Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/d44832f3-28fb-3d76-8916-fd74fde6494c.roa
File:                     d44832f3-28fb-3d76-8916-fd74fde6494c.roa (raw, json)
Hash identifier:          DkigkopzbA0XB1kfPBWTdAh6VbVoT8UPwdRfYvO+EE4=
Subject key identifier:   64:63:4E:82:3D:83:E1:D1:F4:E8:27:3D:66:C8:26:7A:70:32:B1:AD
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584B1F01663893C10D1B8D7680C0
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/d44832f3-28fb-3d76-8916-fd74fde6494c.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        155.46.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:66:38:93:c1:0d:1b:8d:76:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=4f808555-7254-4f89-8054-cb6bc7a64bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:4e:1d:42:ea:d6:8c:d7:5e:20:0a:ec:60:
                    8a:60:40:2f:50:81:7e:bf:61:19:ff:95:f5:99:6a:
                    3e:47:93:d2:82:fb:ec:53:c0:86:b8:ca:86:80:b3:
                    2c:5b:89:12:66:36:63:3c:d5:a8:95:0b:39:f7:f1:
                    87:26:a5:68:cc:d8:71:ca:b1:e2:ed:27:88:b2:6b:
                    5a:8e:8c:10:19:15:c8:c4:3b:1a:f1:f1:32:08:ac:
                    31:16:e3:a3:65:d0:97:cb:94:6b:24:a3:f2:61:24:
                    91:86:93:01:78:f2:75:eb:07:4b:16:2b:3b:17:3d:
                    fd:ab:16:3b:c3:ff:f4:0a:90:a4:fb:de:fc:40:bc:
                    79:a3:5f:c5:73:69:6e:5e:77:51:33:b7:0c:a7:9f:
                    00:27:99:23:09:a3:61:d2:f8:6b:b2:da:f7:8a:7d:
                    fe:92:ab:1e:d4:8b:76:75:40:2e:17:8b:c1:49:f6:
                    56:4f:b4:b1:b4:df:62:1f:3d:b1:c6:24:02:cd:a3:
                    3f:77:da:cd:63:13:fc:54:81:7d:56:1b:be:68:e9:
                    ef:c4:18:29:1d:2c:3b:bc:75:c4:3c:63:e7:55:8a:
                    dc:25:b2:23:1d:01:99:b0:74:35:40:b3:7a:85:69:
                    bf:a1:a8:e1:df:fd:e4:c1:6a:90:a4:04:fb:d8:ad:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:63:4E:82:3D:83:E1:D1:F4:E8:27:3D:66:C8:26:7A:70:32:B1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/d44832f3-28fb-3d76-8916-fd74fde6494c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:6f:05:e9:69:bf:15:9c:d3:97:11:a4:12:f2:ed:1a:e3:
         b0:99:cf:73:f3:00:d8:8b:e9:e9:ef:81:0b:59:24:91:5a:12:
         71:86:0f:4b:55:ab:68:44:ff:9e:fb:51:59:b9:1e:c8:ea:18:
         d4:f8:56:5a:f0:cf:c8:ec:1c:30:86:bf:21:39:1a:bf:1e:10:
         3a:cb:05:ac:7e:32:fc:75:a9:88:e3:79:b2:30:11:ea:b8:80:
         c9:e3:f6:ae:24:37:a2:f3:62:bf:5b:5b:da:6d:59:06:ce:82:
         12:e0:00:60:3b:fc:75:e6:f1:35:0d:94:0b:00:d5:27:48:40:
         e7:d2:eb:fa:44:5d:47:52:a0:23:aa:4d:eb:15:49:77:1a:9b:
         18:a7:51:e1:c4:ff:5c:45:1d:68:3e:3f:b7:9e:28:a1:38:8d:
         5b:5b:b7:16:4c:03:3c:ad:49:1d:b7:9e:eb:93:d4:a5:15:ae:
         11:27:f0:3c:d2:87:2a:42:7b:e9:a0:62:e3:30:7d:94:58:87:
         62:82:96:29:bb:d7:de:8c:b3:3f:68:91:6d:05:cf:8b:a2:a9:
         91:75:7f:0f:85:f9:2e:55:18:88:fd:bb:79:87:b7:59:d0:69:
         75:58:95:bd:39:06:07:be:08:2c:f5:29:bf:3e:1e:95:f7:b7:
         dd:a5:a2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:54 2025 by rpki-client