Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/e095fafa-e6ab-3346-9058-b4e2a79d0db7.roa
File:                     e095fafa-e6ab-3346-9058-b4e2a79d0db7.roa (raw, json)
Hash identifier:          M5wLCfXFYW/VlPDF8nOTcODhD1EPuXHgM7qTG8HwKF0=
Subject key identifier:   E7:BD:07:EF:9A:55:88:49:62:F4:E9:90:AC:51:71:8E:20:84:D4:EF
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584F5A32C111B1EB88E13D565EC0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/e095fafa-e6ab-3346-9058-b4e2a79d0db7.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     398156
IP address blocks:        158.120.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:c1:11:b1:eb:88:e1:3d:56:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=427a00df-f2aa-4be1-81ef-f28737d38ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:06:32:3c:d7:de:ca:4e:2c:dd:ee:40:48:
                    96:98:4a:0c:04:f6:d0:f1:be:a8:3b:d6:c8:5a:6f:
                    c4:4e:bf:0d:d3:8c:49:b1:0e:43:ce:83:7f:b5:ab:
                    f3:b6:b2:69:34:22:7a:59:35:27:2a:15:79:2d:67:
                    83:4f:d3:e5:de:30:71:ab:87:7b:cc:98:7d:61:3f:
                    33:c1:f8:3f:28:aa:b0:d2:59:d3:4b:67:9f:da:fc:
                    62:68:41:3a:eb:b3:53:17:20:f0:a4:64:39:c1:ec:
                    e1:0e:5c:91:be:c9:10:f0:28:9f:f6:1f:ba:4d:bb:
                    88:7e:19:65:13:5b:17:eb:ef:52:4e:13:1b:8e:1c:
                    87:ba:08:41:6e:bd:36:25:68:fb:98:7d:75:c4:1f:
                    ed:f8:74:26:1d:78:b5:61:df:75:d0:b1:91:15:1f:
                    ae:1b:96:39:71:76:fc:68:fa:72:44:1d:b9:63:ad:
                    28:8b:15:f1:00:83:d9:d4:f1:32:ae:60:c7:aa:71:
                    d9:b8:1c:75:32:c5:72:8b:38:5b:6c:f2:0b:bc:fa:
                    7f:14:37:54:57:11:1e:d8:75:95:c1:1c:a6:ba:2b:
                    49:2d:b9:f7:5b:9c:18:d0:17:3a:fb:50:7d:60:28:
                    4c:c2:18:51:1b:3e:e0:0a:bd:b8:9c:cd:37:76:1b:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BD:07:EF:9A:55:88:49:62:F4:E9:90:AC:51:71:8E:20:84:D4:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/e095fafa-e6ab-3346-9058-b4e2a79d0db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:54:a7:35:51:d0:9e:1d:1a:69:af:81:7f:bd:79:b1:c2:
         4e:c8:d0:78:a7:fd:96:f0:53:78:5a:ab:9a:04:0b:b4:d1:ff:
         cf:a7:b7:6a:f9:90:93:62:29:2e:d6:46:06:fe:c1:e2:12:28:
         93:eb:54:be:df:68:aa:4c:ff:f3:6f:02:fb:94:47:1a:92:4a:
         0c:93:83:8e:9a:df:f4:dc:eb:45:56:63:72:5a:b1:2a:64:8b:
         1c:66:de:07:bc:07:af:07:6d:98:40:d9:6a:01:a9:7d:64:03:
         3a:37:8b:89:5b:f1:b1:3a:6a:c6:62:6f:18:22:f0:db:21:4a:
         dc:6c:77:c2:8d:2f:d8:18:37:be:6f:03:0f:c0:15:35:75:ce:
         c5:08:a2:4e:99:26:02:e8:be:97:03:b3:35:97:23:82:68:01:
         9a:dc:b3:53:14:68:33:64:b3:f4:28:40:00:69:65:2d:a7:11:
         94:50:dc:45:fe:31:dc:12:c7:80:f6:04:1b:db:7d:f3:8e:de:
         1c:58:0c:e4:45:72:0f:f4:7b:3e:cf:3b:dd:ca:b5:12:00:46:
         7e:f3:68:37:bd:b8:79:00:09:26:ac:c8:e5:b9:d0:06:c5:05:
         e2:20:9e:b6:f7:88:02:bd:c4:f0:d1:fa:e9:cd:90:ec:19:ec:
         f1:29:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:01:54 2026 by rpki-client