Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa
File:                     ab422eee-cee4-35ad-bf8f-cf518f46443b.roa (raw, json)
Hash identifier:          Se3k6yQHCVYa8Z3O/1Hjod8JepP+x5Solvv/GS42H5w=
Subject key identifier:   F9:3E:94:0F:BA:96:A1:A2:BE:22:40:65:49:5B:B5:E4:0B:12:E9:69
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584D86955733E836AEECC9F5D380
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     398156
IP address blocks:        168.220.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:57:33:e8:36:ae:ec:c9:f5:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=94f319d8-8d1c-4036-9a9e-f8ce5d9d945a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:34:19:71:18:c8:23:da:bc:44:e6:38:0a:
                    10:48:68:fa:19:3e:cc:5d:5d:7d:da:42:d2:3c:5d:
                    2b:ef:11:e1:69:f9:db:96:4f:81:53:2a:ba:88:7a:
                    d6:13:a0:ad:e8:a2:2f:f5:05:e2:0d:f8:11:87:5a:
                    bd:72:3b:16:7f:e8:7e:a7:6f:6e:3a:2b:9c:f9:62:
                    6a:d7:9f:2e:cc:b7:99:71:b0:60:37:be:30:af:53:
                    af:b4:d3:ff:52:e3:d0:4b:66:5c:35:71:46:8c:8e:
                    ea:93:5b:81:50:8d:a2:45:0b:98:8b:1b:91:a7:4a:
                    37:16:c1:bd:39:6c:28:39:c1:68:b6:5e:3f:ba:52:
                    ef:d0:41:9d:63:3e:1b:ac:26:07:15:69:05:c9:d4:
                    df:16:9a:32:a5:7d:25:9d:58:c7:58:5c:04:c4:e7:
                    72:1a:9b:d7:f1:ff:25:1a:30:e0:b1:06:c4:01:c2:
                    59:45:89:55:9e:e5:1b:f8:af:21:e6:8f:f4:24:c5:
                    9a:f1:f8:38:be:86:3d:69:36:d5:55:22:9e:71:53:
                    0c:a9:2d:66:2a:f0:e2:d8:91:25:dd:36:9c:4a:7c:
                    35:b4:68:64:45:82:6b:d1:ae:40:85:0d:ea:ef:05:
                    00:57:9c:6b:44:7c:8c:e9:ec:8a:55:34:58:65:9c:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3E:94:0F:BA:96:A1:A2:BE:22:40:65:49:5B:B5:E4:0B:12:E9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:a4:be:8d:25:86:90:48:fb:3e:ce:08:67:95:a9:f2:f0:
         34:e6:14:39:60:83:a4:0f:6a:cf:92:fc:3a:74:a0:43:e6:55:
         3f:2a:2d:bf:6a:6a:0e:4c:db:ac:af:33:37:ad:8f:23:1a:f2:
         01:d7:36:43:ae:00:e7:df:6c:2f:31:cc:b6:3d:13:96:26:9d:
         6e:f7:18:1e:d9:b0:e2:21:b3:b0:3f:42:4d:02:c7:34:0b:57:
         3d:44:23:54:ae:2f:06:93:90:ab:31:19:f1:47:68:a1:af:82:
         20:eb:87:07:a6:d1:cc:c8:c3:19:42:60:e3:85:3e:e5:bd:a4:
         4a:b4:12:07:43:63:8f:d7:54:39:c6:81:dd:a3:c4:7f:3b:cb:
         d6:a9:07:55:d6:38:4c:c1:5c:91:25:75:3a:ae:b5:0c:c7:43:
         d7:22:a3:48:fd:b4:08:e3:2c:7d:ad:87:52:e8:0d:68:1a:7b:
         ef:e7:7f:b8:6b:a0:89:ee:e3:d4:9e:be:96:fd:64:7d:5e:be:
         bd:e7:24:93:fa:38:9c:b1:02:b5:3c:3a:31:76:18:58:7a:be:
         a2:7f:89:56:8b:63:35:db:9f:c5:87:50:63:1c:96:a2:5f:e4:
         4a:6b:52:a6:c8:07:65:1c:89:29:cd:69:ec:51:66:d2:2b:3b:
         69:54:d7:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVcz6Dau7Mn104AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
OTRmMzE5ZDgtOGQxYy00MDM2LTlhOWUtZjhjZTVkOWQ5NDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxc0GXEYyCPavETmOAoQSGj6GT7MXV192kLS
PF0r7xHhafnblk+BUyq6iHrWE6Ct6KIv9QXiDfgRh1q9cjsWf+h+p29uOiuc+WJq
158uzLeZcbBgN74wr1OvtNP/UuPQS2ZcNXFGjI7qk1uBUI2iRQuYixuRp0o3FsG9
OWwoOcFotl4/ulLv0EGdYz4brCYHFWkFydTfFpoypX0lnVjHWFwExOdyGpvX8f8l
GjDgsQbEAcJZRYlVnuUb+K8h5o/0JMWa8fg4voY9aTbVVSKecVMMqS1mKvDi2JEl
3TacSnw1tGhkRYJr0a5AhQ3q7wUAV5xrRHyM6eyKVTRYZZyUCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPk+lA+6lqGiviJAZUlbteQLEulpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYWI0MjJlZWUtY2VlNC0z
NWFkLWJmOGYtY2Y1MThmNDY0NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxMpL6NJYaQSPs+zghnlany8DTmFDlgg6QPas+S/Dp0oEPmVT8qLb9q
ag5M26yvMzetjyMa8gHXNkOuAOffbC8xzLY9E5YmnW73GB7ZsOIhs7A/Qk0CxzQL
Vz1EI1SuLwaTkKsxGfFHaKGvgiDrhwem0czIwxlCYOOFPuW9pEq0EgdDY4/XVDnG
gd2jxH87y9apB1XWOEzBXJEldTqutQzHQ9cio0j9tAjjLH2th1LoDWgae+/nf7hr
oInu49Sevpb9ZH1evr3nJJP6OJyxArU8OjF2GFh6vqJ/iVaLYzXbn8WHUGMclqJf
5EprUqbIB2UciSnNaexRZtIrO2lU12s=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:11 2026 by rpki-client