Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/00de91cd-adb3-315c-9f5b-e51ca8063004.roa
File:                     00de91cd-adb3-315c-9f5b-e51ca8063004.roa (raw, json)
Hash identifier:          Px7urcLPhpPdMblMv+0o6sygkDS3/6pRfO0Cd+sBLG4=
Subject key identifier:   13:68:2F:B9:B0:89:04:B8:5D:29:9E:BF:71:D4:DB:D3:1E:FF:9E:DD
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584A5765BEE9885DCCFDAAC05A80
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/00de91cd-adb3-315c-9f5b-e51ca8063004.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        155.46.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:be:e9:88:5d:cc:fd:aa:c0:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=9470f23b-c3fc-4653-a29b-de5acfbde6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:6f:33:d6:3e:0b:fb:3a:39:2b:53:54:f2:
                    16:3f:f1:30:c8:28:1d:26:5c:8a:1f:fe:80:4c:01:
                    61:06:0e:f2:dd:17:ca:98:c5:c0:be:d0:a0:77:13:
                    71:d3:51:8f:de:ce:91:d0:0a:03:6a:27:3e:99:d4:
                    14:f2:25:ec:ea:c9:e7:63:c4:71:c2:3f:57:1a:a1:
                    f3:74:68:8d:32:8d:cf:d9:8f:a1:bb:1d:50:03:07:
                    2e:f2:05:88:31:3d:d2:ad:bf:21:be:9f:23:a9:05:
                    a3:a6:31:27:b4:12:cf:20:6e:05:61:5c:e6:cc:df:
                    40:25:6f:d3:6d:fe:46:9b:f1:0f:53:dd:12:fb:0f:
                    05:c5:2e:d1:04:a0:9c:d8:f8:6e:a8:a8:b9:84:f0:
                    b1:f7:f2:51:36:30:b9:5a:98:9c:11:39:4e:c1:a0:
                    94:b7:cb:92:03:21:ec:56:a2:12:c6:c8:df:c1:ac:
                    63:6a:6f:5f:83:48:ec:e8:3a:02:5e:a8:ad:91:ef:
                    5c:0d:99:f9:33:7c:3e:64:cd:90:d4:58:2f:e6:e2:
                    9c:44:b5:db:fe:ca:6f:27:af:1c:b0:ee:28:0d:e0:
                    58:b9:83:5c:5d:99:a3:ca:15:27:87:7d:41:16:7f:
                    9a:87:4b:1d:eb:c8:6d:11:17:12:ca:c7:61:54:ae:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:2F:B9:B0:89:04:B8:5D:29:9E:BF:71:D4:DB:D3:1E:FF:9E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/00de91cd-adb3-315c-9f5b-e51ca8063004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:05:0e:c1:49:e2:98:42:8d:bf:31:27:a6:b4:6e:f5:14:0f:
         fd:9d:a3:3b:22:7a:a2:03:fc:a7:73:7c:1c:98:22:3d:2f:bd:
         b9:b7:5e:39:ec:19:e6:e3:fd:2f:47:bf:43:85:9b:50:d1:7c:
         33:cf:a4:2a:57:2e:86:44:24:4b:d2:11:98:a7:fd:76:80:49:
         c3:2b:a0:d7:61:b1:12:b1:ca:88:76:a4:73:9a:d1:dc:c5:3b:
         77:44:54:1d:25:ef:68:25:77:b8:17:2a:35:fa:3d:40:42:0e:
         39:99:28:56:8f:17:d8:f5:15:34:69:87:3c:a2:01:d4:f9:8e:
         28:a8:a8:56:3a:81:2d:11:c3:f4:24:70:53:36:9e:69:9c:76:
         5c:a1:64:f5:0c:5d:68:9d:58:ba:28:ee:ae:af:ea:66:3f:bb:
         19:2b:83:17:3e:ad:c4:85:24:9c:39:bc:30:14:d9:b8:be:aa:
         96:dd:08:0f:e3:9c:23:f0:52:b2:9f:7a:23:39:47:5c:d1:cc:
         c6:80:d3:ed:ff:8a:ce:30:03:56:9c:ff:3f:1e:99:79:69:27:
         a7:1c:c3:76:40:3b:2c:30:6b:c3:d8:ce:60:19:da:6a:24:95:
         3d:f9:f1:08:57:68:0a:24:f0:f1:8d:c4:d2:8c:d7:be:9d:2b:
         5e:5a:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:03:42 2025 by rpki-client