Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/59082630-c0f2-3247-9487-603c4d0a3a7b.roa
File:                     59082630-c0f2-3247-9487-603c4d0a3a7b.roa (raw, json)
Hash identifier:          +iW0i0Vrc8Kh7uaiO72o4hl5C3BaKnuaqqneZJ2Yq4w=
Subject key identifier:   5E:0E:64:49:85:AE:DC:59:60:ED:93:7E:EE:9B:8B:91:F4:52:F2:05
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584F4974C0F49303CBF8FD1B8C00
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/59082630-c0f2-3247-9487-603c4d0a3a7b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22125
IP address blocks:        161.150.115.138/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:c0:f4:93:03:cb:f8:fd:1b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0165ab55-f43b-41b2-ad51-dc0271429eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:99:63:04:95:19:89:3b:3e:f5:d4:fa:79:
                    29:83:58:4c:7c:b5:76:ee:55:6a:5a:76:32:b6:ac:
                    34:f8:fb:07:8b:64:60:e0:5c:ff:de:60:de:5c:7d:
                    81:d6:36:e4:07:1a:1f:56:13:7c:1f:56:31:6d:27:
                    24:37:eb:3c:a1:2e:e6:f8:4e:16:26:cf:03:5a:32:
                    e5:2f:36:5e:95:fa:95:ae:5d:c8:21:53:6d:76:07:
                    f3:bb:ce:8a:bd:02:dc:09:7d:42:8d:4e:45:8e:19:
                    86:53:f9:29:52:92:02:d0:46:44:d9:59:8a:74:79:
                    be:00:a3:e2:6a:3c:56:e8:a8:68:55:8c:8f:89:e8:
                    cb:e9:56:7b:15:ee:39:1c:0a:4c:06:36:53:cf:fc:
                    f2:e5:79:f6:39:0b:f2:3f:5c:74:78:0c:17:66:00:
                    e1:87:e4:d6:25:d0:49:5f:6f:b6:00:bb:e6:75:d1:
                    44:3c:bc:2a:7c:d9:21:8c:af:86:ec:b8:08:88:ee:
                    f0:e6:b8:2a:86:7a:2b:d6:11:be:dd:31:36:12:b0:
                    93:26:46:97:b6:66:fd:0a:37:03:d0:fb:c3:40:f4:
                    b1:b0:67:c2:2c:db:c2:f3:9c:a7:0c:83:c2:bf:e8:
                    e0:58:b4:bd:8a:8c:aa:7c:05:95:bb:85:06:99:e8:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0E:64:49:85:AE:DC:59:60:ED:93:7E:EE:9B:8B:91:F4:52:F2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/59082630-c0f2-3247-9487-603c4d0a3a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.115.138/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c6:4c:11:c0:c8:b9:48:87:25:ca:c4:97:21:b6:5c:f2:4e:
         a9:df:c5:c8:fb:36:92:9c:06:c2:74:f7:45:e3:30:59:ec:41:
         4f:7e:fc:9f:85:92:c0:b0:44:27:d1:d6:39:52:3e:c8:57:42:
         7c:7e:fc:e7:71:be:2b:f0:7f:26:a6:b5:fb:c8:55:64:68:5d:
         c9:9e:94:70:34:39:f7:10:e1:5a:bb:0f:af:82:50:3b:f1:5a:
         21:2a:a1:d0:8c:7f:e9:90:53:48:b2:40:12:76:fd:16:98:c2:
         49:06:15:8a:41:c2:2b:62:6b:aa:e2:f1:f8:71:77:e5:7f:b2:
         20:33:dc:4a:ac:d6:a5:11:12:21:fa:fb:69:ec:7c:be:98:36:
         2b:8c:22:8e:19:1e:44:bb:50:29:56:bf:bd:bd:31:ef:e9:e3:
         9f:bc:35:67:96:e9:28:da:83:79:97:ea:74:55:92:32:aa:2e:
         a8:7b:5a:2f:af:a8:19:db:98:46:3b:a6:ca:8b:d0:2a:e9:40:
         28:19:5b:e7:05:71:3d:6d:4f:da:db:97:27:36:0d:51:c0:e5:
         30:91:3f:c2:a7:57:94:84:1a:e5:a2:6c:0b:57:13:c4:89:a4:
         b3:85:ea:3a:a0:ee:d5:89:13:ad:8f:b9:4c:1a:49:fd:76:5b:
         27:70:0e:07
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdMD0kwPL+P0bjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5
YTBmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDE2NWFiNTUtZjQzYi00MWIyLWFkNTEtZGMwMjcxNDI5ZWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqSZYwSVGYk7PvXU+nkpg1hMfLV27lVqWnYy
tqw0+PsHi2Rg4Fz/3mDeXH2B1jbkBxofVhN8H1YxbSckN+s8oS7m+E4WJs8DWjLl
LzZelfqVrl3IIVNtdgfzu86KvQLcCX1CjU5FjhmGU/kpUpIC0EZE2VmKdHm+AKPi
ajxW6KhoVYyPiejL6VZ7Fe45HApMBjZTz/zy5Xn2OQvyP1x0eAwXZgDhh+TWJdBJ
X2+2ALvmddFEPLwqfNkhjK+G7LgIiO7w5rgqhnor1hG+3TE2ErCTJkaXtmb9CjcD
0PvDQPSxsGfCLNvC85ynDIPCv+jgWLS9ioyqfAWVu4UGmehlKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF4OZEmFrtxZYO2Tfu6bi5H0UvIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3
OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvNTkwODI2MzAtYzBmMi0z
MjQ3LTk0ODctNjAzYzRkMGEzYTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl
NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4
OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj
NTE4ODlhMGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAoZZzijBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLxkwRwMi5SIclysSXIbZc8k6p38XI+zaSnAbCdPdF4zBZ7EFPfvyf
hZLAsEQn0dY5Uj7IV0J8fvzncb4r8H8mprX7yFVkaF3JnpRwNDn3EOFauw+vglA7
8VohKqHQjH/pkFNIskASdv0WmMJJBhWKQcIrYmuq4vH4cXflf7IgM9xKrNalERIh
+vtp7Hy+mDYrjCKOGR5Eu1ApVr+9vTHv6eOfvDVnluko2oN5l+p0VZIyqi6oe1ov
r6gZ25hGO6bKi9Aq6UAoGVvnBXE9bU/a25cnNg1RwOUwkT/Cp1eUhBrlomwLVxPE
iaSzheo6oO7ViROtj7lMGkn9dlsncA4H
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:08:24 2026 by rpki-client