Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/4bab2bbe-6ec3-381d-b8f8-6f64ac436c6a.roa
File:                     4bab2bbe-6ec3-381d-b8f8-6f64ac436c6a.roa (raw, json)
Hash identifier:          cMcaMZ1WsXtwq8Zw2n4AH+NT0a11GplcckFmwZlHlqs=
Subject key identifier:   1A:90:E7:93:F1:89:B3:BA:06:3A:6E:14:39:5A:EF:C5:D0:26:D0:DA
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584DE16FEF522610FABBFFD128C0
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/4bab2bbe-6ec3-381d-b8f8-6f64ac436c6a.roa
Signing time:             Tue 19 May 2026 02:03:59 +0000
ROA not before:           Tue 19 May 2026 02:03:59 +0000
ROA not after:            Mon 17 Aug 2026 02:03:59 +0000
asID:                     22125
IP address blocks:        161.150.115.137/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:6f:ef:52:26:10:fa:bb:ff:d1:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: May 19 02:03:59 2026 GMT
            Not After : Aug 17 02:03:59 2026 GMT
        Subject: CN=4325a693-b2b9-4ceb-ad23-b4e21d66b189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:61:ef:81:cd:9b:53:01:bf:47:9f:d4:ee:
                    e3:6b:ec:b2:e2:83:74:2a:f6:6f:fe:34:65:66:d0:
                    74:fa:ca:99:e7:82:72:11:cd:18:10:8f:fe:96:2e:
                    e2:ca:ba:66:fe:67:36:4e:9b:43:b0:cb:f7:8c:b8:
                    a6:9b:73:a4:56:99:df:88:71:03:e2:a1:ed:a1:44:
                    43:de:0b:32:b3:5c:c9:0c:20:36:d5:73:12:01:4c:
                    97:c9:02:dc:c7:84:6b:9f:41:a4:48:70:1b:be:1d:
                    6b:cd:66:76:ad:c6:9e:c4:2c:d0:9e:0d:1a:9f:da:
                    33:6f:18:03:74:5f:a2:f8:f5:8a:56:9e:c9:68:ac:
                    82:dc:eb:26:da:ff:9c:be:d2:20:a0:06:fc:19:72:
                    2e:06:41:47:a4:2d:fa:56:ab:47:c5:63:a8:49:41:
                    26:49:1e:c4:24:42:89:4c:04:dc:62:91:9e:a3:27:
                    d4:f8:8d:08:c3:7f:07:6f:73:89:db:29:d3:15:44:
                    a3:5c:0d:58:5d:d4:9a:82:3c:85:a9:ed:5c:c1:bb:
                    44:5e:97:47:bc:89:09:92:bb:09:da:22:bc:68:fa:
                    2e:7f:05:1e:0c:96:88:ac:d4:de:d0:aa:8d:54:d3:
                    aa:8f:0e:7e:6d:1d:28:46:73:a0:07:15:85:5d:53:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:90:E7:93:F1:89:B3:BA:06:3A:6E:14:39:5A:EF:C5:D0:26:D0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/4bab2bbe-6ec3-381d-b8f8-6f64ac436c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.115.137/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:09:aa:10:9c:b5:5d:2e:5b:6a:0d:96:ad:fb:a5:64:95:
         a2:f1:89:3e:c2:94:2e:65:b7:3c:b1:cf:e3:54:cd:8b:f5:a5:
         f2:18:80:92:52:65:17:90:74:2a:87:92:c2:fd:ae:24:b4:1c:
         d1:ab:18:5c:77:f3:92:09:72:3e:4f:5b:a8:f6:18:c6:6f:94:
         5a:89:8c:e3:20:69:be:92:18:92:2c:eb:fe:32:f0:1c:4a:e5:
         46:73:17:38:e7:96:28:b8:7b:69:b2:56:52:7e:de:4d:f8:97:
         ec:55:3e:dd:20:6a:bb:66:b7:e5:fd:cd:04:56:70:0a:c1:4d:
         27:0c:6d:bb:f7:04:bc:09:0e:3b:e3:24:1d:9e:ef:dd:77:3c:
         7c:e8:f4:94:f7:d0:a8:d0:ba:0f:16:bf:be:28:af:7c:a3:82:
         83:14:30:e1:63:36:80:2d:14:bd:02:0f:bf:d3:df:9b:04:0e:
         20:cd:f7:10:74:ec:6c:f0:db:5e:9e:bc:0e:01:8f:3c:14:2d:
         f5:75:28:38:d9:04:86:4f:ae:76:97:8f:16:c6:c2:e2:88:b0:
         f5:b7:40:b7:b0:c3:38:87:ff:51:14:14:a9:3f:fe:8e:e3:61:
         a9:21:40:84:27:74:4e:dc:29:42:1b:fb:9c:47:36:81:7b:8e:
         bd:5e:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 05:48:10 2026 by rpki-client