Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/120a7d60-f2a5-3c9a-9bdb-2e8e697256d7.roa
File:                     120a7d60-f2a5-3c9a-9bdb-2e8e697256d7.roa (raw, json)
Hash identifier:          2r7dFSjz8qBB+3fVb7ZkJEfSGCEH5IP8jhoQiSl5gt4=
Subject key identifier:   60:0B:CE:04:2C:C6:D0:CF:4D:1B:05:B8:20:04:40:C9:CA:49:54:BD
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584EA0152ADC0A7DE162158886C0
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/120a7d60-f2a5-3c9a-9bdb-2e8e697256d7.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        155.46.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:2a:dc:0a:7d:e1:62:15:88:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=2ae34dfd-0429-40c2-9579-ef2ac80f72ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:6a:46:0a:15:f7:b3:4b:f8:d1:3c:3a:33:
                    22:b9:5c:0d:d8:6e:93:62:d9:eb:d3:4b:1c:d4:3b:
                    31:e1:76:dd:d5:f8:e1:43:0e:6f:c8:57:27:8f:83:
                    60:55:05:bb:d7:03:e8:4c:3a:c3:81:eb:93:c7:c3:
                    af:3c:68:50:45:29:85:cf:ce:1d:f6:ca:56:bd:4c:
                    a4:e6:99:92:62:0b:cb:2e:71:13:e6:a9:c1:30:12:
                    0f:96:4f:29:77:aa:52:5b:68:37:39:57:13:d9:08:
                    2a:00:9d:b2:14:e1:8e:4a:c4:21:04:49:20:d7:1a:
                    c9:75:97:5e:b6:fe:58:19:09:61:57:29:e8:1c:17:
                    27:d1:ab:9c:cb:19:82:59:f8:45:24:cf:ed:6c:fd:
                    48:47:2c:a7:1a:46:60:08:eb:50:5e:c1:b5:6b:cb:
                    9e:9f:e4:ec:41:38:09:c9:26:b8:94:5b:29:4c:d9:
                    fe:3a:1d:22:1a:42:4f:34:dd:57:99:4d:4b:d8:71:
                    ce:d7:6a:9a:8d:81:99:cb:08:b5:cf:1c:7a:d8:41:
                    dd:c8:cc:ee:af:16:1a:55:58:d0:dd:fc:1c:38:83:
                    f0:92:ef:ad:14:ee:88:28:73:b9:3a:c6:26:0f:10:
                    c7:00:88:e3:f5:96:b7:80:b7:c5:ce:99:7c:c9:de:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0B:CE:04:2C:C6:D0:CF:4D:1B:05:B8:20:04:40:C9:CA:49:54:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/120a7d60-f2a5-3c9a-9bdb-2e8e697256d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:42:b9:b1:cb:ca:9b:ca:1c:77:81:0b:21:12:30:1e:bd:e0:
         63:06:63:3f:7b:1c:62:d9:c7:59:ca:e7:31:be:4a:4f:bc:d0:
         cd:31:b7:81:13:df:7d:ec:41:22:5d:3e:b6:ee:96:92:16:db:
         00:82:c5:d5:8e:99:09:ce:5b:50:2b:55:55:d4:dc:02:38:fb:
         df:79:93:62:46:8d:c1:9e:de:6b:fa:85:00:d1:53:4b:34:3c:
         ec:1b:90:55:5f:35:ff:d7:56:93:28:73:18:2f:5a:b1:0f:90:
         9b:23:ec:ca:22:c6:98:1a:11:a2:68:7c:09:ac:cd:99:81:6c:
         89:76:cc:89:9c:b0:33:ba:28:10:32:25:36:d3:2c:23:ca:55:
         6b:e1:3a:4b:ed:ba:27:d2:2a:e0:45:30:83:f4:85:36:ff:43:
         89:82:57:cc:c5:c0:0e:bc:0e:1a:75:87:ed:00:ad:e8:dd:62:
         64:e8:82:8c:9f:e3:ce:8c:a0:76:32:d0:18:9d:67:02:5a:de:
         e8:a7:cb:b6:86:da:8a:42:d8:3c:4d:58:7b:1d:e2:31:17:45:
         42:3d:70:63:a3:27:8e:67:f3:6d:2f:62:0e:d2:fe:fd:de:41:
         21:53:8d:b2:2a:29:65:29:79:f3:e5:2f:4e:02:81:66:1e:ed:
         da:10:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:55 2026 by rpki-client