Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c6b330c7-de93-37bc-b749-d9cc865ee8ec.roa
File:                     c6b330c7-de93-37bc-b749-d9cc865ee8ec.roa (raw, json)
Hash identifier:          PqwKsr8kCIng5CJ1SuBhiS8GEQIoNLttkF1NG75Pptw=
Subject key identifier:   3F:B7:5F:F2:DF:BB:BD:CF:50:CE:4F:D6:5D:F8:20:BC:52:AB:EA:E7
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584DA81572A3737C80C1F799E480
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c6b330c7-de93-37bc-b749-d9cc865ee8ec.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     23154
IP address blocks:        148.164.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:72:a3:73:7c:80:c1:f7:99:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=14dd3b5a-bb3f-44d6-9a49-d01394599bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:86:a7:1a:ea:06:91:d2:30:b9:5d:90:f1:
                    51:15:b5:24:34:2a:1a:71:08:94:4a:83:93:a7:d6:
                    f1:27:32:cb:6b:b9:ca:c7:af:84:22:33:69:74:90:
                    1e:0e:c6:4c:46:76:57:2c:3e:dd:ca:a9:9a:2f:9c:
                    90:ca:a5:d7:e1:3c:88:89:04:10:1c:76:ad:be:98:
                    5d:3d:a5:eb:29:52:b4:e4:6d:35:fa:26:1b:07:a4:
                    31:68:ae:6d:f1:8d:55:62:e9:3a:f0:cb:4e:4b:6d:
                    0a:8c:bf:9a:04:fc:8b:86:04:a4:a8:64:e4:92:bf:
                    b9:40:b5:79:e1:be:29:62:aa:33:7c:e8:e8:17:51:
                    84:c9:b9:2a:f6:69:d3:29:35:25:1e:60:e8:69:e0:
                    ce:92:35:c5:cb:85:7b:94:39:c2:c1:31:92:ab:ca:
                    2c:ae:35:14:8d:43:aa:29:b7:58:f6:39:21:ca:9c:
                    56:4b:73:60:f3:81:31:af:e2:cd:93:65:18:9d:54:
                    67:90:b1:a5:de:d8:e4:ee:6d:f0:d5:18:49:38:a9:
                    99:b8:3b:eb:58:6b:3a:0c:79:ef:af:bb:a2:60:2b:
                    da:db:76:a9:c2:6c:c9:28:fc:ba:26:82:f0:9c:50:
                    fe:c3:d6:c2:b3:d8:be:75:86:2a:26:5c:89:9d:ea:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B7:5F:F2:DF:BB:BD:CF:50:CE:4F:D6:5D:F8:20:BC:52:AB:EA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c6b330c7-de93-37bc-b749-d9cc865ee8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:7d:81:01:9d:54:22:ed:c6:df:00:55:ee:72:61:75:d5:
         8b:6e:27:c9:1b:7c:44:e5:4f:27:3f:ad:7d:08:86:18:9b:36:
         f0:3c:f6:3f:09:77:56:fd:8a:56:59:9f:66:6a:f4:05:a2:8e:
         f5:25:29:bc:c2:56:e7:27:5c:83:f6:6f:0b:a2:5d:c3:a7:e5:
         2f:a0:d4:5c:c3:e6:10:10:31:84:73:23:31:76:6c:34:d4:f0:
         89:77:a3:1c:bb:86:4e:5b:67:50:f7:81:2b:6e:0d:68:58:23:
         1c:2d:3b:7b:3b:47:54:25:50:a4:46:43:02:c0:df:40:80:81:
         5d:29:41:8e:ea:f2:83:6c:74:88:2c:57:5c:38:d5:d6:4e:c8:
         f3:e3:64:ff:1d:ba:f6:a1:a2:f1:80:8e:96:70:18:88:fa:be:
         31:62:fd:69:6a:45:e8:54:51:e8:c6:82:7c:c0:86:76:14:f1:
         84:b7:fc:37:74:22:39:2a:cd:ea:99:1a:f0:bb:19:f9:6b:80:
         ec:fa:e9:16:7a:a0:25:a9:dd:90:dd:82:63:92:11:c4:da:6c:
         84:c8:59:24:4d:09:c0:fb:bb:5d:d2:e7:cc:c9:00:de:b5:63:
         82:14:5d:41:5c:62:b8:99:d6:01:5e:e9:f9:4a:2f:d5:63:88:
         5d:a1:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:38:25 2026 by rpki-client