Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa
File:                     57903d73-d89f-3216-a0f3-52cec44646dd.roa (raw, json)
Hash identifier:          S4y09D46RyavoMPc1JwZyl2bo3iAY8m3gQvrdcZ8Juk=
Subject key identifier:   13:39:7C:47:04:22:21:10:AE:86:46:D7:26:47:98:56:08:A1:73:B1
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584B3DB70104D5CE068B14770280
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        155.46.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:01:04:d5:ce:06:8b:14:77:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=32cff0e0-c3ed-4cbb-9d01-d72fd804cd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:c3:8c:66:65:3b:8a:46:35:35:f1:87:09:
                    1b:7e:52:9f:6a:ac:d1:df:57:67:dd:5c:85:29:f3:
                    d2:33:40:f1:ec:6c:46:1d:86:0b:13:d0:db:18:43:
                    8e:ff:32:69:62:9a:20:88:58:0d:9b:cb:41:0a:31:
                    16:c5:fa:8e:24:da:43:96:38:b5:a1:4f:de:3e:f7:
                    33:dc:7d:c4:94:f7:27:c6:6d:5c:f1:bc:56:e1:39:
                    f7:ed:42:76:15:33:8d:c3:53:c6:7e:aa:04:aa:78:
                    52:cd:4a:9d:d0:f5:a9:f4:67:49:05:42:32:df:c4:
                    6f:2a:a5:b4:b8:1a:3c:26:1d:ca:60:f2:6c:90:b0:
                    fe:0f:60:a4:7a:a6:17:e0:5c:57:3d:39:d4:34:3f:
                    3d:96:26:77:27:b7:fd:81:c4:ac:03:f8:b5:f5:3c:
                    50:16:8d:3f:45:ee:4e:3b:dc:ee:89:c2:91:f6:40:
                    47:a0:01:07:ec:8a:07:91:e1:b6:57:11:06:18:b8:
                    8d:6b:32:b6:67:b5:fa:8c:3b:7f:8c:1b:34:ee:b3:
                    a3:dc:00:90:8c:ce:47:59:63:3c:18:3c:1b:2c:8a:
                    d9:19:c9:da:cd:33:f4:c1:51:17:d3:28:d4:76:d0:
                    41:c7:f3:dd:30:9f:c1:2b:a9:15:63:27:17:f7:d8:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:39:7C:47:04:22:21:10:AE:86:46:D7:26:47:98:56:08:A1:73:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:45:72:f0:ee:29:bc:b3:fb:48:64:0b:46:a0:88:97:a3:
         6b:a2:9a:ce:3d:0b:b8:d3:4c:57:b3:67:0c:1d:f9:c8:a9:5a:
         a6:e2:1c:06:9a:88:60:44:5e:bf:13:fb:8a:74:45:b9:c1:ba:
         f9:f6:e1:a7:75:5a:bb:aa:15:7f:03:16:f9:d3:33:0e:4e:19:
         b5:86:78:3d:e7:5a:34:58:9a:92:24:25:d8:f2:dc:b6:f4:bd:
         ab:8e:3e:c9:c5:3a:aa:48:29:52:1f:bb:f6:10:bb:cb:68:f8:
         2a:d8:fe:18:7b:fc:c8:a1:34:c0:49:f9:e5:5f:ea:46:fc:89:
         f0:c9:f1:92:83:9b:98:ce:6b:b7:aa:73:4b:c5:f6:9e:1f:ee:
         48:ff:4d:5c:81:86:f1:d2:c1:39:a4:62:74:cb:2a:b3:bf:33:
         05:91:81:76:3e:9d:c5:d4:d4:a5:59:32:a4:e9:cd:e5:ac:28:
         84:54:d9:c6:20:be:70:66:cd:ae:88:1b:63:35:6e:7b:b7:18:
         b5:b4:c2:16:33:16:58:f9:30:63:f5:5d:34:ac:d5:e7:5e:a9:
         00:f6:8f:e7:81:96:f8:1d:54:4c:14:11:de:5e:f0:19:d6:42:
         9b:35:b9:90:70:6a:83:07:38:09:ce:8d:85:c6:9a:f6:f8:9f:
         e0:24:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:25:28 2025 by rpki-client