Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/63426ad7-1170-3ba5-a17d-2adad896e664.roa
File:                     63426ad7-1170-3ba5-a17d-2adad896e664.roa (raw, json)
Hash identifier:          zgegv57JD8C8qxGm3TRXAJXMPFnVc7SoZWxVWVEalWs=
Subject key identifier:   39:E0:70:43:51:22:D0:C5:56:0F:82:86:74:EC:AF:35:04:6A:A8:9E
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584F268D00EF4A34D3CD62CDEAC0
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/63426ad7-1170-3ba5-a17d-2adad896e664.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     10995
IP address blocks:        161.150.84.0/23 maxlen: 23
                          161.150.112.0/22 maxlen: 22
                          161.150.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:00:ef:4a:34:d3:cd:62:cd:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=0d86e95e-4b1f-47a9-983a-cffe20656c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:2b:9b:e4:dc:1c:4c:ac:ef:44:7d:dd:6d:
                    b1:e9:7d:58:ac:46:75:0f:1f:20:cc:ca:ee:ed:5f:
                    da:92:d4:ca:bb:65:c5:a5:53:ec:f2:55:2e:5f:92:
                    85:a5:c6:a2:37:22:5b:7b:63:8f:5b:15:75:be:2f:
                    d9:c7:54:77:ad:4e:41:c6:17:8b:e4:a7:83:4b:3c:
                    af:21:1a:01:46:b3:f2:ae:d4:d2:80:5c:29:da:03:
                    e0:22:77:a7:c7:50:87:9e:0f:ec:f8:9b:45:40:b3:
                    08:f7:29:72:ae:98:2f:94:83:c6:47:56:47:e6:5c:
                    64:5c:75:82:5e:4e:dd:f0:05:94:b1:c6:a1:bc:60:
                    cc:a7:f9:48:fe:e3:91:ac:48:64:e8:81:8e:c5:26:
                    38:e2:9e:44:a0:09:a6:4a:bd:68:e8:35:1f:17:52:
                    fe:96:51:e1:09:a1:82:7e:21:1a:23:a1:c2:8b:3f:
                    b0:e3:04:28:c3:78:84:bb:d2:a2:1b:ae:b3:f7:e2:
                    09:86:b9:8b:89:13:45:c4:59:ed:80:ab:84:4f:fe:
                    cb:d7:37:ce:0f:d2:b3:c8:5b:10:6e:7f:1c:55:33:
                    06:0e:41:ac:1c:37:59:10:83:15:a5:5a:83:4c:a7:
                    fa:be:44:12:98:d7:8f:f1:24:12:7b:38:fb:e6:3c:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E0:70:43:51:22:D0:C5:56:0F:82:86:74:EC:AF:35:04:6A:A8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/63426ad7-1170-3ba5-a17d-2adad896e664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.84.0/23
                  161.150.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:4c:f7:3f:5c:57:4d:ba:a7:85:8c:57:e3:ba:f5:52:ad:
         e6:b4:77:60:47:20:12:73:da:83:01:6e:40:51:91:80:ab:79:
         ca:90:31:50:e3:4b:30:85:be:fe:29:88:61:dc:46:78:87:7e:
         52:54:49:58:c9:36:61:3d:7a:26:b8:57:2f:1d:77:f3:63:e7:
         eb:4e:01:75:bf:83:f2:5a:0a:3e:7d:2d:d1:7d:65:56:09:30:
         21:aa:41:1b:21:b0:ba:b3:86:00:99:8d:1e:53:a8:5a:42:04:
         f4:eb:92:27:c6:c5:91:cc:d0:e5:e0:0a:ec:6d:3b:63:22:76:
         ec:d6:24:2d:5d:44:db:f0:12:0b:04:50:a4:cc:ad:d3:90:99:
         f3:f2:02:ff:d1:f7:1d:79:70:ed:9b:26:f4:47:29:af:fd:8d:
         39:10:61:fc:d1:5b:c0:f4:2f:af:6f:19:1c:82:04:67:40:7b:
         73:cb:3f:49:34:45:d5:c3:a9:23:82:1c:de:4b:05:46:f1:dd:
         b4:39:e9:91:8d:51:be:e5:64:6f:28:38:bb:2b:dd:74:e3:a8:
         ea:56:f4:2e:f5:f5:a3:1b:83:5a:00:04:aa:d3:c0:71:9c:f6:
         6d:bc:6b:1f:9e:1d:46:8e:22:89:8d:36:e4:92:5d:6b:7d:57:
         b3:e0:d9:f4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8mjQDvSjTTzWLN6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5
YTBmMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk
MGQ4NmU5NWUtNGIxZi00N2E5LTk4M2EtY2ZmZTIwNjU2Yzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4wrm+TcHEys70R93W2x6X1YrEZ1Dx8gzMru
7V/aktTKu2XFpVPs8lUuX5KFpcaiNyJbe2OPWxV1vi/Zx1R3rU5BxheL5KeDSzyv
IRoBRrPyrtTSgFwp2gPgInenx1CHng/s+JtFQLMI9ylyrpgvlIPGR1ZH5lxkXHWC
Xk7d8AWUscahvGDMp/lI/uORrEhk6IGOxSY44p5EoAmmSr1o6DUfF1L+llHhCaGC
fiEaI6HCiz+w4wQow3iEu9KiG66z9+IJhrmLiRNFxFntgKuET/7L1zfOD9KzyFsQ
bn8cVTMGDkGsHDdZEIMVpVqDTKf6vkQSmNeP8SQSezj75jxFeQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDngcENRItDFVg+ChnTsrzUEaqieMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3
OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvNjM0MjZhZDctMTE3MC0z
YmE1LWExN2QtMmFkYWQ4OTZlNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl
NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4
OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj
NTE4ODlhMGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoZZUAwQD
oZZwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEJ/TPc/XFdNuqeFjFfjuvVSrea0d2BHIBJz2oMBbkBRkYCr
ecqQMVDjSzCFvv4piGHcRniHflJUSVjJNmE9eia4Vy8dd/Nj5+tOAXW/g/JaCj59
LdF9ZVYJMCGqQRshsLqzhgCZjR5TqFpCBPTrkifGxZHM0OXgCuxtO2MiduzWJC1d
RNvwEgsEUKTMrdOQmfPyAv/R9x15cO2bJvRHKa/9jTkQYfzRW8D0L69vGRyCBGdA
e3PLP0k0RdXDqSOCHN5LBUbx3bQ56ZGNUb7lZG8oOLsr3XTjqOpW9C719aMbg1oA
BKrTwHGc9m28ax+eHUaOIomNNuSSXWt9V7Pg2fQ=
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:35:18 2026 by rpki-client