Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/d5c0843d-a21b-3bb2-a0d1-7a73449c63a1.roa
File:                     d5c0843d-a21b-3bb2-a0d1-7a73449c63a1.roa (raw, json)
Hash identifier:          AOcHbPhAk/F+XQn+HCqU7j5kGcyntRJRfvlRDniP1zs=
Subject key identifier:   52:38:BF:9E:46:26:9A:C5:29:33:37:85:AA:5B:44:E9:AB:7A:42:B2
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584B3DB700F1DE6379BC3662AB00
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/d5c0843d-a21b-3bb2-a0d1-7a73449c63a1.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        155.46.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:00:f1:de:63:79:bc:36:62:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=5c783997-f92a-4242-a38d-68893450d74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ba:75:1f:9d:c2:dc:0d:f3:c4:3a:b0:12:91:
                    e5:59:d2:d1:b9:01:21:96:33:e3:08:f0:b7:58:1d:
                    09:35:32:cf:52:55:0d:b5:a3:8a:ed:2d:87:d8:dc:
                    1a:d5:1b:2b:41:ae:2b:1f:51:ac:04:11:3d:42:cb:
                    33:2f:39:92:bd:87:ab:64:7b:85:e8:52:80:f3:ce:
                    8e:98:fb:fc:3c:c2:f0:0d:f4:60:24:4d:16:42:7e:
                    f9:57:49:b9:91:ff:de:41:95:7b:c3:fc:f3:97:e1:
                    93:56:25:43:98:c1:b3:25:1a:05:e9:10:3c:72:5d:
                    e2:0c:d4:63:09:de:0b:e6:d6:96:ee:2f:fd:09:fd:
                    d2:d0:18:cf:e6:85:43:b7:9a:b5:48:f4:02:21:e6:
                    7c:05:b7:f0:be:64:72:cc:d4:1d:85:27:06:6b:77:
                    f9:2c:39:19:3c:68:07:b0:e4:e7:69:28:38:2b:e4:
                    1e:94:79:c8:22:58:f9:24:7a:b6:2c:c3:60:55:d2:
                    43:ee:73:76:27:78:55:7f:67:fa:d3:bf:c8:a5:e0:
                    69:e5:59:39:75:b6:8f:5c:fa:b5:bb:c3:05:c5:5d:
                    2e:26:39:96:46:41:a0:a4:1d:ed:45:53:14:c5:38:
                    70:1e:87:32:15:c8:6a:4a:83:b3:77:7f:c0:a7:de:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:BF:9E:46:26:9A:C5:29:33:37:85:AA:5B:44:E9:AB:7A:42:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/d5c0843d-a21b-3bb2-a0d1-7a73449c63a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:28:c4:96:80:b2:15:95:8e:63:e8:1e:85:4b:47:72:f4:b7:
         2b:da:1e:75:f1:39:4e:c3:cf:cc:51:57:d7:a8:c4:e8:88:95:
         43:56:ff:04:25:68:4a:d8:0d:eb:f8:5c:0c:b7:8c:71:f6:5d:
         86:87:32:d7:2b:e5:6a:65:60:0d:1e:40:f4:6e:d7:ae:17:76:
         f7:f3:95:9a:1e:f4:b7:f5:98:ce:0b:60:b3:5a:9d:19:e6:2f:
         53:7e:5d:36:15:34:67:8a:43:43:9f:f7:36:8f:65:4b:87:e0:
         8d:be:35:c4:4d:61:ba:f9:59:56:44:cb:15:ae:49:9c:52:06:
         83:81:5d:fc:db:f5:31:14:e5:8c:97:52:17:6c:cf:fb:1e:56:
         69:ec:81:fe:ec:92:37:5c:a7:d0:3f:b6:82:dc:a7:11:3d:b7:
         8b:db:85:9e:54:4c:f1:04:ed:e3:09:4a:a7:df:9f:ae:72:85:
         67:df:a2:54:b4:f2:05:21:54:42:00:e4:44:bf:a8:3d:d4:08:
         1f:93:c7:3f:ba:4f:0b:06:5c:49:3e:8a:d3:86:9e:95:86:e9:
         ef:ea:40:d2:d0:df:30:4c:c3:ac:93:ab:12:80:47:4e:db:b0:
         d3:b2:96:91:1e:ab:01:df:bd:87:61:cc:f8:cd:cc:b1:e3:44:
         2f:ea:ec:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:41:58 2025 by rpki-client