Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3943c164-61df-3cd5-a709-869543edd2ea.roa
File:                     3943c164-61df-3cd5-a709-869543edd2ea.roa (raw, json)
Hash identifier:          lrgrkpHI5Sp5I8kxcHOJJatDYJXQWFI0K0drXFP08Us=
Subject key identifier:   A7:B6:34:AF:82:7D:0E:88:19:89:93:11:2B:A7:E3:9A:53:3D:EB:30
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584E842A3E307ED977CC6433ED80
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3943c164-61df-3cd5-a709-869543edd2ea.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     10995
IP address blocks:        161.150.6.0/24 maxlen: 24
                          161.150.104.0/23 maxlen: 23
                          161.150.104.0/24 maxlen: 24
                          161.150.105.0/24 maxlen: 24
                          161.150.106.0/23 maxlen: 23
                          161.150.106.0/24 maxlen: 24
                          161.150.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:3e:30:7e:d9:77:cc:64:33:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=129e7368-c5be-4046-b7b6-6366a9d87b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:16:1b:13:15:52:1e:c3:09:29:e4:d2:85:
                    da:2b:78:d7:a7:a2:84:44:e8:a1:fc:90:ec:dd:a6:
                    63:c5:c0:0a:44:75:d0:4e:c5:f8:23:ff:fc:79:54:
                    c8:66:dc:32:a6:bf:ae:c7:e8:55:f7:01:e0:3b:ac:
                    d3:70:eb:cf:e6:4e:9e:fd:02:40:d3:e8:b0:94:05:
                    ac:96:8a:27:43:76:93:c0:62:4b:91:ed:26:da:74:
                    3c:59:68:d8:90:0b:9d:6b:ec:be:35:fe:a4:fe:35:
                    33:e3:96:dc:64:54:69:92:a1:4d:81:47:d0:d8:20:
                    a5:4b:3a:fd:33:ba:35:c1:5c:c2:54:27:d2:d8:f8:
                    74:99:8a:20:d9:d3:95:f3:be:76:0c:48:ed:c9:75:
                    fa:92:33:67:4b:94:b5:1f:f0:48:8f:91:ac:73:60:
                    1f:15:0f:9b:d8:d2:52:57:cb:c4:f4:f6:df:e8:bd:
                    59:3b:af:15:d3:d3:89:d7:06:f3:60:91:bc:b9:47:
                    3c:de:f2:be:69:f4:96:51:80:42:13:f9:d8:9e:ff:
                    54:25:ce:af:70:41:08:88:fb:6f:dd:3d:f1:54:90:
                    6d:8a:a6:04:10:1f:2b:33:a1:b1:51:b6:6a:72:07:
                    e7:31:69:ab:a9:0d:29:3f:46:70:f6:5f:25:4c:8a:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B6:34:AF:82:7D:0E:88:19:89:93:11:2B:A7:E3:9A:53:3D:EB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3943c164-61df-3cd5-a709-869543edd2ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.6.0/24
                  161.150.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:66:ad:db:73:b4:68:d5:8a:6c:25:84:25:a7:9e:b1:09:4c:
         74:72:a3:be:20:8f:ec:0d:f3:e7:cf:8e:a1:63:54:80:75:7b:
         a8:6a:f0:46:41:d5:41:ce:a0:8d:9a:ae:49:49:be:7b:81:c6:
         35:aa:f1:eb:56:5b:d2:c6:d1:63:79:46:b1:06:d3:b7:f2:93:
         89:6b:90:b8:c8:b6:e1:5f:55:11:ce:f6:d7:1c:8e:f1:16:c5:
         93:23:ec:4c:4a:7b:9f:6e:1d:1a:3d:ae:c8:79:ac:d0:13:7b:
         49:b3:a5:ff:4c:d9:2b:12:52:be:ba:14:49:4e:55:da:69:53:
         16:5f:4c:48:84:ae:e0:96:24:5a:0f:7b:04:99:63:c3:d5:a7:
         d1:d0:38:23:c0:98:a7:6c:96:91:c5:ff:09:73:8c:ab:f3:09:
         11:ed:58:14:20:8e:fa:a4:83:09:78:27:d5:b5:c6:84:74:18:
         6b:fa:88:c0:6f:eb:99:88:c7:04:8d:82:87:fd:a4:4e:aa:35:
         ef:1a:ac:e1:70:4e:8c:9f:ed:dd:91:82:42:ba:08:07:bd:fc:
         3a:8a:a8:44:62:71:48:93:84:79:5e:6b:fd:3a:08:3a:94:08:
         55:96:23:a0:63:75:91:be:ac:b0:73:99:79:45:fa:db:d0:ac:
         41:98:7a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:41 2026 by rpki-client