Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/432e27ab-0815-37c8-880d-43eed932f05a.roa
File:                     432e27ab-0815-37c8-880d-43eed932f05a.roa (raw, json)
Hash identifier:          H0lUJ5O84s52Yrx21rW1yleWMsPcc3omHfp6LFMLGeg=
Subject key identifier:   56:DA:9B:61:FF:5E:BF:42:8B:CA:98:1C:C1:5F:79:FA:6F:34:D1:AB
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584E97B5115FC12C5A4D596D8E80
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/432e27ab-0815-37c8-880d-43eed932f05a.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     10995
IP address blocks:        161.150.40.0/22 maxlen: 22
                          161.150.44.0/22 maxlen: 22
                          161.150.48.0/22 maxlen: 22
                          161.150.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:11:5f:c1:2c:5a:4d:59:6d:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=65481bb1-40aa-4bfa-a061-e2d93fbee093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:a5:df:f9:17:cd:d2:4e:5e:89:1f:06:cf:
                    87:a2:64:b5:63:b7:93:e9:7e:3d:55:b0:17:f8:83:
                    58:16:95:1a:17:c2:a6:8a:f5:fc:59:28:a7:b2:77:
                    c9:0d:10:25:bb:37:fb:f8:58:75:05:2b:3e:85:8f:
                    f1:a6:17:45:57:19:ae:8a:46:6b:5d:c7:d9:c9:5b:
                    64:19:c2:31:ad:60:f6:6f:0c:8b:bf:d9:c8:86:05:
                    05:2d:fa:33:2f:50:74:3c:c0:75:7f:43:da:5d:39:
                    f2:2f:69:ab:f9:04:fc:c2:f9:e0:5c:07:4b:f8:fe:
                    8c:1c:40:0c:83:18:4e:a2:9b:3d:6c:9b:d1:43:23:
                    fc:98:bc:5c:23:59:94:fb:a0:93:47:8b:3b:ff:c5:
                    ba:71:d0:d8:b2:97:99:29:4f:ab:ad:5c:00:25:fe:
                    58:8f:9e:eb:79:67:e8:50:f9:c3:92:cf:92:24:3f:
                    e5:15:6f:6e:81:10:7c:4e:2d:2b:a0:3b:bf:9e:d0:
                    0b:d6:9a:7e:5a:7d:66:95:e8:13:dc:cf:cb:cb:ff:
                    04:68:cf:e8:c5:d7:b2:4a:38:4b:7a:f3:11:66:74:
                    64:93:82:4e:60:32:db:13:ec:53:4b:a5:26:9c:07:
                    a9:3a:23:4f:64:2d:90:ca:27:4d:a8:4d:61:ba:47:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DA:9B:61:FF:5E:BF:42:8B:CA:98:1C:C1:5F:79:FA:6F:34:D1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/432e27ab-0815-37c8-880d-43eed932f05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.40.0-161.150.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:85:0c:73:48:44:95:f7:09:9d:73:b2:09:43:df:72:10:63:
         76:24:bd:6e:73:00:f8:5b:c3:0e:2f:a3:2a:c6:ed:7a:55:ee:
         57:5f:44:4c:64:0c:5a:8d:4c:c3:98:e5:f2:27:f0:5c:53:d8:
         21:e1:a3:ad:57:8d:33:8e:c7:4f:93:0f:30:8e:6f:fe:fc:ff:
         fc:af:fd:98:71:23:37:e7:cf:f1:68:c7:9d:b4:c0:c7:cf:ba:
         ee:55:b3:40:4c:21:6f:1b:95:6f:bf:f5:d1:cd:20:f6:ed:7e:
         a1:a9:9f:b2:c3:6c:07:96:bf:ff:6f:e3:fe:53:b1:18:dd:a4:
         9f:ef:3a:2d:b9:65:06:21:2d:2d:c4:ca:5a:26:e8:b5:a6:0e:
         70:4f:f9:61:77:e0:a7:57:69:d5:24:8a:8e:16:f5:6e:a0:7d:
         63:17:d2:30:9b:37:7a:ef:c6:03:41:7c:aa:b1:e6:68:8b:07:
         21:8a:9b:a8:d3:e0:44:26:47:88:df:90:48:fe:32:9d:cb:7a:
         d2:41:a7:50:4f:73:ae:00:96:8b:ff:d0:5c:88:4f:11:99:d1:
         57:04:33:bc:07:7e:13:a5:4d:d1:73:80:c5:f0:d0:87:f8:65:
         eb:00:e0:76:46:bd:1a:c8:93:13:b9:e2:5d:4b:81:f4:bc:51:
         2b:5a:f1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:19:43 2026 by rpki-client