Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/90edb8fc-0166-3751-bb74-615eef1d1bb9.roa
File:                     90edb8fc-0166-3751-bb74-615eef1d1bb9.roa (raw, json)
Hash identifier:          YDd0Ip5UA0l7I26xB9Svy3MmZ0Uyur7RCIi8x2+BsUg=
Subject key identifier:   EE:35:41:55:4E:59:63:D0:75:21:AD:22:D5:F5:00:DF:CD:17:63:48
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584F4277F687400ECFBF3C15FD00
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/90edb8fc-0166-3751-bb74-615eef1d1bb9.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        155.46.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:f6:87:40:0e:cf:bf:3c:15:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=b539bf1d-15ae-4ffc-9a5b-e46eb5eaa974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:c6:75:da:d8:60:3a:1f:b8:7d:56:c3:ff:
                    49:29:4b:aa:d0:85:97:b5:7e:72:61:12:df:20:2e:
                    34:88:e0:a9:37:7a:07:16:8a:05:d9:0a:bd:d7:a9:
                    f9:98:d6:29:3f:d2:47:78:f9:ac:a9:20:ed:e0:2a:
                    ae:f2:9b:14:23:9d:b8:c8:86:b1:7c:f7:69:51:d3:
                    31:f2:44:2b:c9:c7:fc:9a:2c:a3:64:0d:8b:34:a3:
                    81:08:dd:9c:30:23:22:8d:66:d5:d6:a6:87:3c:fd:
                    9d:8a:40:f5:f8:cc:dc:83:77:e0:18:20:54:ca:68:
                    66:8c:10:0e:12:46:4a:66:6d:7f:a9:a6:86:17:bf:
                    9f:4d:51:4a:2c:20:f2:3e:a5:fd:da:a3:c4:a0:e2:
                    19:78:30:9d:9b:ff:71:75:52:e1:2e:ea:3d:88:d7:
                    13:96:05:80:3b:ca:f6:fd:1b:3f:d7:6a:23:72:07:
                    5f:1d:73:4e:3e:7e:39:b0:a2:1f:e1:6f:27:1e:c9:
                    e3:0f:73:af:40:b6:15:cf:66:a2:77:ff:d5:2e:7a:
                    9a:74:e0:cb:e0:6b:73:59:7a:b5:d7:da:aa:26:ca:
                    e4:5d:c4:bf:78:f0:e2:bf:e3:d0:b2:93:5b:c4:0f:
                    39:fb:99:68:90:c4:f8:d8:87:43:02:d3:d9:da:b2:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:41:55:4E:59:63:D0:75:21:AD:22:D5:F5:00:DF:CD:17:63:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/90edb8fc-0166-3751-bb74-615eef1d1bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:21:c0:7a:ae:81:a4:68:c4:05:5d:fb:a1:19:91:93:cb:
         7b:4d:55:da:55:12:71:36:ca:cd:d6:b8:6e:a0:28:ed:ff:c5:
         6c:6f:97:4d:07:47:31:20:c2:71:fc:8c:11:5c:1e:b4:ef:95:
         b6:0b:97:6f:11:27:da:48:6c:df:2e:ac:64:f9:a7:34:b0:eb:
         03:73:06:5f:32:8e:65:19:d5:10:c8:d6:18:8e:83:0b:82:15:
         00:84:32:4b:ab:fa:6b:94:45:0c:8c:e8:d6:51:01:31:07:5e:
         c3:ac:c9:9c:d3:d6:f3:e3:4a:40:b8:3f:0a:27:2c:31:3c:8c:
         a6:ea:04:2e:02:00:18:b6:a6:04:46:ff:cc:1f:24:78:dd:70:
         bf:8c:4b:b6:29:7c:e9:31:ff:ac:cc:3e:e7:3b:35:07:c4:67:
         f0:ed:e3:14:4c:41:7f:eb:43:67:64:22:e9:e5:46:77:d8:44:
         c1:c0:61:7b:bd:84:62:39:06:81:b5:c5:75:83:c4:14:29:84:
         33:dc:f9:9e:e9:4d:50:91:cf:af:40:d3:31:9a:c0:46:fd:56:
         b5:8a:64:6f:2a:9e:97:25:58:a8:e4:a0:44:05:bd:26:4b:cf:
         72:c7:18:6c:ba:71:c6:6c:2a:70:2d:ec:b5:fa:fc:61:05:10:
         19:bf:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:34:08 2026 by rpki-client