Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/f4409881-0cc2-340a-9a24-65fd19f277e1.roa
File:                     f4409881-0cc2-340a-9a24-65fd19f277e1.roa (raw, json)
Hash identifier:          JICWGq2WAVQrLQusS/zRZBekem1Sy3B/RxwZwETUHpE=
Subject key identifier:   22:DB:DF:67:01:AA:1C:E6:C6:0E:7D:99:51:ED:68:62:6F:CC:E0:17
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584AC0164A7A8EC4364068B53C00
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/f4409881-0cc2-340a-9a24-65fd19f277e1.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     22125
IP address blocks:        161.150.7.0/24 maxlen: 24
                          161.150.16.0/24 maxlen: 24
                          161.150.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:4a:7a:8e:c4:36:40:68:b5:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=96a3014d-466a-4650-b75b-00fe3a722cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:5f:74:00:32:a4:63:99:82:e9:2e:d2:fd:
                    93:d1:56:7e:3f:0e:c4:45:fd:f7:e2:3e:89:df:5c:
                    2e:ef:24:2d:09:1e:c9:03:3e:2b:24:12:9b:9b:c4:
                    3f:de:d4:bb:68:a7:9e:81:e9:54:a2:21:b4:98:32:
                    fc:0d:73:1a:de:7b:50:fb:3a:55:a9:2d:73:b3:39:
                    22:e2:42:48:01:f2:76:1d:25:5c:be:06:ee:bb:36:
                    43:b5:fb:98:e8:46:1f:ac:a2:08:43:86:82:2a:ed:
                    3e:14:bb:ce:2d:16:cd:b8:b0:f5:30:fd:66:2a:95:
                    e6:04:69:7c:7c:81:96:e0:0c:14:dd:61:ba:9c:ff:
                    32:0f:ef:5e:94:12:f8:d4:76:cc:c1:65:65:18:20:
                    03:80:7c:ef:75:e4:1d:09:28:30:a5:d8:f3:89:69:
                    eb:b5:76:91:21:e3:f5:9f:4b:e6:47:22:32:76:8b:
                    65:12:4d:50:67:fc:61:29:94:12:6b:ba:f1:30:2e:
                    7f:66:f3:2a:50:00:c6:28:05:8b:1e:2a:ca:c5:7d:
                    b3:d8:eb:47:e3:7f:52:b6:75:23:e9:59:e9:c0:82:
                    f5:e6:f4:46:2a:6b:86:a0:89:e8:89:96:94:6e:21:
                    88:b7:a2:ea:e8:72:55:75:7d:6a:f8:0c:46:95:61:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DB:DF:67:01:AA:1C:E6:C6:0E:7D:99:51:ED:68:62:6F:CC:E0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/f4409881-0cc2-340a-9a24-65fd19f277e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.7.0/24
                  161.150.16.0/24
                  161.150.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:15:9a:80:bb:fa:b3:a5:89:00:44:35:f1:a0:98:87:91:
         86:5b:5e:d6:24:bc:da:70:6a:7a:f6:9f:c4:0e:6a:6b:11:00:
         17:33:e5:e0:30:64:31:fa:12:36:e0:43:39:bc:61:3a:8e:e4:
         71:5b:33:84:4f:c9:85:48:59:06:c7:47:fa:71:32:b1:c4:01:
         fc:20:a3:cd:31:34:e7:5d:cf:89:4b:ae:18:41:47:5d:e8:08:
         7f:3f:96:6c:51:c9:1d:91:32:29:1b:a5:e4:85:ba:c0:19:dc:
         c5:b0:7b:9b:39:6d:cb:64:e7:ee:bf:84:56:a3:d3:11:e3:f8:
         0d:6d:0f:e4:0c:9a:53:72:e3:f5:54:0b:13:2f:97:db:34:25:
         4a:74:6a:45:fb:d4:31:37:db:38:fb:28:59:9c:ec:43:65:35:
         af:63:09:e5:b4:1a:89:43:d8:75:17:c0:12:2f:76:f5:41:d0:
         71:5b:47:c4:b2:b7:c2:87:73:65:b8:7a:12:0a:95:17:b8:01:
         3b:70:e6:53:20:d1:c6:68:5f:23:4f:6c:60:65:44:31:ba:0e:
         a1:b2:96:bd:39:de:a4:2e:f5:68:30:60:89:31:0a:a8:d1:ac:
         02:c8:71:f8:ed:d2:0d:de:c8:12:68:ec:7c:ad:a3:30:61:9b:
         79:b4:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:45 2025 by rpki-client