Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/900c3170-935f-31a4-ac75-00d03d86fee0.roa
File:                     900c3170-935f-31a4-ac75-00d03d86fee0.roa (raw, json)
Hash identifier:          USHOxJURca195iTr5GawLCoZztuNjTVc5ksjmszAvoM=
Subject key identifier:   F6:DD:37:8D:C4:2E:82:D9:1C:C6:AF:E2:21:24:03:EF:12:A9:42:4F
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584D1B3A4E8B484B3207B4966D00
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/900c3170-935f-31a4-ac75-00d03d86fee0.roa
Signing time:             Mon 09 Mar 2026 02:05:53 +0000
ROA not before:           Mon 09 Mar 2026 02:05:53 +0000
ROA not after:            Sun 07 Jun 2026 02:05:53 +0000
asID:                     22125
IP address blocks:        161.150.1.0/24 maxlen: 24
                          161.150.2.0/24 maxlen: 24
                          161.150.17.0/24 maxlen: 24
                          161.150.114.0/23 maxlen: 23
                          161.150.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:3a:4e:8b:48:4b:32:07:b4:96:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Mar  9 02:05:53 2026 GMT
            Not After : Jun  7 02:05:53 2026 GMT
        Subject: CN=8656620f-c1b0-43bf-ae9c-90adf6aef291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:33:c0:99:2a:40:ae:70:73:0c:e3:4e:c8:b3:
                    6c:4b:aa:e7:85:00:da:1c:14:53:27:ff:e6:0a:37:
                    01:ab:7b:26:67:76:90:21:92:fa:67:78:9a:08:e1:
                    19:34:b5:a7:f9:02:13:be:58:05:de:c1:8f:a3:01:
                    4d:47:41:85:80:6f:97:61:1d:fd:9d:c7:c7:5e:7c:
                    d6:86:38:85:86:a2:2e:04:7d:b8:dd:dc:c6:1f:65:
                    90:45:60:b6:87:d9:55:6b:08:f9:23:ef:bb:93:b2:
                    ff:03:c8:98:83:1f:42:04:02:47:3c:e1:4e:38:c8:
                    8e:41:56:72:1d:fe:91:c0:4a:e9:0c:7a:a4:6f:08:
                    41:8e:37:80:9d:6f:3e:9c:9e:6b:20:50:b8:57:09:
                    8a:b5:f2:74:d5:77:1f:77:49:89:a4:b6:e2:d3:19:
                    3d:2b:fc:20:d5:f0:f4:c6:aa:2f:0f:93:9a:39:3c:
                    b2:f6:3b:54:68:7b:63:28:3f:ef:c1:0b:0a:e3:b4:
                    2c:8f:0c:37:f1:31:c4:2f:f6:b0:8e:2b:aa:56:bf:
                    89:84:1c:40:87:d5:03:a1:38:95:99:ad:ad:45:bd:
                    23:b8:0d:37:e7:1b:e4:07:fa:54:2b:47:7a:f0:59:
                    dc:b0:6e:d5:40:38:ab:67:db:32:cd:a2:73:f6:a7:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DD:37:8D:C4:2E:82:D9:1C:C6:AF:E2:21:24:03:EF:12:A9:42:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/900c3170-935f-31a4-ac75-00d03d86fee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.1.0-161.150.2.255
                  161.150.17.0/24
                  161.150.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ed:23:1a:87:b2:35:62:81:80:a1:06:31:b3:71:59:31:17:
         19:2c:51:05:de:ee:ad:c9:bb:a0:f1:11:37:0c:39:03:8a:70:
         99:b3:0f:2b:bc:24:06:01:9a:38:ed:8d:2d:f2:76:4e:22:98:
         07:7d:36:f1:b2:cd:c0:47:7f:ff:79:27:7f:5b:2c:17:d1:b2:
         74:1a:6a:7c:2e:0b:25:be:30:b1:8c:f9:8c:34:2c:ff:90:e5:
         d3:d4:af:97:f1:2c:8e:7d:8c:36:d4:70:a6:3e:05:cd:ed:7d:
         88:c4:24:8c:20:ba:41:28:1f:7f:35:e1:70:8c:a4:fe:f9:c7:
         7e:ee:68:9b:dc:20:35:09:68:71:78:87:dd:97:65:04:d4:69:
         9c:c7:69:bb:86:3c:31:b8:64:50:09:e9:3c:ac:6c:09:95:ca:
         a4:ca:ea:a5:fc:82:3f:0f:e0:41:9a:70:7f:7c:d5:4c:51:60:
         7f:3c:f5:24:e1:54:77:24:4e:0f:03:d8:9f:5d:e5:b7:ff:9f:
         e8:69:89:89:4b:27:d5:90:ba:a0:f3:4d:71:0e:b7:13:1b:b8:
         1d:85:8f:ce:55:54:d2:30:b0:8e:7d:3a:bd:a4:ba:f2:b1:5b:
         63:8a:ce:08:ce:d3:4c:c5:e6:a3:a4:11:d2:2c:59:f2:e4:5a:
         d6:dc:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:03 2026 by rpki-client