Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/008c60fa-e644-37c7-9cdc-2423cfd34a96.roa
File:                     008c60fa-e644-37c7-9cdc-2423cfd34a96.roa (raw, json)
Hash identifier:          +gSisM4y02osO7zf44dWp//bOFW+1dBZlzFC7Gpx7D0=
Subject key identifier:   9F:BA:B8:8E:53:DF:42:17:2E:05:6B:8F:9E:37:F8:16:7F:97:60:F9
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584F3A17CA3EB569ED7B79EEE2C0
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/008c60fa-e644-37c7-9cdc-2423cfd34a96.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     22125
IP address blocks:        161.150.40.0/22 maxlen: 22
                          161.150.44.0/22 maxlen: 22
                          161.150.48.0/22 maxlen: 22
                          161.150.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:ca:3e:b5:69:ed:7b:79:ee:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=da727aac-13ae-456b-b24d-403e00087d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:47:44:cf:18:36:55:e3:0e:b1:81:b2:e7:
                    18:01:3c:97:91:a1:f5:9f:5d:e4:57:75:76:30:7f:
                    55:00:e0:eb:f9:74:13:c7:c4:62:01:c6:63:29:4b:
                    72:53:41:26:8b:07:f2:4d:f8:79:62:e8:b1:80:0b:
                    52:b8:04:48:bd:19:3a:d9:28:cb:66:59:d5:fb:1c:
                    b1:ed:6a:bd:34:dd:0f:3d:b7:8d:5c:c4:3e:53:b8:
                    13:31:79:b6:31:e9:2a:ab:19:57:ef:53:39:1b:72:
                    d1:a7:43:df:0c:a0:5c:d3:75:ab:e3:b4:62:65:43:
                    0e:04:a1:42:e3:72:4c:5e:fb:08:e5:91:0a:7a:50:
                    23:c2:86:56:d4:ad:c2:e9:b2:af:c2:0a:ae:d0:20:
                    14:b0:9f:fa:ba:be:04:c5:00:39:85:8b:7d:43:fe:
                    a0:64:be:3b:17:95:17:ee:b0:6a:82:d2:6d:6c:b9:
                    ee:10:28:e4:3c:70:03:b7:53:93:69:47:81:b1:cb:
                    1e:81:34:11:40:e9:ab:94:a4:5d:13:df:de:93:ca:
                    da:64:04:b8:30:08:1e:83:44:f6:75:54:26:24:47:
                    01:66:8b:20:8e:42:fc:7e:d5:1f:68:e6:1f:26:22:
                    2a:bf:79:2f:23:40:55:cb:f5:3a:cf:4a:10:95:8b:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BA:B8:8E:53:DF:42:17:2E:05:6B:8F:9E:37:F8:16:7F:97:60:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/008c60fa-e644-37c7-9cdc-2423cfd34a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.40.0-161.150.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:fa:04:27:f5:03:f0:16:85:ef:82:47:f2:53:99:2b:e5:10:
         dd:9d:44:73:bd:1d:a3:1a:e4:9e:f5:c3:35:ab:6b:d1:41:af:
         fe:9e:64:41:5e:4c:2d:be:05:31:94:5b:22:43:79:f7:ed:d4:
         f4:c9:d8:41:04:af:cc:70:e8:0d:91:5f:bd:81:f0:5e:b9:63:
         b9:38:3d:a9:42:2c:09:52:8e:9f:03:47:a4:1a:69:7f:00:94:
         2d:54:1c:3b:61:fd:48:96:72:5f:99:2a:c6:aa:db:f8:81:b1:
         5e:57:fe:7c:1a:4e:cf:9c:e5:0a:51:28:64:35:e3:35:17:b2:
         f1:b5:0e:26:5c:1b:07:84:b3:2b:f6:5d:d9:ed:14:1a:ed:d5:
         7b:e3:b4:8f:fc:e1:b1:d7:5d:f8:03:12:9a:04:56:99:ba:a8:
         1c:d4:a0:87:ca:85:13:99:cd:c5:af:1b:f4:c8:0b:4b:24:d2:
         81:41:79:59:5f:98:6e:a9:c5:67:bb:09:c1:7e:08:b7:36:93:
         4d:cc:81:4b:62:e2:a3:0f:b3:6f:1e:0d:96:34:e3:c7:f8:d9:
         80:85:d8:fc:8d:e4:1e:e0:4c:dc:2b:9a:43:41:10:f2:ed:e7:
         f3:77:89:7a:4c:62:48:cf:d3:da:84:c4:7b:14:fe:6c:f2:87:
         c1:d4:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:22:21 2026 by rpki-client