Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/900c3170-935f-31a4-ac75-00d03d86fee0.roa
File:                     900c3170-935f-31a4-ac75-00d03d86fee0.roa (raw, json)
Hash identifier:          hqLzNsUcVbI6g/KgjGhxb3YMmR+RfZaBWrEGHIGu7HM=
Subject key identifier:   D8:D5:DB:A5:85:62:AE:EB:E5:3C:11:AD:C1:46:D4:57:80:E2:68:72
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584EA799869FA30B67BF74CFD580
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/900c3170-935f-31a4-ac75-00d03d86fee0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22125
IP address blocks:        161.150.1.0/24 maxlen: 24
                          161.150.2.0/24 maxlen: 24
                          161.150.17.0/24 maxlen: 24
                          161.150.114.0/23 maxlen: 23
                          161.150.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:86:9f:a3:0b:67:bf:74:cf:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ad4590c3-f2bf-4163-a4f6-02cc0a55d991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:e2:68:33:05:17:91:80:a2:5b:22:6b:5d:
                    35:ae:37:21:c6:5e:11:46:a1:b8:52:ba:b8:e0:8e:
                    f2:62:46:74:b1:70:7c:84:97:15:54:7a:90:1b:95:
                    23:8e:2b:8f:d7:f3:84:cd:c1:cb:87:97:d0:f0:a7:
                    c5:f9:90:7f:05:a7:1d:c0:fa:35:8a:6f:09:0a:47:
                    18:e9:c7:36:17:8f:7e:eb:0c:4b:0b:a2:35:d3:00:
                    dd:34:67:67:93:50:be:46:97:59:a5:37:fb:64:7e:
                    be:20:0e:7d:2f:55:2f:f6:42:0c:c7:0a:15:7f:71:
                    a9:07:db:05:1d:bc:e8:a5:a4:b9:b2:30:ef:c5:17:
                    6b:0b:09:9e:57:19:fe:4f:62:f9:40:0e:0c:13:4b:
                    a5:1b:ca:ec:0f:02:9b:7c:19:c7:12:e6:3b:f1:6c:
                    f3:27:b2:7d:4b:6a:cb:04:bb:a6:e7:e6:df:b2:54:
                    d5:b5:23:c7:c9:99:f4:f4:02:21:28:9b:1b:d3:12:
                    84:26:ab:fd:55:8b:4c:26:e9:52:e3:52:2b:a3:1a:
                    b4:86:1f:f7:d5:fa:76:33:4b:0f:ad:38:55:39:9d:
                    89:00:ac:f6:24:bd:23:c8:19:7f:7c:d6:05:fe:ac:
                    a3:37:28:57:b1:8f:b2:e8:b2:5e:a7:5a:a5:a2:1b:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D5:DB:A5:85:62:AE:EB:E5:3C:11:AD:C1:46:D4:57:80:E2:68:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/900c3170-935f-31a4-ac75-00d03d86fee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.1.0-161.150.2.255
                  161.150.17.0/24
                  161.150.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:0c:58:87:17:76:f2:6d:ff:7c:c2:4e:d0:cf:74:13:e2:
         85:e7:fa:02:0e:cf:96:44:02:a3:a7:e0:ce:98:e9:c8:eb:ea:
         e9:51:04:a0:ea:7f:b5:4e:42:5b:07:ab:55:dd:c4:53:35:20:
         5b:84:c2:19:29:8d:9a:49:94:03:eb:62:6a:e3:9e:c5:cf:d4:
         21:31:bd:84:dd:86:c3:8b:8b:5c:cf:e7:c5:74:b3:0e:3c:39:
         1d:64:a9:e6:fa:9a:0a:d7:b9:af:4c:14:11:ee:d4:ac:c5:88:
         7e:15:06:63:aa:13:cf:07:f9:20:15:26:34:b7:28:a8:18:5a:
         1f:e1:dc:ec:ca:ff:b8:e0:42:97:03:52:27:2e:f2:84:3c:08:
         fb:aa:c3:63:23:11:0e:5d:3a:24:72:e5:68:76:89:0e:1f:bf:
         f8:4a:5d:81:d2:dc:52:2c:16:1a:91:69:82:d8:71:f3:9a:61:
         10:9b:33:74:ce:0b:f5:87:83:b4:7b:79:38:c0:4c:66:88:6a:
         a0:e8:38:69:5f:00:0f:60:10:35:f6:84:cb:ee:1b:3a:7e:4b:
         6e:95:81:00:cd:92:1f:2f:a9:b1:3d:ee:be:08:d9:2c:44:a4:
         cd:4b:ad:76:44:1a:1c:d1:2c:62:83:da:26:0f:36:9b:de:a4:
         dc:ac:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:54:23 2026 by rpki-client