Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/59082630-c0f2-3247-9487-603c4d0a3a7b.roa
File:                     59082630-c0f2-3247-9487-603c4d0a3a7b.roa (raw, json)
Hash identifier:          zThmAJfvPuOZufx6mFLrk4FC6ssMzy3MVEfkke9MlHg=
Subject key identifier:   CF:71:44:FC:E2:02:50:06:65:2D:53:D6:1A:C5:EB:01:1C:FE:0F:C8
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584EA7913E10E048E89D3E1182C8
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/59082630-c0f2-3247-9487-603c4d0a3a7b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22125
IP address blocks:        161.150.115.138/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:3e:10:e0:48:e8:9d:3e:11:82:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b24de579-5989-4ed1-9d68-61a4263644fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:2b:64:f1:98:f7:22:be:9e:54:41:e4:cb:
                    e6:5c:87:bc:ec:d5:a6:0d:72:1c:c5:3c:6a:c8:dc:
                    26:51:f6:2e:49:48:90:c4:77:aa:18:81:71:9f:08:
                    35:e8:47:14:92:a3:89:b7:1a:02:a9:82:fb:e3:08:
                    30:30:2f:c5:e5:c4:d2:1d:2a:fb:07:e4:84:22:2d:
                    4f:76:ee:0d:6a:e1:5c:1c:b3:f4:52:af:b7:31:00:
                    88:5f:ae:7e:68:15:d5:6f:3a:af:1c:92:65:b7:73:
                    51:ce:6e:9f:1c:0b:79:0a:e2:1c:de:04:78:42:90:
                    ed:be:52:56:47:23:ca:58:e5:78:d2:55:ad:cd:66:
                    6b:9e:d0:f0:a3:23:33:1c:a4:27:7f:e5:43:17:34:
                    58:50:b4:cd:f0:16:ae:fd:a1:b9:86:e0:3b:98:cd:
                    74:a8:a9:74:bc:c0:1c:78:ba:2d:35:4e:e9:6d:0e:
                    96:06:84:05:7b:43:80:b8:99:ce:d3:88:5f:1a:0e:
                    62:c1:77:71:ee:51:42:2c:e5:35:a3:ff:17:0f:d3:
                    30:0d:84:7b:d0:f4:a7:1b:a7:b3:ba:b9:de:0b:b7:
                    0a:ad:96:c5:64:13:1a:4d:e5:bd:d6:44:06:14:32:
                    e0:95:22:24:95:92:26:a8:4a:2b:3e:0c:d6:bf:71:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:44:FC:E2:02:50:06:65:2D:53:D6:1A:C5:EB:01:1C:FE:0F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/59082630-c0f2-3247-9487-603c4d0a3a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.115.138/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:65:7b:89:e8:9d:02:1e:75:30:ba:e9:03:a0:5b:6c:4a:
         cd:25:4c:b9:cf:65:c1:f5:02:1e:03:de:76:a7:1e:4b:18:c2:
         95:6b:7b:da:bd:b4:db:74:de:ab:33:ee:df:b9:d7:96:ed:09:
         eb:49:ba:4e:8a:0c:eb:64:d3:2f:07:4f:4b:b8:d7:66:89:c0:
         eb:30:cc:17:60:82:d3:d4:ca:94:9f:23:86:9a:af:5b:31:0e:
         b2:f8:fb:38:82:34:5a:a0:ae:6d:b3:e4:11:8d:4d:73:30:58:
         3b:a5:f4:7d:6d:ae:9f:58:7c:81:49:ad:38:61:4e:d2:fc:ae:
         a1:b4:f1:7a:14:84:e1:2f:bf:7e:34:20:74:b7:f2:1a:85:a3:
         e4:78:17:67:b4:99:44:31:c5:41:ed:90:03:30:f1:29:ca:4b:
         40:f0:d8:e2:ec:85:ea:d7:ad:58:7d:9c:d2:d1:6e:26:b0:b8:
         59:3b:f1:3c:ad:d6:d3:c4:c8:ce:8e:81:dc:e6:05:ec:f9:d1:
         1d:48:0b:4b:13:02:4c:47:5f:39:1d:88:bf:97:39:4f:d5:bc:
         c1:bd:f1:eb:4b:55:d3:3a:73:ad:19:4b:d7:3c:1c:0c:78:86:
         10:ef:a7:b2:63:43:27:97:0e:4d:7c:f3:05:22:e2:d2:f9:5e:
         f1:c2:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 17:11:52 2026 by rpki-client