:47:45:3f:
                    fa:25:54:fa:29:4a:b1:49:66:91:88:18:e2:c3:0d:
                    64:ba:4d:35:84:7c:06:dc:2d:ad:e1:5f:db:30:60:
                    34:14:30:9d:59:ba:a2:7b:38:79:76:66:48:64:8e:
                    5d:87:7f:d8:56:51:44:4a:8c:6c:37:06:06:09:51:
                    c5:bd:e9:f2:90:20:92:f4:79:f7:11:e7:9f:33:75:
                    d9:6e:d3:21:04:7a:43:6b:94:b7:25:a4:85:ef:ee:
                    d7:9a:a6:d5:00:a0:d1:c1:37:f1:45:bb:d1:52:31:
                    4f:af:c1:73:e3:fb:a5:5b:86:f9:9f:b6:2e:b2:df:
                    f3:df:8d:b3:cf:09:7e:c9:3f:e4:2e:1d:d3:a0:c9:
                    02:ff:78:0c:51:92:3e:af:af:d1:d7:29:83:fd:2c:
                    13:ab:38:f4:12:57:22:62:2c:76:6c:27:6b:d3:aa:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:09:10:9E:1F:37:AB:C3:FD:D0:BF:BC:3D:9F:2F:98:F1:3A:73:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:40:2b:66:4d:eb:43:53:61:98:6a:9f:4a:0f:ea:3a:d6:
         11:d5:87:70:47:70:a1:da:04:89:56:1f:71:e2:f0:ed:79:59:
         e0:43:16:6c:65:2c:8e:8e:3b:69:6e:0a:5d:f0:b8:5a:dc:d8:
         c0:d6:88:da:d9:5d:8a:ad:b5:31:5a:1c:fc:56:84:54:86:df:
         7f:dd:c7:02:47:91:86:9b:78:f8:8a:e8:4d:aa:ea:3f:c1:01:
         8d:0f:d2:e3:62:59:8f:4c:39:5c:ed:ef:8a:79:2d:39:51:0c:
         52:e7:13:40:66:45:97:75:ba:8a:ac:48:06:83:db:f5:a7:b6:
         33:6c:00:e1:a4:5b:64:bc:b3:a2:fa:4e:00:e4:27:c9:e9:d3:
         52:18:dc:42:37:ab:30:2b:ac:b6:40:ae:b5:9c:0b:c6:f4:b8:
         31:75:5a:47:8d:9a:51:8e:f0:34:57:56:5e:ff:95:d4:0a:62:
         61:83:dc:5d:57:39:c5:f9:cf:78:38:ed:b9:a2:41:47:47:5d:
         53:1c:d8:07:86:1f:99:69:12:6e:b8:a4:08:90:59:14:11:a2:
         dd:c3:5f:0d:83:85:12:99:06:e8:64:af:4a:b5:6b:80:33:ce:
         65:bc:4e:e0:bf:02:b3:92:7f:c0:75:0b:fa:c3:fd:79:42:5b:
         8d:b7:1a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:41 2026 by rpki-client