Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/3d05ccf4-8ce1-3cd3-8385-af19050d38b6.roa
File:                     3d05ccf4-8ce1-3cd3-8385-af19050d38b6.roa (raw, json)
Hash identifier:          SBTckHu8h2csE7qbOarEkzC2wckM56gwJ5NCVnCrtrk=
Subject key identifier:   1B:65:ED:52:26:EF:D7:AA:66:72:8F:B5:26:BE:CA:B6:B6:C5:69:96
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584B1F0166988A9AA8F5D653EF00
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/3d05ccf4-8ce1-3cd3-8385-af19050d38b6.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        155.46.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:66:98:8a:9a:a8:f5:d6:53:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=baec6ba2-f699-4e60-b148-d0446e2fcdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:30:b2:db:37:f5:85:a6:e5:57:75:b4:c2:
                    8d:87:62:8d:9e:ee:29:0c:cf:39:eb:a7:e4:12:48:
                    0e:3c:ca:65:36:ec:c8:66:b8:d0:fb:b0:8c:8e:fb:
                    f8:ce:6b:bb:ba:ff:df:27:9f:99:f9:1f:e8:cb:9a:
                    1d:6c:91:5e:0c:34:77:2e:84:75:bd:ad:27:22:b4:
                    f1:2c:00:51:9e:e6:ee:43:3a:90:23:15:02:52:b9:
                    a0:a5:d6:e3:10:75:60:25:a8:0e:f1:6d:fa:29:ff:
                    56:6c:39:34:89:46:59:72:42:4a:ba:ad:09:70:02:
                    43:75:be:bc:c8:9b:cd:d6:14:4a:7f:66:6b:ce:ce:
                    d1:db:2d:5e:b4:1b:91:d9:8a:4e:ca:c7:98:ff:13:
                    c9:cc:d3:3a:56:be:51:fc:e4:a8:28:47:42:9a:74:
                    9c:2d:2a:33:49:1e:c5:65:ce:fb:a5:d7:b7:26:e8:
                    93:02:55:0a:7f:b2:8b:9e:2b:4c:00:c5:bf:c7:00:
                    c8:08:65:db:e8:fe:1c:e6:96:6e:c4:f8:6a:b3:e9:
                    1f:c0:3e:06:e3:b2:3f:d2:88:dd:68:62:36:10:24:
                    8c:09:a5:26:58:d2:d5:8f:72:00:f0:94:02:74:36:
                    6f:52:6b:10:9b:66:55:e8:18:af:14:87:53:db:25:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:65:ED:52:26:EF:D7:AA:66:72:8F:B5:26:BE:CA:B6:B6:C5:69:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/3d05ccf4-8ce1-3cd3-8385-af19050d38b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:91:bc:3b:61:8f:b2:e9:aa:94:cc:9c:8b:31:fa:91:52:20:
         d3:df:6e:e7:4d:86:85:3c:3b:12:9b:be:b7:0f:b4:b6:39:e2:
         0f:4c:99:5c:d4:48:46:67:56:96:1e:01:ac:8c:37:38:87:b6:
         a8:20:61:95:e8:e9:c2:1c:ad:da:ba:4a:bf:e0:6c:3c:80:d9:
         a0:72:17:4f:a9:6a:8b:2c:2e:51:a1:db:b7:56:61:d4:d4:60:
         a9:d8:66:30:a4:cb:62:4a:ab:51:22:07:17:be:e1:2d:ee:47:
         bb:63:53:6b:a9:4d:e6:fc:ad:62:9c:7f:1e:b1:b1:9e:58:19:
         68:af:1e:45:eb:2a:1f:88:6a:5a:7c:61:99:87:8c:c5:b5:54:
         13:2b:26:e1:f2:85:35:81:2d:cd:28:9d:d2:e8:28:07:56:2a:
         90:a8:e0:54:60:c8:6a:58:05:e6:5e:d0:83:19:85:e5:6a:29:
         2f:4a:73:67:71:ee:2a:e5:3c:1d:0c:e7:37:6a:68:3d:e9:72:
         77:ef:ad:b8:4e:e3:7a:b0:11:94:f1:89:87:c0:da:ad:c9:8b:
         3a:62:db:8d:fd:fe:9a:0a:f6:c8:72:a5:79:f0:b0:4a:a0:3b:
         dd:d1:f4:22:f5:71:b0:41:5e:c9:b0:33:8b:44:c4:a6:12:39:
         77:38:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:35 2025 by rpki-client