Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d6027cce-683d-3279-ad17-efa9c3bd6345.roa
File:                     d6027cce-683d-3279-ad17-efa9c3bd6345.roa (raw, json)
Hash identifier:          6XfXW0CHB5XOgM4k0jRfHTNddUc2kvguPBWOnua9Xbg=
Subject key identifier:   2A:DF:1C:00:87:32:31:AA:D0:F0:08:9F:6B:7E:A4:82:6F:E1:54:6E
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F43285849DF5A781F36B9C002412A0A40
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d6027cce-683d-3279-ad17-efa9c3bd6345.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     10995
IP address blocks:        161.150.7.0/24 maxlen: 24
                          161.150.16.0/24 maxlen: 24
                          161.150.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:78:1f:36:b9:c0:02:41:2a:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=d9f05d41-ee87-4b80-bb1c-b6821d30bec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:29:cf:a3:7f:a4:98:b7:7e:e0:2a:7e:fc:
                    14:21:16:30:27:8a:c6:1b:33:ac:f2:29:90:8a:4c:
                    31:a6:6e:b1:83:05:df:96:1d:3c:be:15:41:92:4e:
                    71:e4:1e:a5:86:16:b5:2d:48:e5:1d:a9:b6:a2:7e:
                    70:37:9f:66:ef:1f:0b:b7:ce:bb:1d:33:3e:00:7c:
                    94:1f:26:22:83:3f:a3:2c:e9:d6:0b:28:16:61:f9:
                    02:5f:e4:46:ac:ca:ab:8c:aa:f2:f4:bb:a5:56:ed:
                    1a:fa:52:e8:ba:a8:27:34:52:13:35:41:ba:91:27:
                    37:d4:88:b5:fc:19:e2:fe:1f:de:21:e0:3f:d3:6b:
                    ec:fa:81:36:50:f7:8d:6b:e1:54:30:c9:6d:86:ab:
                    71:81:01:97:8d:00:87:a6:c5:3b:e7:7a:3a:62:c4:
                    cb:a4:89:53:8f:0d:67:4e:cb:b3:29:51:a8:dc:09:
                    f4:11:e1:42:77:69:84:fc:e5:b1:a2:17:9d:ea:40:
                    28:1c:0a:49:5b:b5:4a:1b:61:dd:4b:73:d9:e8:c3:
                    56:ed:f0:70:63:6b:8f:18:05:d8:27:55:8c:c2:d5:
                    2c:7a:0d:c7:58:3a:51:9a:5f:28:33:fd:bb:94:50:
                    12:bd:00:16:ad:f1:bb:da:57:30:f1:0c:a1:65:c4:
                    47:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DF:1C:00:87:32:31:AA:D0:F0:08:9F:6B:7E:A4:82:6F:E1:54:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d6027cce-683d-3279-ad17-efa9c3bd6345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.7.0/24
                  161.150.16.0/24
                  161.150.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:06:42:28:25:85:60:67:e2:5c:d5:cd:a7:c5:8f:33:28:11:
         a9:06:75:71:a4:75:eb:81:b6:29:b1:eb:dd:76:0f:a3:32:42:
         cc:bd:8c:95:19:19:a2:be:c5:ba:69:94:4b:51:ac:ce:df:26:
         d1:e7:d6:51:e8:de:92:79:d6:97:90:a2:31:ed:60:03:af:cb:
         bc:a0:7b:9e:98:ee:76:da:0f:d1:92:a8:ce:ad:28:3e:e1:ba:
         79:33:e3:d3:72:2e:09:c7:ec:56:78:bd:1e:c7:a4:c4:8b:ef:
         01:67:82:b8:e8:15:4e:55:4c:2f:88:30:2b:bb:12:5b:a0:c1:
         b6:4a:6e:a0:0e:9c:88:2b:0d:bc:05:fd:b6:6f:d4:1f:5b:33:
         d5:20:ba:1e:00:70:92:40:32:f9:6d:94:c2:ab:eb:14:7c:26:
         33:2d:95:41:fb:8a:64:e1:b9:08:11:80:b6:22:ce:43:7b:76:
         e1:d6:a0:81:41:5e:31:8a:7a:5d:27:55:58:50:79:3c:77:a1:
         0a:15:1a:26:32:e3:46:e0:1e:ae:7f:cd:2a:63:e9:44:fa:9a:
         d9:92:de:f7:9b:f2:07:d6:81:8a:4f:d8:d7:84:5e:53:7f:92:
         17:80:9a:e3:6b:27:e2:1d:bb:be:46:b3:5c:ba:e9:c1:bd:8f:
         18:0b:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:21:10 2025 by rpki-client