Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/1f0ca602-921a-37a8-9d13-65f5417e6560.roa
File:                     1f0ca602-921a-37a8-9d13-65f5417e6560.roa (raw, json)
Hash identifier:          NOxbx216H2+M1hpasffWaa+IU0qvN6mXZXNjXPlDp9A=
Subject key identifier:   57:18:C1:90:AB:67:D7:6B:80:C2:A3:C2:1E:02:EA:DD:7E:9B:A1:B1
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584E842A40E80D45E651178BFD00
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/1f0ca602-921a-37a8-9d13-65f5417e6560.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     10995
IP address blocks:        161.150.0.0/22 maxlen: 22
                          161.150.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:40:e8:0d:45:e6:51:17:8b:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=2e1057c1-1c03-4a06-b2e6-f567973dff96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:99:b3:af:27:b4:e8:d6:56:70:c5:e1:76:
                    11:2c:0c:3e:31:ac:20:1e:19:e1:74:8d:a6:f2:fd:
                    57:6d:a1:19:84:77:85:1a:a5:b3:95:52:72:d3:66:
                    a8:a2:64:a2:87:b9:05:3d:0b:77:26:5e:b0:4b:be:
                    e9:18:b3:f2:2c:99:8d:16:07:3c:9c:c7:a2:b6:18:
                    c8:04:75:44:21:a1:48:f1:a9:ce:03:bf:7c:b7:a5:
                    5f:14:22:f0:ad:04:68:17:85:e3:a1:1c:f8:24:53:
                    8c:cc:44:f1:68:83:47:ea:aa:66:33:b0:eb:56:bd:
                    0f:63:10:6f:55:11:97:58:1c:1c:ab:0a:16:99:18:
                    1e:49:f2:81:9c:ec:1a:f8:20:54:08:c6:c7:5b:50:
                    c0:36:a4:08:81:54:83:f0:8d:5b:6f:aa:d2:76:45:
                    75:11:68:17:cb:8c:26:09:60:ec:48:4b:aa:b6:c3:
                    ff:78:66:88:86:6c:45:4f:ce:5a:4c:ea:88:77:aa:
                    01:98:0e:9f:40:43:18:1d:0a:ac:43:b5:72:2e:da:
                    a1:9f:c7:df:2c:31:e4:61:31:7d:c3:9a:84:36:a7:
                    61:0a:df:b1:0e:50:18:b2:cc:a0:bb:d4:77:e5:cf:
                    33:26:76:67:36:60:29:6d:aa:2e:f4:99:6e:cf:0a:
                    06:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:18:C1:90:AB:67:D7:6B:80:C2:A3:C2:1E:02:EA:DD:7E:9B:A1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/1f0ca602-921a-37a8-9d13-65f5417e6560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7f:0e:bb:64:06:8a:99:05:29:5a:a9:24:67:67:20:e3:d6:
         62:1a:2b:0d:02:cd:ff:49:4f:e0:3f:09:0a:02:f9:4f:e2:8e:
         16:6c:38:5d:83:5d:c8:a1:96:7a:ee:86:4a:a7:0f:48:57:a6:
         17:29:33:d9:6e:69:d4:07:a7:66:f5:c2:8a:1c:9a:9a:63:45:
         59:41:91:c7:29:d9:f1:2e:86:ef:bc:de:14:6c:b1:e3:22:11:
         58:84:9a:3e:fc:7e:c3:f7:47:7d:40:06:3d:20:82:dd:26:3e:
         de:70:12:7f:b8:4d:0c:f0:c6:b9:21:74:9a:3c:65:59:34:f9:
         04:2c:e2:69:df:cd:e2:81:fd:8e:53:a2:3f:e5:f7:cc:b7:21:
         03:cb:17:09:4f:05:14:b5:7e:82:b8:cc:0c:62:88:79:a4:31:
         fc:c3:d0:8a:79:69:0e:c8:c6:c9:2e:44:c9:9b:5a:f7:09:71:
         32:2b:d1:73:2f:b7:8a:e3:87:22:e0:af:cd:64:77:f7:8c:c1:
         8e:4d:c9:1a:35:2e:45:ce:f2:a5:b3:1e:fa:43:bc:ee:87:62:
         6a:61:27:0c:2a:db:3e:f2:ba:24:0d:1a:92:40:6f:41:ef:ec:
         3b:6d:60:ed:96:53:e0:c8:cc:08:51:63:f7:c2:3c:bb:0b:10:
         9b:e5:0c:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKkDoDUXmUReL/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5
YTBmMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
MmUxMDU3YzEtMWMwMy00YTA2LWIyZTYtZjU2Nzk3M2RmZjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgWZs68ntOjWVnDF4XYRLAw+MawgHhnhdI2m
8v1XbaEZhHeFGqWzlVJy02aoomSih7kFPQt3Jl6wS77pGLPyLJmNFgc8nMeithjI
BHVEIaFI8anOA798t6VfFCLwrQRoF4XjoRz4JFOMzETxaINH6qpmM7DrVr0PYxBv
VRGXWBwcqwoWmRgeSfKBnOwa+CBUCMbHW1DANqQIgVSD8I1bb6rSdkV1EWgXy4wm
CWDsSEuqtsP/eGaIhmxFT85aTOqId6oBmA6fQEMYHQqsQ7VyLtqhn8ffLDHkYTF9
w5qENqdhCt+xDlAYssygu9R35c8zJnZnNmApbaou9JluzwoG3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcYwZCrZ9drgMKjwh4C6t1+m6GxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3
OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMWYwY2E2MDItOTIxYS0z
N2E4LTlkMTMtNjVmNTQxN2U2NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl
NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4
OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj
NTE4ODlhMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoZYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEx/DrtkBoqZBSlaqSRnZyDj1mIaKw0Czf9JT+A/CQoC+U/ijhZsOF2D
XcihlnruhkqnD0hXphcpM9luadQHp2b1woocmppjRVlBkccp2fEuhu+83hRsseMi
EViEmj78fsP3R31ABj0ggt0mPt5wEn+4TQzwxrkhdJo8ZVk0+QQs4mnfzeKB/Y5T
oj/l98y3IQPLFwlPBRS1foK4zAxiiHmkMfzD0Ip5aQ7IxskuRMmbWvcJcTIr0XMv
t4rjhyLgr81kd/eMwY5NyRo1LkXO8qWzHvpDvO6HYmphJwwq2z7yuiQNGpJAb0Hv
7DttYO2WU+DIzAhRY/fCPLsLEJvlDDY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:31 2026 by rpki-client