Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/610a732f-faa9-33d0-8be0-5000377a9c33.roa
File:                     610a732f-faa9-33d0-8be0-5000377a9c33.roa (raw, json)
Hash identifier:          IhRCyitWMeiwvj9FSYiWxiZKnc6yghVDIvyMFYP3mEQ=
Subject key identifier:   0B:87:32:FF:92:33:07:D1:C4:8B:67:25:1D:34:27:79:98:BF:8B:ED
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584F4F07ED25FD06AD5EC8DDA1C0
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/610a732f-faa9-33d0-8be0-5000377a9c33.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22125
IP address blocks:        161.150.86.0/24 maxlen: 24
                          161.150.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:ed:25:fd:06:ad:5e:c8:dd:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=174eee64-6edf-40d7-a57d-c0139fd29a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:22:64:20:a1:17:1d:82:fa:99:26:d7:f7:
                    db:bf:b5:bf:42:65:b4:42:fc:9b:40:3f:a7:df:41:
                    4f:9b:91:14:cd:13:26:0e:d7:bd:4b:dd:23:db:d8:
                    0d:26:85:5a:dd:b9:76:8d:8c:51:44:54:fe:b4:39:
                    7a:6d:f9:5f:7a:2d:59:80:25:4e:c0:e7:2d:11:44:
                    dc:be:d4:ec:d6:af:8c:d3:2f:6e:3b:f6:42:55:cc:
                    5b:cc:c9:8d:43:5b:9c:ca:8e:dd:1b:4e:a1:65:f1:
                    0f:68:80:24:e2:6f:a8:18:0f:93:7d:e3:96:c0:33:
                    d0:1b:dd:71:0d:4a:b0:ab:4d:2f:9d:f0:e9:3a:54:
                    18:0d:19:25:ad:b4:cc:1e:22:e9:25:51:ab:37:e1:
                    0f:71:b6:52:6b:a6:e3:e6:23:55:a9:ec:3c:b3:53:
                    96:c1:4c:0e:49:0c:54:fb:0a:8f:61:a0:1c:cd:05:
                    e0:c9:87:42:06:77:4c:5b:70:2b:1b:bf:cc:fa:21:
                    97:e9:6f:5c:9e:3c:65:9d:0d:9a:e5:01:59:db:4b:
                    b0:1a:24:ff:86:8c:06:c4:46:be:af:20:f2:2f:e1:
                    5e:1e:80:42:05:3e:82:2c:8d:3f:2d:9f:28:a7:93:
                    1e:d0:64:bd:c1:b2:63:eb:87:d6:5c:ed:d0:6d:2b:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:32:FF:92:33:07:D1:C4:8B:67:25:1D:34:27:79:98:BF:8B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/610a732f-faa9-33d0-8be0-5000377a9c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.86.0/24
                  161.150.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:50:6c:28:8d:de:d8:e2:57:74:db:07:87:a1:4c:e0:41:40:
         4e:d9:57:c9:95:40:b1:84:5a:b6:57:76:55:31:d1:39:ac:d5:
         0b:78:4a:e5:97:98:d8:03:68:48:fe:61:bd:17:ce:76:80:7c:
         d3:a0:6a:98:f0:93:88:9a:cf:18:5f:ef:8d:cc:a6:9a:f1:85:
         84:bd:bb:2d:18:15:0f:eb:0e:9c:38:5e:8f:ce:2e:29:c3:66:
         cd:45:72:fa:8b:24:80:83:0e:b5:e2:12:a2:39:af:d4:3a:8a:
         9f:6e:92:d0:06:20:82:98:0f:0f:74:0e:e8:9e:f7:a9:25:c4:
         1c:28:4d:4e:de:cf:40:4b:0e:7b:e7:4e:01:67:f7:7d:bd:d0:
         1c:ee:e7:90:a4:38:c0:fa:7e:36:1e:b7:c5:39:cf:f6:ad:08:
         c4:a2:02:a0:11:f5:a3:a0:8f:01:e6:8b:0b:a6:05:01:a8:6c:
         a2:9c:e2:e9:39:7d:87:7c:cc:5d:ff:b8:c9:47:72:cb:21:95:
         de:fd:5f:f7:7f:3d:6c:d7:d0:db:4a:46:e2:c4:6c:a4:2d:61:
         38:83:89:1b:f2:c8:b2:7c:cd:08:52:38:d5:8d:5e:98:b6:d5:
         5f:85:ea:17:8c:10:75:90:03:e6:24:af:e4:af:a7:18:ad:81:
         51:0d:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:12:28 2026 by rpki-client