Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa
File:                     b9dd9788-1f88-3890-b233-520f9602c142.roa (raw, json)
Hash identifier:          raR8LXbHliYyAbF0vCJYClDkFTYWggT8rUB419xboms=
Subject key identifier:   75:A5:9D:EB:2B:81:D8:BA:24:6A:D9:32:1C:80:6F:89:96:9E:83:F5
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584D746FC52D4E8D7B42326A7880
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     8075
IP address blocks:        161.221.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:c5:2d:4e:8d:7b:42:32:6a:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=8726cf0e-95d7-45bf-95e7-67f1064d1773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:04:a2:5d:2f:d8:55:c5:39:d3:38:a3:c7:
                    33:c1:fe:e3:29:e6:92:b4:12:f6:36:a2:7a:24:35:
                    49:f0:b6:4d:38:69:ee:69:44:43:68:33:10:a4:22:
                    15:7f:e7:b3:bc:0e:c8:55:b7:85:99:ec:67:28:fd:
                    f8:46:97:85:00:5c:6e:e9:f4:e2:51:47:2f:2f:74:
                    df:79:56:d9:9a:f3:22:2d:a6:bc:3c:ec:82:97:1c:
                    40:34:a9:fc:b5:af:44:93:d3:66:be:41:e0:fc:e7:
                    55:49:a2:64:b1:80:6b:6a:da:d8:8a:4d:ee:ce:7a:
                    db:2f:e9:dc:6c:54:dd:ec:62:1e:89:8a:ca:c6:86:
                    11:2f:d3:5b:46:37:2f:c2:02:f3:8a:47:ce:2c:49:
                    37:c7:9d:52:f1:bc:72:d2:b1:72:34:16:7f:ec:86:
                    61:60:76:dd:de:50:f0:3e:53:12:ea:58:a4:d6:55:
                    cc:a5:93:d4:ee:29:5a:da:69:77:d9:3c:cf:37:52:
                    7e:54:7a:21:bc:86:4a:ae:be:a0:c3:9a:b8:e2:1d:
                    71:e2:e8:cf:83:df:27:27:4c:1d:6d:9f:a6:64:31:
                    cd:92:05:74:b4:d6:35:57:6c:75:bb:d4:fe:aa:b0:
                    d1:36:ed:63:a6:35:a8:44:a3:e2:ef:6d:5c:ae:01:
                    3b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A5:9D:EB:2B:81:D8:BA:24:6A:D9:32:1C:80:6F:89:96:9E:83:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:4e:59:9a:b2:a3:05:ab:34:f8:30:ea:eb:cd:08:ad:d3:a3:
         a9:66:30:51:a3:8d:08:f4:23:9f:7b:3e:8c:fa:11:ed:9e:5a:
         fc:0b:20:30:2a:63:33:2a:a0:a7:62:b2:09:78:4e:cb:2d:7e:
         31:52:1f:73:be:bd:6c:f1:9d:7a:72:fe:b4:06:14:4e:bf:f1:
         b2:de:b7:77:f8:dd:d6:6e:16:d9:6b:70:a6:ac:74:b6:c4:3c:
         81:4c:b8:2c:2a:fc:e0:35:9f:29:0a:22:a3:e2:57:7d:d6:bf:
         d6:01:37:35:1a:bb:d0:44:51:91:db:28:3f:34:60:1f:e2:42:
         66:c9:61:cc:6c:02:20:f9:53:29:c4:10:93:71:57:c9:c2:65:
         02:e7:51:76:2b:6d:34:4c:8a:58:7f:72:ec:42:b1:71:a3:21:
         89:ad:3b:46:05:6a:e2:bc:57:ed:a3:1a:c0:79:51:cb:3f:23:
         e0:cd:a7:0b:84:01:ed:c7:f3:c0:f7:25:54:37:86:d6:43:86:
         6f:de:be:03:f4:a7:e0:2a:16:a2:27:2a:cd:be:e5:aa:5a:c9:
         b7:13:1a:ca:de:b7:ce:c8:f6:08:88:00:e3:3f:d7:98:0a:e5:
         92:23:80:98:e3:44:fa:af:91:aa:35:18:63:d7:46:d4:bc:62:
         39:75:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:57 2026 by rpki-client