Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa
File:                     ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa (raw, json)
Hash identifier:          kQcsp7hLgX0Lhn79DzPOEIwlY548ow1mHD0qsDAbfh0=
Subject key identifier:   22:F4:3B:5E:4C:A8:BD:16:CB:82:6A:6D:36:B1:AC:9F:BD:D8:7C:00
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584E15E48CEA16AE0692DE9E6480
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     398156
IP address blocks:        158.120.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:8c:ea:16:ae:06:92:de:9e:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=9cb9edc7-e0aa-40a3-8cc5-b37811d50439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:01:c9:46:19:78:8f:5d:77:be:ea:93:4e:
                    ab:a5:9d:f4:c1:6a:c5:7e:1c:7f:cf:b7:ed:e3:f8:
                    c1:76:94:9f:1b:b7:30:be:6b:2e:fd:f1:8d:e4:cd:
                    a9:09:f0:c0:15:e6:16:2d:a9:0a:f1:bf:f0:91:22:
                    66:8f:d9:76:98:65:4c:07:9e:d7:0b:f8:b9:86:d8:
                    c4:52:77:6f:41:65:1c:58:60:c0:9f:61:d9:c6:11:
                    f6:11:6d:00:65:77:d9:cf:d3:24:e9:85:bf:55:e1:
                    fd:30:92:aa:77:5c:c6:93:a4:28:22:ce:9c:9b:4e:
                    28:f4:59:9e:62:9e:87:d8:d5:ce:17:44:e3:a4:3b:
                    32:80:3e:e5:81:8d:05:c5:6c:ad:68:18:be:1d:6b:
                    be:3d:3c:a4:64:fe:a6:51:0e:be:ec:4e:f8:c1:a5:
                    ae:9c:19:60:c1:5f:85:08:c4:b2:96:a9:36:43:f6:
                    a9:4d:51:14:ac:77:5c:32:fe:fe:92:d0:98:04:87:
                    62:14:37:3f:a2:53:b9:d9:09:cc:f9:7d:0a:6f:95:
                    22:1d:6e:05:de:3c:b6:72:bc:e1:ba:76:71:84:47:
                    16:b8:8c:92:00:20:2d:12:ec:48:dc:42:48:11:f4:
                    5c:ef:b8:87:37:ba:a3:bf:1d:ba:0b:a9:b7:ff:70:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:3B:5E:4C:A8:BD:16:CB:82:6A:6D:36:B1:AC:9F:BD:D8:7C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:98:c6:2e:d2:3c:64:36:e4:96:04:aa:d1:b7:21:6b:ef:
         8d:de:3c:f6:5a:8c:56:c2:7d:e5:dd:89:9e:0b:97:67:c8:c0:
         47:8b:ef:4d:7d:04:e0:77:77:d9:1f:79:19:a1:89:11:8c:50:
         a7:40:f1:5b:87:d2:62:92:db:1c:68:10:4a:61:f7:af:0d:2f:
         2f:76:63:55:80:e6:83:bd:ea:78:35:73:04:dd:11:f0:05:0d:
         ac:fe:db:76:7e:d5:e2:e8:2a:65:59:43:29:d0:fe:87:12:e5:
         b4:3f:8a:f0:f0:5a:e8:85:e0:c4:56:cd:90:26:d9:ac:f9:04:
         a7:d6:cf:51:61:e0:72:62:27:03:5a:8c:c7:a0:8b:db:1e:4c:
         96:24:ba:0f:1c:90:aa:f3:6b:79:bf:b5:d6:f9:ef:cc:f8:c5:
         71:6a:a9:6f:23:07:46:8b:24:8b:99:e9:2f:66:04:db:d2:4d:
         d2:c1:0c:d6:0d:60:b9:db:e4:e2:e4:56:01:cc:5c:74:2d:45:
         66:cf:1a:91:8e:7a:02:c8:d2:df:99:98:49:bf:7f:ff:8d:82:
         bf:1c:c2:de:d1:b9:40:a1:09:9a:7c:a2:ec:2a:10:80:d3:fd:
         61:da:08:d7:b3:61:6a:ff:e0:f2:f5:01:3e:26:85:46:3e:15:
         66:e5:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:40:12 2026 by rpki-client