Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa
File:                     677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa (raw, json)
Hash identifier:          RiVMKlKsWWSnFIuELN/0LrdDWX7DgZwww0kBvri79Ls=
Subject key identifier:   0F:33:20:01:39:1F:8F:13:68:B7:AF:50:50:CE:12:56:53:03:23:10
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584CC77735CA1F6682AB2857DF40
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     23154
IP address blocks:        148.164.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:35:ca:1f:66:82:ab:28:57:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=23568673-4ef4-4a4a-a9ea-74a31f1a8485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:b8:3b:41:5a:10:cf:ce:b5:d1:7f:58:c7:
                    09:5e:52:91:0e:33:e1:71:3f:92:9d:bc:59:b9:a6:
                    6c:0a:8f:f2:3b:ba:ba:46:0f:c2:80:e5:5f:77:3d:
                    90:8c:24:79:28:87:4c:c7:99:5e:fe:c1:17:80:e3:
                    f8:c6:c3:4e:f9:d1:5a:c0:69:60:e7:32:05:4a:b9:
                    39:77:34:f4:9a:4c:fc:4e:b8:48:ee:23:55:85:58:
                    bf:b3:22:1c:40:db:72:4d:82:36:b9:0c:2f:8b:af:
                    11:10:8b:63:71:40:17:d0:5e:8e:d8:d0:ee:02:2b:
                    74:57:71:ce:d3:cf:b4:53:95:cc:c8:3a:cf:2e:cf:
                    c7:a9:43:de:99:4d:f2:60:f6:0b:cb:6c:05:f7:1d:
                    86:83:f5:c8:95:c8:18:22:ac:87:c5:47:9f:f6:2d:
                    da:4f:3a:6e:dc:08:75:c4:79:4b:78:d7:6b:8f:84:
                    90:56:78:0f:b5:e1:cb:3e:c5:a0:73:05:29:71:ba:
                    fa:b0:a2:68:98:9d:63:3f:84:d3:0f:5c:40:1e:34:
                    77:bb:77:53:09:55:78:30:35:71:3b:0a:85:17:48:
                    24:c6:31:14:81:51:aa:f6:55:8e:14:eb:3c:8f:ec:
                    67:a9:d7:ff:96:6b:e3:89:b7:27:99:70:ef:9e:ff:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:33:20:01:39:1F:8F:13:68:B7:AF:50:50:CE:12:56:53:03:23:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:21:25:38:e2:ae:7c:35:95:28:9c:d5:01:14:f0:66:69:
         57:d1:31:4b:2e:cd:f6:a9:f6:e4:3f:d7:04:d1:3f:29:a5:64:
         71:5a:d6:c3:a2:c4:a4:31:80:b5:b8:55:34:d5:9d:a9:10:50:
         a8:5a:26:6b:9a:02:c5:21:59:ae:f6:fb:b6:dd:17:4d:50:93:
         c7:c1:f4:12:30:e2:f4:9b:be:0a:0a:fd:dd:09:e0:a4:de:f0:
         59:48:8f:e2:02:4a:9f:b2:bd:d1:dc:e3:91:72:2f:e7:f6:f3:
         b8:3f:29:1c:0b:a4:9d:dc:fd:5b:73:c0:73:8f:8e:14:51:76:
         27:0d:ac:00:66:90:55:fc:9e:82:e0:ca:1d:bb:1a:4a:c7:49:
         7a:d4:ce:51:b9:1d:c9:7c:07:fc:70:df:0e:59:f3:e8:5b:44:
         b8:6c:87:b8:ca:9f:f4:ce:6c:f1:9e:8a:be:94:cb:b6:53:d2:
         15:cc:54:5f:98:fd:1e:68:41:f2:4b:de:4b:50:95:e1:6a:a6:
         1d:42:78:df:e7:6c:47:bf:46:25:40:51:3f:5d:4f:4a:92:70:
         5a:d7:9f:e1:22:16:cb:83:ca:ac:24:a9:b5:64:f6:73:79:45:
         2e:de:5e:8e:08:19:63:1d:c6:93:a2:53:e8:cc:cd:38:31:c6:
         61:31:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:40:38 2026 by rpki-client