Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa
File:                     56e77077-485f-3fa0-ac2f-5f511c9a284b.roa (raw, json)
Hash identifier:          WZjvFWBzlmVQ653ao4lDcclKKx3+Bbr4UyvwsnZuLCQ=
Subject key identifier:   9B:B1:EF:8D:CE:62:33:E0:1E:C8:E6:A9:A4:87:A5:EB:05:3C:8A:4D
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584D86955725431414CA3CB46FE0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     398156
IP address blocks:        168.220.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:57:25:43:14:14:ca:3c:b4:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=963308c9-b60e-4305-8d0a-86b693c7da9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dd:78:cb:30:f0:e5:fe:ed:02:01:d6:1a:f5:
                    a0:f9:a1:e2:6e:2e:96:b9:c2:77:4d:56:94:1c:96:
                    34:4c:19:73:2c:b6:67:96:14:ee:dc:35:8e:f0:9c:
                    cb:0e:1b:5e:58:b7:04:89:c6:c4:fd:3c:68:b2:f5:
                    06:27:66:64:ad:b9:4c:87:4d:15:0f:28:e9:ab:84:
                    80:44:1e:94:05:0e:35:c3:96:11:ba:ec:00:9d:9e:
                    1f:bb:64:99:9e:9d:41:6f:a9:39:5d:c7:f1:6f:68:
                    9e:bc:ea:23:95:3a:05:38:27:38:f1:df:4e:1e:70:
                    aa:62:c0:19:fb:b1:97:ba:cd:28:76:8f:73:18:5e:
                    3c:07:51:c8:31:00:bf:86:5d:09:38:5f:12:1c:73:
                    cf:fc:ca:4b:fe:8f:05:ba:05:a9:d8:1d:62:9b:14:
                    21:b6:b1:d7:83:1d:d4:01:c1:77:e5:6e:40:f8:72:
                    0f:b6:b7:35:a5:7a:5d:71:14:bb:3c:34:f7:7e:d4:
                    59:60:5f:35:ad:37:17:87:6a:3a:03:3d:a3:7c:57:
                    33:10:52:60:3c:fa:d3:5e:5d:a9:0d:d9:4c:aa:d5:
                    f4:92:96:ad:c5:f4:13:e6:7e:9d:40:2b:97:03:cd:
                    61:75:8f:c3:41:43:5b:37:fd:9f:11:ae:90:04:e4:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B1:EF:8D:CE:62:33:E0:1E:C8:E6:A9:A4:87:A5:EB:05:3C:8A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:f5:b9:b0:f7:61:cc:fe:da:93:2e:d2:3e:b2:c3:a4:48:
         70:40:bb:da:34:60:9d:85:e7:ce:8d:30:ab:14:05:42:99:d1:
         c3:e9:39:f8:12:ef:58:d7:53:85:24:55:92:b6:b6:3f:93:73:
         83:50:3a:d7:35:46:48:7d:5b:52:6f:0b:72:88:41:67:6f:37:
         73:38:52:9f:53:6c:22:43:74:f4:62:89:f6:b7:60:b1:e1:a8:
         a1:db:a8:ba:79:07:2c:90:49:7d:f9:cb:c8:2f:4a:13:da:ea:
         0c:76:87:14:21:02:1f:4b:56:c4:a3:10:5d:ca:10:06:8f:e5:
         45:2a:2b:bf:cc:66:46:0b:8e:c8:ab:56:cb:a5:d5:c0:ef:a1:
         a3:3e:26:cf:8c:a8:5d:5f:12:3f:2a:41:48:a4:f9:4a:ec:65:
         03:97:f4:1b:29:36:10:c2:5e:98:27:f0:f3:9f:43:7e:5e:a0:
         c9:23:ca:12:37:a6:c3:b2:32:43:35:18:20:b2:86:57:8b:91:
         ce:5d:6c:46:18:99:da:ba:26:97:d6:60:6f:16:67:89:89:17:
         d2:d3:51:45:3a:84:7c:19:68:d6:96:d1:5e:9b:80:95:e0:00:
         5a:3e:cc:9a:34:a3:84:91:31:59:ba:91:b5:4b:56:2e:21:77:
         65:4d:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:58 2026 by rpki-client