Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/483c1a0c-8a30-347b-ab10-60c0e891300f.roa
File:                     483c1a0c-8a30-347b-ab10-60c0e891300f.roa (raw, json)
Hash identifier:          VvFY1wMGrboGAvJMBmJUYuqjfxXb8aPBPHyXqbV8k/8=
Subject key identifier:   6A:BA:C0:C6:BA:D8:00:5B:A1:44:11:61:26:72:A1:A8:45:86:36:BE
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584F0AB73F34E60C3D52860A0E80
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/483c1a0c-8a30-347b-ab10-60c0e891300f.roa
Signing time:             Wed 02 Sep 2026 13:42:45 +0000
ROA not before:           Wed 02 Sep 2026 13:42:45 +0000
ROA not after:            Tue 01 Dec 2026 14:42:45 +0000
asID:                     23154
IP address blocks:        148.164.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:b7:3f:34:e6:0c:3d:52:86:0a:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Sep  2 13:42:45 2026 GMT
            Not After : Dec  1 14:42:45 2026 GMT
        Subject: CN=68060147-2e95-465d-8440-406838af5d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8e:f8:c9:92:a9:53:19:cf:fd:cf:78:3a:87:
                    eb:64:79:18:c7:91:1f:77:22:20:ef:58:c2:12:4f:
                    6b:73:32:92:32:83:0e:24:45:69:4d:98:38:36:85:
                    4f:1a:1f:80:7f:0d:89:8a:b1:05:75:f9:97:74:47:
                    58:b6:8a:b0:84:3b:19:03:f3:bd:7f:ad:9e:a5:7c:
                    06:b0:38:c2:81:48:3c:dc:59:7a:c5:9f:18:9c:80:
                    a6:c0:e1:51:5b:da:06:6a:0a:e0:c0:d2:68:1c:06:
                    82:f6:df:d2:17:01:72:4f:80:99:95:a7:80:9e:68:
                    b4:88:c1:75:1f:a0:90:9d:f5:8e:eb:61:a0:9e:cb:
                    2d:24:69:db:44:aa:13:eb:10:77:c9:42:8d:22:d2:
                    2d:a7:60:7f:64:2c:1c:08:ef:b3:e6:bd:7b:eb:a9:
                    0a:7e:90:12:04:7b:6e:87:42:0e:0c:1f:fe:8c:fa:
                    e4:29:e9:7c:d4:b4:e1:3a:54:c0:87:eb:1b:62:2d:
                    46:dc:a3:73:80:99:4c:e9:c9:1e:26:64:03:8c:3b:
                    a8:91:be:16:b5:d3:cc:44:42:6e:6f:c8:18:7b:2d:
                    f2:e0:28:ad:c0:46:d5:ac:a9:07:57:f6:ca:f4:35:
                    b9:6e:23:61:06:12:d5:3b:60:88:4d:7f:12:f7:4e:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BA:C0:C6:BA:D8:00:5B:A1:44:11:61:26:72:A1:A8:45:86:36:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/483c1a0c-8a30-347b-ab10-60c0e891300f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d1:e1:4f:30:1a:be:e6:9e:91:28:0c:35:88:4c:b6:81:6f:
         86:a8:00:e1:99:53:7f:6f:4b:ca:99:c1:f7:f5:c4:7e:65:fe:
         1a:82:ef:ba:f1:8a:7c:70:68:79:f6:48:2a:16:15:e4:c6:ed:
         82:98:7c:81:9b:46:ca:72:5e:ea:96:84:1b:60:83:60:2d:0f:
         54:23:5b:60:2e:98:8f:5e:89:6c:56:e7:2b:f6:98:9e:5a:83:
         23:81:d2:a7:40:74:78:ae:0b:19:9e:dd:56:79:b1:6b:da:ab:
         03:38:25:c9:1b:0c:47:a2:a6:46:06:c3:f8:a1:b2:81:fd:52:
         ea:00:cd:fa:1d:11:13:de:9b:a2:94:a0:16:78:6b:57:ef:7c:
         55:6d:fd:18:80:56:2b:c9:bc:4f:3e:ea:b5:16:51:3d:f9:ec:
         42:0b:65:68:42:d5:ff:1f:bc:9d:80:22:37:94:f5:86:41:da:
         aa:95:27:0a:29:ba:9c:9a:0f:61:d5:5d:ed:26:ac:39:a7:a6:
         11:99:88:d3:e3:e3:bd:e9:22:bc:26:27:2f:c0:81:d7:3c:d2:
         ce:62:f0:40:2a:7f:cb:7d:2d:46:9a:48:b2:19:5f:00:6e:ef:
         4d:d2:8e:63:33:39:6f:f6:85:f3:fc:a6:63:11:4b:58:6f:76:
         93:88:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:35:35 2026 by rpki-client