Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
File:                     12211a98-a467-395a-802f-13b6b78c07d9.roa (raw, json)
Hash identifier:          P9Mhrj1HEho6/nbEqQ/uv7mQ98JUausjOoOM1w7spbs=
Subject key identifier:   4C:D9:2B:B7:22:B9:13:D5:9E:0D:FD:96:E4:22:37:79:BD:7B:4F:26
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584BAEC7BB04A7B3B6373A335100
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     8075
IP address blocks:        161.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:bb:04:a7:b3:b6:37:3a:33:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=838c797f-ee5f-42f2-9f35-2ec5aba33fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:de:46:78:ae:80:1d:83:6c:75:68:a7:fa:
                    12:98:85:be:92:78:8e:0e:9e:ef:63:a9:14:19:f5:
                    b8:4e:e2:4f:cf:b0:e9:8e:48:38:a6:9b:27:45:e7:
                    47:95:5d:0f:b5:bd:f3:43:18:82:b5:8b:5c:79:5e:
                    03:d5:6a:78:5a:21:09:52:06:e5:49:fb:bb:78:df:
                    c6:fd:30:60:bb:97:31:60:df:df:e3:cc:49:7a:b4:
                    1e:1c:22:1c:a5:45:e7:90:64:07:0e:15:74:61:1f:
                    0d:b1:c8:b3:11:c6:67:8f:2b:9c:a6:c8:3a:a2:16:
                    63:aa:a0:d9:6c:1c:45:ef:f2:b3:02:5a:97:37:cd:
                    50:f8:b9:ba:d8:5a:7b:f7:61:59:a6:d2:ee:9d:00:
                    6f:c6:73:aa:2e:f3:03:a0:2a:cc:d7:ff:d0:4d:2d:
                    c7:4b:13:03:64:7a:51:eb:0c:6a:68:de:cf:b4:33:
                    db:2f:a9:a5:41:ca:75:b3:c2:c9:9a:1a:79:81:a2:
                    4d:2e:b7:5a:ad:12:80:f7:d5:6e:0c:ed:db:85:8b:
                    26:86:dd:2d:4c:9a:c3:71:c9:41:98:88:16:86:19:
                    76:3d:13:9f:75:75:47:f8:25:98:6b:a3:c7:6e:ea:
                    0d:16:8a:b7:c0:14:22:a7:0e:9a:5f:aa:4a:60:95:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D9:2B:B7:22:B9:13:D5:9E:0D:FD:96:E4:22:37:79:BD:7B:4F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:31:61:30:a4:2a:00:15:46:f8:92:84:e1:b4:f1:ad:c1:56:
         02:80:57:e0:eb:5e:8c:b2:f1:8d:65:6a:fc:7d:3c:b1:d1:a3:
         d9:2a:5c:9b:9e:ca:a2:eb:5a:6b:09:fa:f4:6e:cf:6b:b8:f7:
         61:9f:01:51:ba:8c:d4:90:cc:23:f9:94:d3:6c:e0:86:ae:66:
         ef:06:e3:8d:b4:98:9b:0f:bd:b6:2d:e6:6e:0b:42:91:29:18:
         00:6e:c1:08:ef:8b:2d:95:e1:79:78:9b:fc:30:45:49:88:40:
         eb:0b:02:b6:7b:ec:28:8a:09:a8:02:a4:f3:b5:10:8e:3d:e4:
         2d:48:e7:59:bb:75:0a:87:f6:5c:f6:91:5a:4b:a4:32:d2:0f:
         5b:6a:a1:85:96:e2:46:3f:01:c7:8c:da:12:80:bd:81:8b:e8:
         72:c0:f8:f4:4e:5a:02:7e:4b:06:cc:27:b0:15:87:e1:05:dc:
         93:f1:54:a7:35:fb:45:a9:16:cc:d8:1b:50:af:6b:e1:f7:6d:
         ce:b4:4a:ad:da:86:6d:23:f0:2c:aa:f7:67:5a:b2:6c:5f:7c:
         55:cd:4d:85:af:58:8c:f8:a3:c4:ed:0e:67:95:4a:6b:6d:3b:
         9f:c4:d5:bf:4f:ff:2b:29:02:e2:d2:b9:6e:d9:15:b1:aa:91:
         9f:2f:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:17:35 2025 by rpki-client