Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa
File:                     3228a7be-6150-3af1-9c53-ac3898b20397.roa (raw, json)
Hash identifier:          Uj/qUmNA6FeQw0Hy9ZxCNRqJBbUG7YWfOMaiJV5kiKk=
Subject key identifier:   B7:36:97:F0:5C:3F:F9:BD:2F:A4:1B:87:C8:36:8D:92:75:14:BD:A3
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584D29268F3CF9788FB66B3D1D00
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa
Signing time:             Sat 14 Mar 2026 01:47:25 +0000
ROA not before:           Sat 14 Mar 2026 01:47:25 +0000
ROA not after:            Fri 12 Jun 2026 01:47:25 +0000
asID:                     10995
IP address blocks:        161.150.86.0/24 maxlen: 24
                          161.150.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:26:8f:3c:f9:78:8f:b6:6b:3d:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Mar 14 01:47:25 2026 GMT
            Not After : Jun 12 01:47:25 2026 GMT
        Subject: CN=5060bb5f-dc19-4c53-bdfd-228f01c18e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:e2:d6:20:b5:e9:d8:0b:ec:7a:ee:2d:2b:
                    99:f8:31:0b:d8:88:13:8d:69:fe:80:84:af:11:d6:
                    69:96:6b:97:31:d9:0b:c6:85:bd:97:c6:af:42:ff:
                    bb:62:17:30:ef:09:ef:c5:a3:1d:d3:97:df:70:99:
                    c2:ec:68:7c:8b:bf:3b:16:eb:09:d6:c7:21:d4:78:
                    4d:14:fc:63:cf:1d:52:c4:c3:9d:dc:2c:ce:d6:3d:
                    64:3e:46:7d:f5:cf:98:28:c0:25:2b:bf:11:87:7f:
                    75:7e:af:75:c7:3a:e3:0c:b9:5f:ec:cf:ad:fb:f4:
                    f4:4d:e1:e0:2a:71:7b:15:4d:c8:36:ba:d0:05:82:
                    3b:64:5c:7c:ba:0c:a4:5b:d5:d8:0d:18:3f:7d:8d:
                    cf:0b:8a:2a:aa:76:dd:4e:f6:3d:3e:3f:34:c3:e3:
                    ca:ca:07:a4:21:67:34:6d:7d:27:4f:1a:7c:6b:67:
                    6b:f0:cb:4a:69:97:42:ec:14:a1:f8:57:93:4c:69:
                    83:51:3d:cc:8f:55:b7:97:39:1d:37:38:67:50:9a:
                    7b:80:9b:34:6e:3e:17:14:da:d1:58:1f:af:dd:f2:
                    5c:ee:06:6d:00:d4:bb:d2:5e:75:c0:06:4f:d0:6e:
                    a3:47:64:20:7f:98:ba:0a:e8:35:59:7e:f2:8e:e3:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:97:F0:5C:3F:F9:BD:2F:A4:1B:87:C8:36:8D:92:75:14:BD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.86.0/24
                  161.150.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:49:fd:c5:3a:4d:9c:88:c1:56:1f:71:88:38:3a:96:46:
         00:12:e6:fe:a1:92:1b:4b:9b:6d:82:39:42:05:6b:c8:cd:44:
         2b:21:2f:75:fe:00:35:43:40:34:65:c4:1f:d6:2b:f8:39:a4:
         24:06:80:e2:52:7e:de:17:63:85:ba:99:b8:0a:1c:29:39:96:
         be:32:96:79:d7:c9:e0:a1:6c:a2:d7:3f:91:58:5c:46:2b:26:
         93:69:f9:4b:8a:b0:2b:92:81:84:cd:cb:4d:bd:fd:68:73:c3:
         18:95:f2:da:9b:b9:f9:26:ce:a1:c6:23:54:90:4f:ec:99:0e:
         34:8a:3c:53:e2:58:90:bf:c9:22:05:24:f1:60:92:b2:57:2a:
         a9:75:21:c0:99:f0:5e:4a:4f:03:46:66:e3:5f:3d:c2:96:87:
         8b:8a:7f:c7:96:c8:51:66:bd:ec:8e:e4:10:9c:90:e8:2b:68:
         48:85:83:55:7d:c5:9a:e8:3c:b7:b9:51:4b:1b:51:54:a7:32:
         91:74:6e:11:29:5d:39:c7:67:6c:14:9a:36:ef:4e:17:97:3f:
         90:c9:57:c3:e1:71:9b:c4:15:54:8e:90:b0:4a:37:11:02:7d:
         69:cb:0a:b0:33:89:e5:70:b5:4c:37:32:cc:2c:29:9a:38:7b:
         aa:1b:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:54 2026 by rpki-client