Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3a99d9fb-149e-349a-a38a-a0d41e785f48.roa
File:                     3a99d9fb-149e-349a-a38a-a0d41e785f48.roa (raw, json)
Hash identifier:          17kGmv4B2hVGfjeVjJ+6YyPFSwAumlEKtlp2VoksXYs=
Subject key identifier:   D4:3F:C8:AC:77:45:5F:8C:8C:76:49:F9:96:1A:DD:44:A9:96:E8:C3
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584D1B399330E69C2D3ACF3DF2C0
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3a99d9fb-149e-349a-a38a-a0d41e785f48.roa
Signing time:             Mon 09 Mar 2026 02:04:24 +0000
ROA not before:           Mon 09 Mar 2026 02:04:24 +0000
ROA not after:            Sun 07 Jun 2026 02:04:24 +0000
asID:                     10995
IP address blocks:        161.150.1.0/24 maxlen: 24
                          161.150.2.0/24 maxlen: 24
                          161.150.17.0/24 maxlen: 24
                          161.150.114.0/23 maxlen: 23
                          161.150.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:39:93:30:e6:9c:2d:3a:cf:3d:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Mar  9 02:04:24 2026 GMT
            Not After : Jun  7 02:04:24 2026 GMT
        Subject: CN=f911f701-7723-4d59-a4bf-9dec9d779234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:b2:a5:4f:3d:7c:b8:28:e6:0a:d9:ca:14:
                    2c:e9:3e:7f:5d:7f:12:94:eb:48:66:5d:4b:73:56:
                    79:e2:bc:32:95:fb:af:9e:f5:17:dd:e9:6d:90:f5:
                    4b:28:47:9b:30:14:11:1f:2e:8a:2d:e4:d9:ed:5a:
                    fe:92:7f:66:57:d9:05:28:07:f2:f1:b7:84:a4:ed:
                    93:53:76:e4:58:70:14:47:3a:e6:c3:1c:e2:af:6b:
                    92:52:06:5b:2b:df:43:37:9c:f0:3b:b7:9b:8b:c6:
                    3a:e4:73:bf:33:ab:42:d0:3e:fa:97:a9:93:b4:40:
                    9f:01:be:60:a1:12:3b:7a:c4:21:84:ea:5f:f5:ac:
                    73:0b:9b:58:25:8b:0c:f7:ca:c2:03:09:68:2f:de:
                    17:28:60:d6:7f:b2:15:b9:db:9c:1b:75:a4:40:27:
                    13:37:55:ac:5e:bf:76:93:00:86:87:c2:89:6f:8a:
                    60:87:3b:ad:de:76:ca:e3:ba:df:30:e8:8c:52:69:
                    25:51:c8:96:38:19:16:5b:ff:2c:e9:28:e3:95:26:
                    14:4a:a8:c9:1f:a9:7c:31:74:d3:8b:1c:dd:89:95:
                    90:42:75:0f:1e:2b:e8:a3:1c:36:00:20:49:1c:ba:
                    db:92:66:e9:4a:c6:66:2f:11:a8:c6:fa:45:fe:4b:
                    66:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3F:C8:AC:77:45:5F:8C:8C:76:49:F9:96:1A:DD:44:A9:96:E8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3a99d9fb-149e-349a-a38a-a0d41e785f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.1.0-161.150.2.255
                  161.150.17.0/24
                  161.150.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:35:56:a9:59:46:dc:fd:8a:9a:01:f7:a4:9c:87:7c:bd:
         e9:80:e6:9f:21:0a:6b:15:20:c1:1e:5b:5e:02:47:d3:58:58:
         b5:28:27:f3:c2:0c:ad:c1:1a:8d:fa:0a:61:20:67:60:07:24:
         a3:39:b4:ee:e1:de:72:c3:34:67:f5:5d:57:54:cb:2e:e6:2b:
         bd:72:16:7a:30:6f:d6:c1:38:47:35:0a:a7:11:4f:28:b8:85:
         ac:f9:e7:29:72:4f:72:74:33:1a:32:4d:40:b9:c8:99:7d:5e:
         a3:ec:e3:03:01:81:70:fa:5e:28:89:5e:99:81:03:1e:97:6a:
         54:ee:e1:03:4a:f2:61:e2:90:65:f8:ee:c0:e1:e8:e4:5d:e5:
         84:7e:38:c1:11:78:c3:aa:99:4d:cc:df:4f:7d:e6:28:0f:e4:
         e7:db:69:2c:db:7d:ed:20:a3:16:df:cd:1f:51:a7:04:bd:c2:
         e4:1b:ee:ef:e0:6e:1a:2a:c7:71:76:d3:33:49:f7:3b:f6:ba:
         2b:80:b5:4c:52:3c:15:8c:ba:c8:05:87:00:98:16:fd:81:b8:
         a2:dd:3c:5e:a8:2c:0f:9c:0d:dc:25:75:62:51:94:46:50:a4:
         70:4d:32:f0:c8:c7:40:e4:1f:99:45:ff:5c:6b:67:54:0f:1d:
         8d:b3:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:26 2026 by rpki-client