Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa
File:                     57903d73-d89f-3216-a0f3-52cec44646dd.roa (raw, json)
Hash identifier:          lQgBwiJ8rDBiEVHJfVGbAzeOh5JFFaja15cO9pTXDVo=
Subject key identifier:   63:2D:7B:D6:14:F9:E9:B7:60:E7:C7:89:E8:9D:D9:F2:EA:53:85:F3
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584CFDE7AD57F765E86D5585F880
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        155.46.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:ad:57:f7:65:e8:6d:55:85:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=2e43b482-d4e9-433f-8ab0-fff945b17667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:aa:39:56:e0:48:62:1f:58:34:1c:98:68:
                    34:7f:9c:02:1c:37:99:5f:9d:40:a2:ce:5a:dd:71:
                    66:51:cd:28:4f:59:04:63:80:3a:7e:89:dd:54:af:
                    eb:e4:3e:c5:ff:b8:79:4c:0c:b0:7f:de:13:2d:e8:
                    1b:22:a6:ab:7a:81:83:3d:74:9f:5a:7a:3e:26:9f:
                    ca:89:72:b1:56:31:c6:33:3a:2f:7e:1b:99:af:aa:
                    91:50:b5:eb:d0:f2:df:45:25:44:df:de:c0:05:f0:
                    5a:9a:73:39:f6:24:a8:bd:ae:ab:fc:ed:95:fd:59:
                    7c:d0:2c:04:4c:aa:92:63:6f:5c:72:1a:7e:48:57:
                    f4:81:dd:5c:16:00:89:b0:79:ab:eb:ab:13:5f:9a:
                    69:53:52:9e:ba:bc:28:37:c0:10:53:97:27:e7:5a:
                    5e:d7:75:14:ac:88:97:85:07:0e:f1:70:79:e9:d3:
                    12:53:13:c2:d1:46:67:69:3b:65:83:57:b8:a1:de:
                    9e:91:77:7f:37:50:80:8c:a4:6d:76:cf:06:ac:ed:
                    e6:ad:d4:21:f8:2d:0f:61:25:9d:e1:d7:3a:3f:07:
                    f9:90:91:68:5a:9c:84:b8:7c:df:53:94:85:39:88:
                    99:b9:0d:08:4f:18:b3:6d:8a:56:f8:8a:77:bd:37:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:7B:D6:14:F9:E9:B7:60:E7:C7:89:E8:9D:D9:F2:EA:53:85:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:b8:19:36:1e:47:38:c1:35:f9:45:78:66:27:83:02:f0:
         fe:c1:98:11:a5:00:48:c6:2a:54:1b:3b:19:50:6a:fa:05:61:
         75:73:d7:ca:c8:75:96:6d:e3:13:cb:ae:03:45:ed:c3:e9:39:
         4a:7e:f7:5d:73:28:52:84:a1:f6:20:fe:b4:8e:12:d1:f8:8a:
         04:a1:cd:f6:bd:3a:b7:b5:84:ae:3f:91:ae:14:7e:29:7a:b5:
         bb:7c:be:cb:31:92:83:07:c9:89:44:bb:d1:d8:9b:a2:fb:79:
         98:02:f8:a7:e7:ba:95:1a:69:a4:83:d6:29:05:92:49:86:ab:
         f3:c9:16:20:c7:56:aa:bd:53:e6:90:0e:44:1c:ba:07:2c:19:
         0c:7a:bc:05:4e:a9:b2:99:91:ca:c8:e2:ed:ac:d4:8c:73:18:
         47:bc:cf:29:7e:93:f8:60:c4:e9:49:c6:23:62:21:6a:c8:b5:
         d1:06:9a:78:66:39:7c:20:e8:a2:9b:ce:ef:68:90:b6:9a:96:
         48:70:12:4e:93:d9:e7:8e:65:f0:0e:cc:e0:4b:f4:5f:38:71:
         f3:fd:f1:d5:7a:6b:3c:60:dc:93:f4:a6:d5:59:e2:a2:c4:d4:
         96:e5:45:3e:87:bc:c2:dd:2e:e4:0a:12:87:8f:5d:c0:f4:6e:
         b9:64:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:48 2026 by rpki-client