Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa
File:                     ce422f59-9421-3f6a-952c-c89677146d0b.roa (raw, json)
Hash identifier:          /wjlJipdWsxYFl/BuTW8ecNaISb3xcSuJwAr/Lwts0k=
Subject key identifier:   9A:BB:CF:18:34:A5:0F:12:8E:E8:0A:70:95:25:A7:E7:E3:E3:4D:78
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F432858494733DAE2C9AD37135E02FAE0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     23154
IP address blocks:        148.164.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:da:e2:c9:ad:37:13:5e:02:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=81335196-e07b-41ac-9f40-4f4e93f8c4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:88:e0:ef:54:5e:aa:75:5b:66:52:4e:39:
                    f6:33:9f:60:bd:18:87:14:9d:b7:23:dd:2c:6d:2e:
                    f0:93:35:8e:72:af:e6:e7:c2:83:32:f4:c1:97:0f:
                    c8:fe:3b:dc:70:3d:85:99:c2:b6:ac:1c:c1:a3:c3:
                    90:12:de:af:02:33:b0:04:2c:d8:5c:bd:35:44:bc:
                    47:af:68:7c:3a:e5:86:0e:73:3c:ac:4d:b1:38:4b:
                    57:d1:22:c5:40:57:22:ee:c2:28:56:56:4c:e0:6d:
                    f7:9f:ef:bb:6c:a7:ba:16:a0:ce:b3:a0:01:18:51:
                    1d:1e:7c:35:e9:8c:d6:ec:f3:2c:3b:7f:82:61:74:
                    69:b6:9e:44:02:24:a5:85:e2:bc:a6:fa:f0:63:05:
                    08:ec:9f:4b:ee:a1:4c:83:fb:36:af:a5:3e:3c:e9:
                    2c:f9:90:5c:19:34:f7:1e:a9:e6:a4:68:de:7c:ad:
                    5e:ed:30:20:e0:9d:fa:f2:25:13:15:22:b5:25:d2:
                    a8:f4:5c:cb:4b:98:1d:e8:b3:3a:fe:5e:b2:5b:05:
                    02:06:ec:97:46:c4:9e:ba:32:86:f9:f6:64:ef:44:
                    30:3e:ac:ee:5c:f8:51:77:74:6c:f8:95:cc:cb:13:
                    b7:b6:d4:25:3b:d7:6d:37:38:ed:f6:0b:4f:91:93:
                    6d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BB:CF:18:34:A5:0F:12:8E:E8:0A:70:95:25:A7:E7:E3:E3:4D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:76:c8:c8:b9:27:6e:fd:a6:58:6d:2b:2d:7f:7b:73:76:9c:
         c6:43:c6:b0:aa:79:30:56:f7:44:11:27:0f:6e:3b:a4:cc:4e:
         78:bc:3b:38:05:04:4c:d2:db:75:e0:da:43:cc:61:cd:7e:81:
         96:46:f4:da:85:2b:4b:53:9d:2d:c5:6e:90:f4:30:fe:9b:91:
         f1:50:72:65:a5:b2:55:5b:89:c5:ea:3c:ef:89:06:df:ea:f3:
         8d:03:0d:93:72:6a:a2:c3:f4:94:25:d3:fd:dd:10:cb:b5:69:
         17:42:0c:32:6f:eb:9a:99:37:0e:42:d4:43:81:e7:3d:4a:3b:
         94:dc:48:8a:da:96:8a:61:2f:98:27:12:f3:04:ba:18:41:37:
         dd:3c:bf:5b:cb:ad:1e:10:3c:67:87:c6:27:2b:4d:a9:c9:ed:
         60:b1:6f:73:cb:48:c0:4a:88:32:0f:37:c5:7b:0b:e1:16:e0:
         d1:42:aa:b6:dc:56:48:49:c0:b1:f6:4c:f7:d4:52:23:7b:38:
         40:16:26:07:7e:c0:e5:de:bc:53:d7:9e:25:22:a0:c3:d5:64:
         3a:3f:de:41:8f:6c:ac:79:f2:c8:e4:1b:a6:bd:33:a6:ec:05:
         ab:3d:cd:a1:0f:7d:c4:49:e1:8d:65:da:e6:c7:6d:48:4f:6b:
         93:40:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:44 2025 by rpki-client