Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/82de4398-a821-3afb-a041-7f64ff09f038.roa
File:                     82de4398-a821-3afb-a041-7f64ff09f038.roa (raw, json)
Hash identifier:          tLP9kcAyDjjc+gUV/gdwgkmkVKRf8g6+t34ZwKUq52E=
Subject key identifier:   55:8C:86:B1:93:2E:CB:A5:29:32:4D:33:9D:32:29:67:F4:C7:4C:EF
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584EA78F0F3105419666EC5F94A0
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/82de4398-a821-3afb-a041-7f64ff09f038.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10995
IP address blocks:        161.150.1.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:0f:31:05:41:96:66:ec:5f:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9f8b4ffd-26de-44da-8e48-bdebcd7bdef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:ab:ee:ad:1f:2e:d5:8b:ea:72:05:49:07:
                    8b:54:2e:68:70:b6:45:15:64:e1:64:e1:3b:64:bd:
                    30:dd:6d:1f:b7:0e:2c:8d:c0:01:d8:0e:01:44:6e:
                    b3:89:46:72:a4:20:bd:e2:c3:26:2b:6a:ec:f6:69:
                    7f:aa:00:38:f7:e3:69:86:c5:06:41:89:38:5c:93:
                    92:e2:5b:d7:1b:c4:e8:9e:c3:50:62:19:77:5f:b1:
                    7d:25:d7:bc:5d:e4:d2:dd:44:47:50:fa:61:79:eb:
                    12:bb:5e:4d:dd:f0:35:0a:ca:ab:45:f7:1f:d8:2e:
                    e5:72:f5:89:f7:43:f9:a6:6a:1f:18:42:13:fa:69:
                    3a:66:60:70:b5:3b:c7:bc:a2:8e:4d:d4:59:fc:aa:
                    6b:25:3e:3a:a5:d9:20:93:fd:cd:ec:72:15:19:40:
                    4b:ec:bd:6d:b6:50:78:7c:d4:88:ed:9d:34:7d:e3:
                    e3:28:87:f3:c3:4f:3d:e4:7f:4c:3f:55:1e:6e:b3:
                    29:50:2a:e7:2d:52:17:58:6f:a7:54:e6:68:e0:ef:
                    e7:c9:4a:2e:ef:c8:13:b1:a1:6c:97:82:21:a6:66:
                    53:8b:53:d5:2a:5a:05:ec:dd:28:17:b7:18:92:7e:
                    7e:94:7e:ed:38:3b:fa:83:ba:82:93:85:80:06:e0:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8C:86:B1:93:2E:CB:A5:29:32:4D:33:9D:32:29:67:F4:C7:4C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/82de4398-a821-3afb-a041-7f64ff09f038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.1.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:64:f6:a1:69:ff:f6:88:33:65:7c:17:77:0b:ff:54:4b:12:
         17:a4:ca:34:b7:ba:63:5b:04:64:9e:b5:29:0c:4c:84:13:db:
         9b:f6:71:8b:28:66:7b:d0:68:9c:63:33:7b:c6:85:4b:26:6b:
         68:05:c9:ba:27:16:c0:2f:c7:f2:0e:2e:9f:15:33:19:b6:61:
         0e:3d:fb:1f:1e:3c:59:1b:c4:03:ed:d2:f9:e0:9f:f0:56:f0:
         99:02:a6:0f:66:7f:cc:a1:9b:1b:95:19:d4:0c:0e:41:f9:a6:
         90:67:e0:c9:97:f4:15:84:08:a4:45:55:09:77:13:34:5b:b4:
         c7:fe:fc:4a:e4:8b:15:da:c9:3b:5a:2a:66:2b:ed:ce:11:a8:
         8e:fd:26:ac:24:04:52:06:0f:da:d4:72:b6:42:b7:10:72:bd:
         a9:29:a9:b1:3a:9d:05:42:e9:a6:cc:5c:e1:bb:c7:73:06:c8:
         7a:16:8d:7f:6a:78:22:61:48:9a:85:f2:3d:d6:48:98:42:42:
         95:df:18:d5:54:b1:f6:c7:44:e7:da:58:3f:96:17:34:ec:73:
         b7:e9:38:df:42:b4:65:41:5a:a3:6e:29:63:50:ee:7f:8c:c1:
         f2:95:f2:89:2c:40:db:21:82:84:41:66:d9:77:9e:a6:91:f8:
         45:77:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:26 2026 by rpki-client