Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d2d44305-c66c-34fa-a68f-e8cfeba686ca.roa
File:                     d2d44305-c66c-34fa-a68f-e8cfeba686ca.roa (raw, json)
Hash identifier:          NJUN3PiNEs+lS+T2JywX3KWL1b/cAbQV7WSKMgvYDEs=
Subject key identifier:   F8:27:83:99:64:B2:E3:F7:79:01:FB:3C:13:FD:76:37:2F:65:36:4F
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584DA815789A017C7F8104B92A00
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d2d44305-c66c-34fa-a68f-e8cfeba686ca.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     23154
IP address blocks:        148.164.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:78:9a:01:7c:7f:81:04:b9:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=3e040325-1cfb-49b3-96e5-2312d4c6a657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f0:a3:32:c7:57:26:79:b6:5d:41:e0:8a:4b:
                    ff:8c:df:4e:6d:7b:e1:aa:16:17:8f:84:b1:48:7e:
                    72:29:55:70:75:3f:8f:b7:59:c2:0f:1e:4e:f4:5e:
                    62:1c:a0:49:e9:1a:fe:36:3b:73:b9:c7:69:20:42:
                    b0:76:79:ef:8a:ec:c9:b7:af:e4:40:27:08:c0:07:
                    86:d0:7b:9c:74:e1:93:1c:48:67:f9:db:53:6f:b6:
                    de:13:12:59:3f:0f:1e:7a:f2:bd:5c:a1:0b:21:67:
                    9a:ec:9f:21:d3:b4:d4:58:7b:13:ae:fe:b9:c4:be:
                    08:c9:04:4e:66:0e:58:5b:b4:3f:43:73:e7:ce:7f:
                    b7:55:8b:7b:3c:d8:6e:70:4b:2d:59:52:df:7a:1a:
                    d3:1d:23:62:36:dd:c4:15:5a:9e:aa:8c:a5:de:da:
                    74:9c:d4:b3:a1:2a:af:74:d0:d7:f1:94:56:59:d2:
                    dc:19:23:b2:91:61:de:81:53:8a:fd:10:c7:b3:9b:
                    e3:d3:4c:f5:7e:aa:da:af:4e:89:6f:86:7d:30:70:
                    43:17:b3:e0:43:45:0d:62:b7:75:8b:a6:14:7d:98:
                    25:21:2c:ae:17:f4:33:7d:b4:57:5b:92:19:ca:7e:
                    b7:18:d9:8d:9d:a0:05:9c:9d:20:61:5c:2e:14:86:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:27:83:99:64:B2:E3:F7:79:01:FB:3C:13:FD:76:37:2F:65:36:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d2d44305-c66c-34fa-a68f-e8cfeba686ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:d8:55:01:7e:75:6b:10:ed:6d:14:94:33:3a:60:7d:2b:
         21:92:2f:74:4d:63:01:c3:ec:c2:71:9a:15:75:4a:74:60:b5:
         0e:59:d0:e3:60:78:25:9d:43:ed:8a:38:6a:54:ce:29:d7:b7:
         a3:9e:1e:42:5f:cf:d6:4e:68:87:aa:91:79:76:f7:b0:4f:06:
         2b:aa:d3:10:a8:bf:78:ca:ad:83:39:10:51:90:e6:56:00:81:
         0d:a9:37:cf:be:de:21:c0:d9:ef:97:cc:4a:77:cc:d8:19:19:
         b7:96:de:9f:41:6a:43:ac:3b:fd:24:c0:82:48:ae:33:1b:04:
         7a:c1:af:ea:fd:5e:ab:2d:6d:77:c8:fa:ea:c1:f4:db:d4:3c:
         f7:8a:60:1c:7a:51:48:c8:df:66:c7:c5:a5:3a:70:9b:d3:e7:
         8a:20:ea:38:f5:a5:3d:8c:c6:66:bb:f0:39:a1:91:59:bc:62:
         e4:4a:5b:06:b4:02:79:da:85:f4:98:79:bc:5f:fe:22:b1:e2:
         f1:4d:57:48:1a:03:d3:4e:e9:cd:47:e5:7e:93:26:b5:e8:26:
         2e:8e:86:d3:74:d1:27:5a:9d:4e:44:24:ff:31:d4:0c:de:d3:
         5a:17:cf:a8:aa:b9:f2:24:f7:42:cc:f8:41:fb:e6:1f:ea:e4:
         ae:f6:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:38:13 2026 by rpki-client