Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c1f7dc43-6c18-3746-be67-6b25c35eeda1.roa
File:                     c1f7dc43-6c18-3746-be67-6b25c35eeda1.roa (raw, json)
Hash identifier:          OVZ1uOpUwOxBgD/FwAS2IoEGhH5CmP86EA/A8bSsH1o=
Subject key identifier:   E9:2F:47:B9:B2:F0:51:E3:85:B5:A8:CA:D0:F8:61:E7:90:9B:20:A9
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584CC7773029C265E2FCD3A13B80
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c1f7dc43-6c18-3746-be67-6b25c35eeda1.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     23154
IP address blocks:        148.164.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:30:29:c2:65:e2:fc:d3:a1:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=7b6334ff-8fba-4043-943c-ff9dd09eead0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:15:b2:d6:7f:aa:69:5d:1d:f0:d1:24:27:
                    83:81:7f:31:29:2d:df:69:f6:f2:f3:0d:e3:8c:bf:
                    0f:89:49:00:6f:09:c2:cc:cc:35:b1:5e:78:d0:69:
                    65:f6:8e:1f:b0:df:89:98:5f:cb:24:6c:58:ad:1a:
                    1a:a3:35:ac:0a:c7:5e:82:5f:18:09:ad:07:80:3c:
                    40:2d:f2:60:4f:41:44:36:cd:fb:75:c1:ea:92:0d:
                    1c:02:cc:83:81:95:3d:16:a0:07:8b:f5:89:cf:46:
                    5d:7a:dc:49:6f:48:3c:93:6b:99:2d:46:03:1d:fe:
                    77:5b:0a:a0:d6:d9:2c:e5:59:30:3b:6b:73:67:db:
                    7b:15:2e:d1:77:19:3e:28:57:36:94:47:74:02:94:
                    fe:38:08:e1:ab:98:0f:6e:eb:0b:f9:42:93:e4:72:
                    c0:a1:85:74:f9:20:b4:ee:64:41:b7:88:e5:a3:53:
                    18:da:00:dd:a6:c0:23:cc:11:19:58:60:ac:b9:f7:
                    9d:ed:2b:81:11:43:f5:d0:6d:52:25:c1:57:4e:50:
                    60:bc:af:be:6d:c2:2f:11:dc:78:d7:d6:61:27:98:
                    22:4d:93:c8:07:7a:e4:b9:2a:09:a9:1a:b3:07:b4:
                    fd:1a:b8:a8:f3:f5:95:b1:b0:2b:c6:e9:8c:ed:07:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:47:B9:B2:F0:51:E3:85:B5:A8:CA:D0:F8:61:E7:90:9B:20:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c1f7dc43-6c18-3746-be67-6b25c35eeda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ec:63:e3:f8:a3:4a:82:a1:f0:5e:ac:84:ae:91:4b:b9:1d:
         85:b0:53:87:20:a5:2f:55:fa:5c:a7:61:75:c3:1e:96:7d:84:
         5b:cc:02:7f:ce:c0:37:c6:5b:6e:e1:a6:83:0f:1e:44:d3:03:
         32:a6:22:7b:13:53:a7:64:98:74:e1:a7:df:c4:c9:a8:27:3e:
         47:19:16:bc:e8:1d:0d:b0:92:6e:a5:26:53:d8:6c:61:96:74:
         60:38:95:25:7f:10:81:74:9a:20:de:46:2d:9d:e5:99:68:d3:
         63:72:20:11:db:9b:62:ac:cb:ec:e3:c1:12:0a:4f:b4:ba:41:
         77:0a:04:e9:53:59:3a:17:29:92:74:6d:a0:d8:19:e3:e1:02:
         d5:6d:a4:18:fe:5d:ba:80:1b:82:1b:27:22:0c:9c:76:4b:a6:
         bd:af:69:2e:03:ca:e9:fd:6f:01:67:8f:a4:8e:02:2d:0c:26:
         95:ea:d0:86:36:95:6e:e4:21:78:80:d9:22:13:c8:c5:7e:6d:
         c4:cd:8b:0a:d4:3f:c6:ae:1b:69:c5:18:09:ff:0d:c1:01:b7:
         67:1e:db:4e:4c:5a:af:f3:a4:af:ae:a3:bf:99:23:01:dc:69:
         83:b5:6c:72:e5:44:e5:68:f8:59:b8:86:d5:de:6c:03:fb:a1:
         6a:ef:46:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHdzApwmXi/NOhO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
N2I2MzM0ZmYtOGZiYS00MDQzLTk0M2MtZmY5ZGQwOWVlYWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh28VstZ/qmldHfDRJCeDgX8xKS3fafby8w3j
jL8PiUkAbwnCzMw1sV540Gll9o4fsN+JmF/LJGxYrRoaozWsCsdegl8YCa0HgDxA
LfJgT0FENs37dcHqkg0cAsyDgZU9FqAHi/WJz0ZdetxJb0g8k2uZLUYDHf53Wwqg
1tks5VkwO2tzZ9t7FS7Rdxk+KFc2lEd0ApT+OAjhq5gPbusL+UKT5HLAoYV0+SC0
7mRBt4jlo1MY2gDdpsAjzBEZWGCsufed7SuBEUP10G1SJcFXTlBgvK++bcIvEdx4
19ZhJ5giTZPIB3rkuSoJqRqzB7T9Grio8/WVsbArxumM7QfGxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOkvR7my8FHjhbWoytD4YeeQmyCpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYzFmN2RjNDMtNmMxOC0z
NzQ2LWJlNjctNmIyNWMzNWVlZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQ1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvsY+P4o0qCofBerISukUu5HYWwU4cgpS9V+lynYXXDHpZ9hFvMAn/O
wDfGW27hpoMPHkTTAzKmInsTU6dkmHThp9/EyagnPkcZFrzoHQ2wkm6lJlPYbGGW
dGA4lSV/EIF0miDeRi2d5Zlo02NyIBHbm2Ksy+zjwRIKT7S6QXcKBOlTWToXKZJ0
baDYGePhAtVtpBj+XbqAG4IbJyIMnHZLpr2vaS4Dyun9bwFnj6SOAi0MJpXq0IY2
lW7kIXiA2SITyMV+bcTNiwrUP8auG2nFGAn/DcEBt2ce205MWq/zpK+uo7+ZIwHc
aYO1bHLlROVo+Fm4htXebAP7oWrvRgc=
-----END CERTIFICATE-----
Generated at Mon Feb 23 18:40:56 2026 by rpki-client