Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/c21717af-3b78-37d9-bb13-999cd1d2f651.roa
File:                     c21717af-3b78-37d9-bb13-999cd1d2f651.roa (raw, json)
Hash identifier:          diuPhVOd1V9gEaTdbfNW7E+UPPYdDkilANXaFcnOss4=
Subject key identifier:   B7:C3:8F:DC:03:A6:0D:A4:76:A8:1B:73:7C:B0:72:F9:4A:55:C4:E1
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584F2AFF59C67978B19492AE6F00
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/c21717af-3b78-37d9-bb13-999cd1d2f651.roa
Signing time:             Mon 14 Sep 2026 03:13:54 +0000
ROA not before:           Mon 14 Sep 2026 03:13:54 +0000
ROA not after:            Sun 13 Dec 2026 04:13:54 +0000
asID:                     22125
IP address blocks:        161.150.0.0/16 maxlen: 16
                          170.201.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:ff:59:c6:79:78:b1:94:92:ae:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Sep 14 03:13:54 2026 GMT
            Not After : Dec 13 04:13:54 2026 GMT
        Subject: CN=7576202c-1b83-4a77-bd9b-9344f0e919f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:de:fe:83:c4:c4:c1:d4:dc:32:28:c9:f0:
                    76:90:ab:3a:13:6e:cc:ed:17:c4:8a:41:49:d3:0b:
                    05:7c:e0:c5:7a:7a:54:7d:9b:bb:69:25:76:64:8a:
                    1b:73:5d:02:85:7f:33:92:d2:92:a9:53:76:c1:d4:
                    e2:8a:b2:cf:d4:84:c3:3c:59:b4:32:6c:75:ca:5e:
                    78:bf:69:f3:d2:97:74:c6:61:53:b3:34:ce:0a:35:
                    d8:9b:67:d1:55:a2:5a:33:8d:56:f6:f3:8f:7d:11:
                    51:46:f9:e5:fc:5e:fa:e9:9b:a9:30:6f:9c:fe:3a:
                    64:38:11:6d:59:78:15:41:12:7e:a2:aa:a1:dd:61:
                    1a:64:2e:9f:35:7b:0a:8c:79:fe:2d:de:5a:27:a4:
                    5a:68:a8:e7:72:7e:25:62:f6:6c:30:93:96:73:2b:
                    c4:5a:b9:98:69:84:72:02:5a:54:ca:90:1e:7b:f7:
                    8a:47:5c:e7:f6:49:cb:27:ea:6f:48:2b:da:db:b7:
                    70:46:8f:17:fe:57:b7:48:93:4a:e2:6f:1e:fb:47:
                    36:70:a1:07:02:55:71:82:88:17:a5:e3:6a:47:e0:
                    8f:cd:4c:a8:98:4e:97:93:f8:6f:38:c9:b2:ab:49:
                    f2:28:f4:f4:9b:c7:97:45:45:e1:80:ba:e4:b8:8d:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:8F:DC:03:A6:0D:A4:76:A8:1B:73:7C:B0:72:F9:4A:55:C4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/c21717af-3b78-37d9-bb13-999cd1d2f651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.0.0/16
                  170.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:ad:8f:ab:83:7d:ed:cb:fd:91:73:74:92:c9:9c:f2:5e:
         54:ab:37:0d:53:52:bd:90:34:cb:a1:bf:45:45:62:38:24:30:
         2c:39:32:08:4f:3b:70:9d:78:0b:77:12:56:49:a3:d5:c8:2b:
         e3:94:c1:a0:b3:20:77:a4:97:a0:40:8f:10:01:ce:b7:4b:fb:
         1a:2f:32:fa:41:bc:db:3a:65:27:b6:2a:78:4c:a4:8f:ba:01:
         bf:7b:4a:fc:4f:5f:92:54:18:58:ec:89:dd:f3:5b:c0:09:1f:
         fa:b3:f2:e9:da:a0:5f:f9:a3:74:b0:8a:5c:f0:bc:a2:00:e0:
         98:3c:9f:07:22:7b:47:45:8d:00:85:b6:a5:1d:95:fa:70:22:
         50:63:39:d2:b7:08:38:59:17:e6:1e:3a:9c:35:25:b0:e6:f1:
         50:06:af:33:b4:50:e2:d2:dc:e5:7d:f4:26:c2:07:85:7d:59:
         e7:9d:7a:79:0f:2a:02:c3:ba:24:11:a0:8b:4c:ef:a1:01:24:
         29:59:5b:e4:c3:92:4b:4f:d4:c7:fd:0c:2b:07:96:e9:c3:80:
         4f:5c:ec:f4:5a:d0:27:f7:20:67:fe:4a:b8:74:13:2a:69:d3:
         f9:37:10:0c:3b:26:08:b4:b2:60:8a:81:41:2f:87:1d:32:d2:
         ca:27:1c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:54 2026 by rpki-client