Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/238fbfe8-3613-3672-8018-1e50c39bc5d3.roa
File:                     238fbfe8-3613-3672-8018-1e50c39bc5d3.roa (raw, json)
Hash identifier:          WoWfyQqzFsC5EPczaAZHMe9gL5J+xdAp9qeSdSdS0+Y=
Subject key identifier:   83:BE:04:BD:87:9D:D1:01:F3:65:E0:CD:82:4D:94:71:80:29:8E:34
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584F6292D994269C126BC6AF2700
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/238fbfe8-3613-3672-8018-1e50c39bc5d3.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     398156
IP address blocks:        198.48.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d9:94:26:9c:12:6b:c6:af:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=fc3be353-b824-4198-b6f6-d64d6c599b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:20:64:94:a1:90:15:1b:b4:06:4a:8d:cb:
                    6a:38:4d:ee:55:50:91:bc:13:c6:74:26:3f:f9:7a:
                    16:97:81:dc:f1:83:02:f0:85:d6:ae:52:e6:8e:13:
                    14:49:c4:6e:99:90:6f:39:40:b9:d7:62:f2:85:80:
                    31:8c:ed:81:3e:de:7b:37:8e:72:d6:41:9b:6b:4c:
                    d4:61:be:61:69:da:d3:d1:e9:b5:1d:e8:4b:84:b1:
                    af:11:37:47:ce:75:2e:46:f3:22:14:4d:2e:e2:37:
                    3f:d6:37:01:3b:0f:ae:cd:77:e2:4c:56:a9:8f:75:
                    fe:94:32:24:37:53:96:50:ce:87:62:6e:7c:09:c3:
                    18:3b:c4:a9:03:22:5c:27:9c:e6:4b:40:3b:9d:28:
                    87:96:e3:1e:c9:7d:2c:f2:c8:fc:02:98:04:f8:42:
                    c8:eb:74:56:27:f2:a7:13:7c:57:12:f7:32:58:88:
                    7d:82:c1:92:7d:3a:4d:48:ba:4c:76:f9:d4:6c:b0:
                    df:8a:bd:a9:21:79:cc:46:45:ad:67:42:ee:e8:a2:
                    9d:78:6d:03:5d:2e:bd:79:06:22:3c:7e:78:7f:cc:
                    e3:0f:6d:4f:73:e3:3b:99:fc:c7:8c:0f:d7:71:8c:
                    5c:bf:c0:2f:75:b5:ba:29:59:7c:0f:cd:96:50:cc:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:04:BD:87:9D:D1:01:F3:65:E0:CD:82:4D:94:71:80:29:8E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/238fbfe8-3613-3672-8018-1e50c39bc5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.48.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:28:b7:e6:60:e0:f9:5b:6e:4b:1d:cc:14:34:45:f6:e8:b9:
         34:b9:fb:d2:5f:d7:e3:89:c6:68:50:d0:d1:a0:41:49:04:d7:
         95:0e:8c:24:e8:e1:90:ce:e1:19:6a:e7:8a:fe:2d:57:c5:d9:
         e4:5e:80:52:45:5a:f6:4d:3c:44:3b:68:8c:5a:f4:dd:06:4d:
         07:50:b2:b7:ba:e5:d5:1a:3f:10:fb:d1:2a:70:2b:f8:d8:9d:
         d7:d5:e9:22:88:b5:b1:97:42:18:07:9b:e4:c5:ff:be:0b:a5:
         df:22:35:a6:b4:77:c7:cf:ce:3c:45:a0:32:f9:f5:33:df:06:
         27:dc:64:eb:0a:6b:6f:02:2c:74:6a:1a:16:f9:b6:57:a3:00:
         2d:0b:45:da:e2:32:62:f0:e8:f9:87:33:3d:32:0c:b7:27:d9:
         d6:0a:ef:35:41:94:c7:e3:91:2c:aa:d4:09:b9:41:92:83:a3:
         82:9f:a9:88:1b:02:b8:c7:c1:9d:f7:68:c5:ff:e5:f0:f0:74:
         bc:d6:ff:65:cd:5b:75:90:fa:7c:5e:ed:ab:2e:dd:83:21:b9:
         ab:28:25:7c:4b:a5:e8:7f:9c:4c:16:74:7e:36:12:e7:b9:f2:
         b1:ba:b1:c5:6f:fd:50:c9:1d:b4:28:7e:9b:6d:a7:ac:f4:b2:
         28:07:3c:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktmUJpwSa8avJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZmMzYmUzNTMtYjgyNC00MTk4LWI2ZjYtZDY0ZDZjNTk5YjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrsgZJShkBUbtAZKjctqOE3uVVCRvBPGdCY/
+XoWl4Hc8YMC8IXWrlLmjhMUScRumZBvOUC512LyhYAxjO2BPt57N45y1kGba0zU
Yb5hadrT0em1HehLhLGvETdHznUuRvMiFE0u4jc/1jcBOw+uzXfiTFapj3X+lDIk
N1OWUM6HYm58CcMYO8SpAyJcJ5zmS0A7nSiHluMeyX0s8sj8ApgE+ELI63RWJ/Kn
E3xXEvcyWIh9gsGSfTpNSLpMdvnUbLDfir2pIXnMRkWtZ0Lu6KKdeG0DXS69eQYi
PH54f8zjD21Pc+M7mfzHjA/XcYxcv8AvdbW6KVl8D82WUMwwZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIO+BL2HndEB82XgzYJNlHGAKY40MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMjM4ZmJmZTgtMzYxMy0z
NjcyLTgwMTgtMWU1MGMzOWJjNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxjBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUot+Zg4PlbbksdzBQ0RfbouTS5+9Jf1+OJxmhQ0NGgQUkE15UOjCTo
4ZDO4Rlq54r+LVfF2eRegFJFWvZNPEQ7aIxa9N0GTQdQsre65dUaPxD70SpwK/jY
ndfV6SKItbGXQhgHm+TF/74Lpd8iNaa0d8fPzjxFoDL59TPfBifcZOsKa28CLHRq
Ghb5tlejAC0LRdriMmLw6PmHMz0yDLcn2dYK7zVBlMfjkSyq1Am5QZKDo4KfqYgb
ArjHwZ33aMX/5fDwdLzW/2XNW3WQ+nxe7asu3YMhuasoJXxLpeh/nEwWdH42Eue5
8rG6scVv/VDJHbQofpttp6z0sigHPEo=
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:39:02 2026 by rpki-client