Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d3f480e6-b663-31da-8553-b56876273225.roa
File:                     d3f480e6-b663-31da-8553-b56876273225.roa (raw, json)
Hash identifier:          EYMeulKVcNIU/pVBVkxMbfHrQivC2dX5DnWN+td9sEk=
Subject key identifier:   85:47:9E:53:D9:E7:C4:32:BE:E6:70:11:C9:68:3E:7B:EB:46:1A:A3
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584EFF777607ED773388567C8980
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d3f480e6-b663-31da-8553-b56876273225.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     22125
IP address blocks:        161.150.80.0/23 maxlen: 23
                          161.150.80.0/24 maxlen: 24
                          161.150.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:76:07:ed:77:33:88:56:7c:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=d64a4adf-97c2-407a-8d8e-149d17817372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:2c:a0:d0:9f:ca:bd:8e:ec:c3:84:04:b9:
                    b6:95:9d:a9:2e:42:20:e8:20:d6:a9:a3:ff:df:e4:
                    2c:48:1b:56:58:c5:35:40:49:70:d4:ec:3f:be:08:
                    5d:1a:37:10:4d:28:f8:cc:d3:e0:44:2f:be:d5:35:
                    08:06:12:2f:9c:b2:73:be:79:c2:ba:bd:12:1a:3b:
                    ec:58:b1:65:a3:b9:55:68:1c:00:4d:0b:30:5c:ad:
                    88:7b:d4:d9:6a:c0:ec:db:0c:3b:a8:8d:10:5b:43:
                    05:bb:c7:70:a4:02:c3:dc:e1:89:e5:b3:a2:ef:b1:
                    17:31:29:a8:a4:c5:33:1d:86:a7:86:c1:3c:e4:f0:
                    53:ea:f0:d8:ff:a2:15:f2:6b:9f:75:a8:c7:55:ca:
                    35:ec:8d:c9:00:52:e9:62:fa:22:e9:15:1f:7c:f9:
                    c5:c6:73:bd:2e:ac:b8:f3:bd:23:84:9c:7f:50:6e:
                    34:f1:3a:45:6b:42:5b:ba:1d:06:d1:84:77:b4:19:
                    07:99:5c:92:84:1e:cb:2a:45:0f:3b:88:49:88:9c:
                    93:9f:39:d1:26:3c:59:18:2d:ce:e4:60:fe:b4:cd:
                    02:55:db:aa:d3:33:4b:89:86:1c:23:96:8f:57:ba:
                    e5:db:7c:40:c8:70:d3:99:45:15:37:95:b4:ee:9e:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:47:9E:53:D9:E7:C4:32:BE:E6:70:11:C9:68:3E:7B:EB:46:1A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d3f480e6-b663-31da-8553-b56876273225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:fa:a2:02:41:04:0e:b0:08:3f:ba:6b:82:03:57:f6:f0:
         d3:25:ad:3b:68:e2:e8:59:ab:e6:03:11:fe:4f:34:8d:84:42:
         b6:c8:f2:0f:86:b0:6f:dc:00:9c:7f:b4:b2:3d:8a:f0:75:ce:
         8c:31:a5:17:d9:b1:e1:a3:60:7d:b5:46:8b:de:e6:89:43:7d:
         d0:cf:a5:ad:f7:25:2b:65:88:95:ea:7d:c9:d3:e8:8c:cf:da:
         20:44:45:59:bb:b1:08:1c:1f:50:cd:9f:5f:4f:06:22:7e:8e:
         5d:11:c3:88:4d:d7:e7:e1:44:91:04:95:bf:43:13:3d:8d:50:
         db:f2:3a:44:d3:ba:7c:64:ec:90:cc:c7:d5:e0:1c:88:95:a2:
         21:70:9a:d7:f0:34:7e:d5:61:b9:3f:e2:1c:b3:66:b4:3e:53:
         8f:91:ff:90:89:fd:7e:20:c9:ca:57:28:d3:8d:5e:fc:24:ae:
         16:20:50:a0:a8:4f:cd:57:a0:7b:c9:0b:bf:34:75:4f:5e:c2:
         42:a8:a7:06:00:98:18:21:fe:a8:f6:1d:60:0a:10:be:f8:5d:
         98:e0:bc:f5:1a:50:67:9c:ef:12:a4:ae:fb:1c:e7:f9:ae:cb:
         93:8f:3e:5b:4e:3e:bb:25:4d:37:9a:0d:49:8a:5d:89:b5:35:
         8c:8f:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:29:01 2026 by rpki-client