Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/a7ca72ad-9a1a-35f4-b4f4-9caabb7e32e1.roa
File:                     a7ca72ad-9a1a-35f4-b4f4-9caabb7e32e1.roa (raw, json)
Hash identifier:          ej6q3z0aJq+0tf5NiK6RP/G5haJ2Lis6RvtlDHPOC7E=
Subject key identifier:   5B:A0:09:E9:40:F3:6F:38:30:68:AE:D7:3C:B4:5B:8F:18:5B:D5:5B
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F4328584AA85BA5EE802B8AE12A037480
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/a7ca72ad-9a1a-35f4-b4f4-9caabb7e32e1.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        155.46.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a5:ee:80:2b:8a:e1:2a:03:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=a6c3ce58-3383-4306-8948-eaba590ede6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:a6:04:bc:b4:1e:4e:b9:b2:e3:09:4f:e7:
                    3b:31:a7:b3:f6:6f:5c:1b:d7:1f:9f:da:43:b1:11:
                    1d:51:9f:56:d3:aa:f9:21:9b:cd:a3:7f:83:f7:96:
                    a6:11:f3:ac:ea:5e:93:c5:34:2d:bb:e5:39:da:6d:
                    b1:6c:89:4a:f1:74:e9:df:ed:92:03:6d:94:38:cc:
                    89:8f:23:74:ce:72:7a:8f:88:22:b2:7d:60:33:9c:
                    c0:36:d0:39:26:00:e4:be:8b:3e:53:92:df:0b:a4:
                    0d:d0:07:88:bc:7a:af:12:5e:88:2d:19:49:01:2d:
                    b0:43:d2:3c:cc:21:1a:96:6b:d0:e2:06:69:61:97:
                    69:a7:fb:08:81:cc:6c:f3:35:bb:5d:99:93:8b:b6:
                    98:1e:51:1b:dc:44:71:5c:0e:eb:70:fb:47:9e:33:
                    6f:61:00:18:2e:da:c4:bc:30:84:08:43:06:b3:79:
                    36:e7:97:30:f9:70:88:ca:80:b6:22:f6:72:17:42:
                    8b:6a:2a:af:0c:c0:b4:41:42:51:d4:99:c0:5d:09:
                    a2:5f:95:63:a2:20:cc:58:31:96:88:63:3a:52:8e:
                    c3:17:54:0a:3c:14:5f:3e:d4:e7:a1:bb:d3:53:b5:
                    6a:4e:6e:65:a3:99:1a:cf:dd:09:a5:7b:1d:49:3a:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:09:E9:40:F3:6F:38:30:68:AE:D7:3C:B4:5B:8F:18:5B:D5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/a7ca72ad-9a1a-35f4-b4f4-9caabb7e32e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:85:5f:8c:3b:fb:bd:b5:84:97:eb:f5:d5:81:1e:f0:84:b2:
         69:7e:0f:cc:a7:5f:94:58:14:35:31:f4:57:00:cb:cb:5f:f6:
         03:70:de:e8:0c:df:e4:a0:1e:80:33:d7:92:cd:8f:c0:17:9b:
         95:bc:f9:c1:1a:5a:1e:b3:48:22:23:21:fe:9f:0d:7b:b3:5a:
         27:54:7e:51:77:f1:16:d4:c0:62:6c:c3:47:2f:d9:9d:f6:4d:
         0e:a7:70:ab:a3:6b:9f:08:eb:a7:ba:b7:22:4f:7b:99:8c:1d:
         1f:d8:8d:50:80:38:17:0c:7a:5d:41:00:82:a0:58:09:d3:f9:
         64:7a:bb:c3:0e:d8:b7:aa:bc:c0:3e:e4:b8:99:68:d9:c5:42:
         3b:7c:fa:3e:72:3b:67:06:36:37:b3:67:16:2e:8c:5c:0f:19:
         5f:1b:d7:dc:fd:09:e7:a5:66:8e:d2:27:44:b9:d7:a7:b9:cb:
         d1:82:1e:64:9a:87:5a:b5:ac:be:f4:b6:45:b1:42:b3:eb:01:
         cd:b4:0c:a8:10:a0:c3:90:3a:71:13:3b:22:30:7b:a5:b6:55:
         57:69:c3:44:da:8a:66:75:e2:21:d0:49:cf:27:53:72:70:ae:
         35:b5:eb:61:5d:27:cf:2b:ad:3d:75:d7:6d:3b:a7:c5:7d:ec:
         00:e5:3f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:25 2025 by rpki-client