Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/5db89c3b-19e2-3ccc-975e-ca1d2bfd3463.roa
File:                     5db89c3b-19e2-3ccc-975e-ca1d2bfd3463.roa (raw, json)
Hash identifier:          zTCu9BdhbtKc7syFE2RVDWHTc0K0O6Y9sUtjXaPh9gQ=
Subject key identifier:   BD:99:BC:7C:5A:3D:B1:84:1F:C5:0C:07:89:DF:B6:FD:2A:63:C1:70
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584A3E45971763A23796E467E800
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/5db89c3b-19e2-3ccc-975e-ca1d2bfd3463.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        155.46.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:97:17:63:a2:37:96:e4:67:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=25160104-e850-4618-9825-fe235ed0f3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:fb:8e:95:1c:15:ff:6c:73:a6:68:2d:67:
                    d3:89:e2:d1:07:a5:3b:63:af:da:b0:54:f3:49:12:
                    09:ae:e2:f9:a6:17:9d:2d:c4:04:fc:47:b3:ea:3e:
                    97:2d:2e:26:0a:07:8a:a7:52:d4:6b:a8:ba:a4:6d:
                    d8:cd:81:33:bd:f2:3b:c9:49:63:67:6e:1c:36:09:
                    a5:58:d1:db:f9:73:8a:a7:43:27:19:4d:d1:e7:d6:
                    31:c8:71:b0:9a:a9:fe:75:6a:d0:4e:f6:43:94:bd:
                    bb:7b:f2:ae:8e:3e:0b:e1:d4:80:38:27:8e:5c:d2:
                    1d:53:b0:10:b4:c2:a9:32:94:e1:6f:fe:d6:35:1f:
                    2a:06:5f:84:77:b9:32:95:b1:8f:fd:2d:26:89:ad:
                    43:ba:33:17:c0:9e:f7:2a:dc:56:70:83:3d:31:c5:
                    de:5f:ad:19:8d:5a:c2:75:6e:2a:70:a7:c0:a3:af:
                    89:97:97:ea:79:f3:56:d1:ce:86:15:85:fc:00:19:
                    6c:4d:b2:cd:bb:d8:20:fb:83:bb:eb:7e:0b:93:29:
                    d4:8c:32:eb:f7:5a:f9:82:4d:a1:5b:ed:6a:d8:1b:
                    5e:21:ba:9a:f5:4a:f4:ed:b6:5e:2a:01:64:44:bf:
                    9c:6f:6f:c9:17:cc:07:c8:8c:65:5b:84:b4:e1:18:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:99:BC:7C:5A:3D:B1:84:1F:C5:0C:07:89:DF:B6:FD:2A:63:C1:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/5db89c3b-19e2-3ccc-975e-ca1d2bfd3463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:05:40:9f:ed:1b:50:4e:99:7c:9d:76:dc:25:50:81:c7:14:
         6c:f8:78:d9:65:0f:f9:d1:1b:ab:4e:e6:23:04:c5:1a:94:bc:
         51:db:64:5a:63:d8:bc:e1:fd:61:bb:04:2c:d2:dd:d2:51:44:
         a0:e6:1d:03:6a:99:6d:c8:24:3d:4b:0a:61:6e:8b:a3:49:67:
         b6:f0:77:c1:d8:13:ce:46:49:d0:e2:93:00:0d:e9:a2:d6:b3:
         2c:75:67:0b:8b:7d:5a:35:12:bc:05:c3:14:ab:24:02:38:23:
         7c:f9:b8:e0:3f:5f:2c:36:7e:10:23:24:0e:66:89:8f:d7:c3:
         f3:31:43:84:7b:5b:ce:55:f2:47:02:46:c6:0f:e6:7e:3e:05:
         04:2b:9a:78:ba:44:69:0d:6f:85:f7:e8:3e:94:05:21:19:93:
         af:c6:af:bc:aa:d1:bc:36:8a:e1:eb:9a:bf:1e:8e:e0:ca:55:
         ea:99:aa:1f:5f:6c:d4:11:74:2d:03:52:3d:c7:1d:ef:b8:4b:
         20:f6:c4:30:53:1b:04:e0:d1:d6:c3:28:10:c2:20:b7:92:8e:
         10:a2:d9:1c:60:a0:a1:ad:54:d1:f8:54:cc:66:5f:0f:cf:f3:
         62:d8:44:45:a8:b6:0f:4e:10:32:43:40:63:3c:22:e3:22:83:
         ac:a3:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:44:24 2025 by rpki-client