Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/00de91cd-adb3-315c-9f5b-e51ca8063004.roa
File:                     00de91cd-adb3-315c-9f5b-e51ca8063004.roa (raw, json)
Hash identifier:          6+qPekOYpp1kNB0ltH1XWgx+LSx6TfYfKbsqbQasgqU=
Subject key identifier:   C5:80:3A:98:77:71:BC:3F:7D:1E:88:A0:3C:B6:6E:10:DB:F9:0A:D8
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584B38218C42CD831FE7C7FD7880
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/00de91cd-adb3-315c-9f5b-e51ca8063004.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        155.46.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:8c:42:cd:83:1f:e7:c7:fd:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=9cb199cf-c9af-4df9-9651-b323e7852f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:ca:04:27:e2:b9:44:e7:17:e1:f0:ef:6e:
                    1f:be:d1:8a:6d:ad:8f:e8:2c:d6:cb:c0:35:bd:56:
                    b4:33:aa:32:9a:2f:1b:7a:b6:77:bb:17:1a:d0:98:
                    d9:5d:46:12:0a:47:4b:da:78:c4:90:62:14:93:14:
                    7b:96:d4:27:18:58:2c:2d:40:7f:5a:cf:50:13:ee:
                    25:97:e5:2b:0b:4c:42:00:99:b8:b2:c8:96:bf:13:
                    ab:1c:46:3f:e1:56:d9:cc:d2:17:22:fe:55:ec:22:
                    42:af:8e:15:cc:bc:63:9d:84:9b:98:f0:4a:a1:d7:
                    db:76:66:02:fa:21:16:12:48:6e:ab:26:93:58:e1:
                    b9:e0:c9:21:57:be:b2:4d:39:63:b3:f5:47:fd:2b:
                    b6:bd:e8:e4:5d:40:7c:36:81:79:22:54:e3:bb:5c:
                    e5:44:f8:88:f8:05:5f:57:0b:80:a7:c9:83:34:1b:
                    55:b3:4b:86:95:4b:da:07:a4:81:3f:b3:b1:d9:53:
                    4d:9f:1f:23:d4:9f:e4:d2:c5:c3:7d:0a:35:6c:79:
                    dc:34:67:74:03:2a:24:6f:d4:b5:9e:7d:72:c6:9c:
                    d1:d1:3b:71:fd:d9:d2:c4:1c:ca:b0:ea:fe:c5:81:
                    54:c5:16:c5:82:33:47:81:b9:04:0a:a9:af:41:87:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:80:3A:98:77:71:BC:3F:7D:1E:88:A0:3C:B6:6E:10:DB:F9:0A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/00de91cd-adb3-315c-9f5b-e51ca8063004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:11:a6:a0:d3:81:5d:eb:ab:15:f3:f0:2d:0f:99:11:75:
         90:32:34:e2:51:6b:01:e0:ee:46:92:5c:2b:15:3f:ff:4c:19:
         31:cb:d5:7a:6e:88:56:e2:41:c6:5a:a6:41:43:05:ea:8d:7e:
         1e:69:8e:4d:63:f2:6e:02:bf:d7:ea:42:7d:46:82:9e:15:43:
         9f:8e:15:c3:ec:80:21:e9:6a:f6:04:c2:56:70:39:6a:46:4e:
         c6:5a:dc:6b:dd:8d:02:33:a2:60:1e:70:0d:0f:45:0f:3b:91:
         a3:7e:25:7d:6c:d8:e2:4d:72:75:c2:3d:de:9b:db:ee:ab:93:
         b2:96:9a:e5:fb:7f:00:67:85:0a:2f:34:a8:e2:93:a8:71:dd:
         31:72:e4:29:bf:86:8f:bf:e8:f0:d4:2d:48:62:4b:44:80:0f:
         ad:ca:38:2d:1a:ee:f8:a1:7b:91:aa:f9:66:52:1c:0f:b8:51:
         8b:41:8b:95:8b:05:61:1b:57:9f:bc:e0:cf:86:88:30:86:ac:
         cd:74:46:e3:13:68:a6:ab:79:14:58:ec:5d:00:ab:43:bc:8e:
         8d:ee:64:b0:b4:df:63:df:d1:8c:88:6e:d3:ef:42:90:5c:cf:
         49:5c:43:71:01:f1:8f:5d:d4:8d:9d:c4:6d:db:7f:9b:89:9a:
         44:30:fc:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IYxCzYMf58f9eIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE2MTE2OGYtNTY0OS00ZmRhLWFjYzItZTY1ZjM3N2Qy
NTkyMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
OWNiMTk5Y2YtYzlhZi00ZGY5LTk2NTEtYjMyM2U3ODUyZjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqjKBCfiuUTnF+Hw724fvtGKba2P6CzWy8A1
vVa0M6oymi8berZ3uxca0JjZXUYSCkdL2njEkGIUkxR7ltQnGFgsLUB/Ws9QE+4l
l+UrC0xCAJm4ssiWvxOrHEY/4VbZzNIXIv5V7CJCr44VzLxjnYSbmPBKodfbdmYC
+iEWEkhuqyaTWOG54MkhV76yTTljs/VH/Su2vejkXUB8NoF5IlTju1zlRPiI+AVf
VwuAp8mDNBtVs0uGlUvaB6SBP7Ox2VNNnx8j1J/k0sXDfQo1bHncNGd0Ayokb9S1
nn1yxpzR0Ttx/dnSxBzKsOr+xYFUxRbFgjNHgbkECqmvQYc0BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWAOph3cbw/fR6IoDy2bhDb+QrYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYx
MTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3ZDI1OTIvMDBkZTkxY2QtYWRiMy0z
MTVjLTlmNWItZTUxY2E4MDYzMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGE2MTE2OGYtNTY0OS00ZmRhLWFj
YzItZTY1ZjM3N2QyNTkyL2RhNjExNjhmLTU2NDktNGZkYS1hY2MyLWU2NWYzNzdk
MjU5Mi5jcmwwHwYDVR0jBBgwFoAU4GOzDFMmOtVqA1p0jJMUFc8ADFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVm
Mzc3ZDI1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmy7UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/HEaag04Fd66sV8/AtD5kRdZAyNOJRawHg7kaSXCsVP/9MGTHL1Xpu
iFbiQcZapkFDBeqNfh5pjk1j8m4Cv9fqQn1Ggp4VQ5+OFcPsgCHpavYEwlZwOWpG
TsZa3GvdjQIzomAecA0PRQ87kaN+JX1s2OJNcnXCPd6b2+6rk7KWmuX7fwBnhQov
NKjik6hx3TFy5Cm/ho+/6PDULUhiS0SAD63KOC0a7vihe5Gq+WZSHA+4UYtBi5WL
BWEbV5+84M+GiDCGrM10RuMTaKareRRY7F0Aq0O8jo3uZLC032Pf0YyIbtPvQpBc
z0lcQ3EB8Y9d1I2dxG3bf5uJmkQw/C8=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:16:58 2025 by rpki-client