Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
File:                     4de99023-4420-3dea-891c-b23712defbf9.roa (raw, json)
Hash identifier:          1/sOBeH8a9m2MHo2rDidzHJFYErZWqcHOodP8i8aTi8=
Subject key identifier:   2E:1E:8F:C5:E9:BF:9B:06:0B:3F:30:00:B5:F1:A7:A3:AF:3D:CD:EE
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F432858495C2432272A3F9A2710C56FC0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     23154
IP address blocks:        148.164.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:32:27:2a:3f:9a:27:10:c5:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=e943319d-ff85-4593-b9a5-0473eb40feb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:04:a7:e6:50:c4:22:67:d7:8e:3a:fe:85:
                    b0:39:92:8d:a3:47:f0:de:0d:b4:e0:2d:33:29:2f:
                    de:f8:ba:1b:81:40:e9:e0:d9:b5:5f:da:cf:e8:86:
                    6b:d9:0b:a8:70:c8:51:bf:d7:7c:d8:d2:86:d2:d3:
                    43:df:2b:89:28:f0:d0:a2:3d:ae:b8:cc:c4:94:c0:
                    d9:89:44:db:ec:b1:e3:86:ea:cb:02:41:94:0f:c7:
                    8d:15:6f:e9:67:04:42:77:e0:3f:8b:55:b6:d2:f6:
                    cf:43:07:33:8d:2e:a1:81:c9:aa:da:78:fd:16:42:
                    f9:bb:99:6f:af:10:0a:12:ce:8c:ec:20:eb:b0:b8:
                    32:b2:b1:ed:ef:26:3a:7d:8e:c5:3d:48:10:a2:62:
                    b2:ce:26:bb:3f:74:1c:b4:3c:43:9a:d7:b0:d2:36:
                    2f:09:b5:31:eb:73:d8:12:a3:8d:b3:38:c6:76:63:
                    5f:6d:51:32:02:ba:7a:c0:0b:ce:c0:24:75:33:c6:
                    bc:c8:c9:c5:d3:28:3e:d6:47:ed:09:e7:f6:0c:5e:
                    ff:5a:9f:70:be:47:dc:fd:63:e5:e5:95:20:33:8f:
                    a3:70:7b:d3:bf:60:96:27:b4:6a:76:c1:41:ec:99:
                    55:a2:e6:e3:86:07:96:71:6c:2a:25:90:79:93:8e:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1E:8F:C5:E9:BF:9B:06:0B:3F:30:00:B5:F1:A7:A3:AF:3D:CD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:67:6b:7b:6d:5c:76:e9:55:67:73:36:69:0b:ef:6e:47:4a:
         dd:c5:8c:65:07:a5:89:e0:9c:da:3d:b8:ce:10:e4:27:08:71:
         7b:fd:a4:c5:39:a0:5e:97:b7:50:3a:ce:2e:a8:98:58:72:2f:
         5a:2b:95:63:ad:d2:74:f5:05:9a:f2:55:46:f3:c3:a2:ef:b3:
         e9:82:45:93:3a:f0:8f:0e:a0:16:07:71:25:95:ca:02:16:7a:
         a5:43:52:13:af:78:0a:bd:d6:e0:94:c3:03:ee:2d:7a:86:ef:
         96:d0:72:06:1a:01:99:d8:3a:8b:61:aa:93:06:da:21:65:60:
         a2:ca:27:42:00:43:1c:7e:84:43:39:76:fc:f4:d8:59:3f:1a:
         bc:bd:4d:fe:48:9f:24:5a:3f:a6:55:08:db:04:b4:47:43:1f:
         44:d0:be:b7:a4:e7:c9:40:fa:5c:09:b9:62:02:6c:ed:b9:ef:
         0b:5a:4f:f6:90:52:3f:20:0c:59:8a:70:e6:85:97:54:a0:dc:
         f1:f2:c6:91:88:1f:57:07:4e:f2:db:d2:fc:81:f5:6a:91:63:
         ff:47:89:62:09:db:cb:86:e4:a5:4d:70:6b:e6:67:fa:57:26:
         77:68:d5:77:05:c4:56:24:1c:cc:44:a4:d9:e9:2c:27:d9:d5:
         4c:b6:d1:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDInKj+aJxDFb8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ZTk0MzMxOWQtZmY4NS00NTkzLWI5YTUtMDQ3M2ViNDBmZWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qcEp+ZQxCJn1446/oWwOZKNo0fw3g204C0z
KS/e+LobgUDp4Nm1X9rP6IZr2QuocMhRv9d82NKG0tND3yuJKPDQoj2uuMzElMDZ
iUTb7LHjhurLAkGUD8eNFW/pZwRCd+A/i1W20vbPQwczjS6hgcmq2nj9FkL5u5lv
rxAKEs6M7CDrsLgysrHt7yY6fY7FPUgQomKyzia7P3QctDxDmtew0jYvCbUx63PY
EqONszjGdmNfbVEyArp6wAvOwCR1M8a8yMnF0yg+1kftCef2DF7/Wp9wvkfc/WPl
5ZUgM4+jcHvTv2CWJ7RqdsFB7JlVoubjhgeWcWwqJZB5k45W9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4ej8Xpv5sGCz8wALXxp6OvPc3uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvNGRlOTkwMjMtNDQyMC0z
ZGVhLTg5MWMtYjIzNzEyZGVmYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKScMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdna3ttXHbpVWdzNmkL725HSt3FjGUHpYngnNo9uM4Q5CcIcXv9pMU5
oF6Xt1A6zi6omFhyL1orlWOt0nT1BZryVUbzw6Lvs+mCRZM68I8OoBYHcSWVygIW
eqVDUhOveAq91uCUwwPuLXqG75bQcgYaAZnYOothqpMG2iFlYKLKJ0IAQxx+hEM5
dvz02Fk/Gry9Tf5InyRaP6ZVCNsEtEdDH0TQvrek58lA+lwJuWICbO257wtaT/aQ
Uj8gDFmKcOaFl1Sg3PHyxpGIH1cHTvLb0vyB9WqRY/9HiWIJ28uG5KVNcGvmZ/pX
Jndo1XcFxFYkHMxEpNnpLCfZ1Uy20Zk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:29 2025 by rpki-client