Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d62d7e51-c447-3bb0-afb4-fdb3e8ec6ed0.roa
File:                     d62d7e51-c447-3bb0-afb4-fdb3e8ec6ed0.roa (raw, json)
Hash identifier:          x0tvkAWyymAY2x3OvzqoD6GUASiMgSX81QSk3Kd6rL8=
Subject key identifier:   5D:B1:91:2C:EF:D8:68:6F:81:DD:D9:9A:86:D5:87:68:BD:7B:83:95
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F432858494733DC1C26DAD1FBEA8BCB00
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d62d7e51-c447-3bb0-afb4-fdb3e8ec6ed0.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     23154
IP address blocks:        148.164.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:dc:1c:26:da:d1:fb:ea:8b:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=8032e249-0f84-463d-b229-2111c4e1fcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:11:37:6d:fc:7d:a8:78:37:75:4a:6c:c4:
                    6c:45:ef:29:d7:58:72:d7:92:fa:be:13:1e:83:b1:
                    bc:25:4c:2a:a2:79:73:0c:8a:cc:9b:b8:aa:d1:ed:
                    43:2a:0c:d4:c3:90:36:72:8d:27:41:91:9e:92:76:
                    74:b4:00:c7:60:d6:73:c2:de:b2:6d:b4:07:71:dc:
                    dd:24:94:b2:b5:ac:a6:f4:01:c1:0d:4b:f1:1d:5a:
                    f3:1c:55:b7:5c:a0:cd:55:84:32:f1:fc:c2:88:eb:
                    52:e8:28:b1:c2:69:26:3b:c2:98:6a:c0:84:88:41:
                    6e:0d:bd:0b:99:df:b8:05:c4:77:c5:5d:8c:93:b0:
                    ca:20:49:27:5d:36:19:16:c9:5d:3a:b3:9a:2f:f9:
                    6f:d1:dd:ea:44:ef:d0:6d:be:cb:5d:4f:2a:00:a9:
                    eb:57:7a:b9:db:c5:29:4d:97:c2:d3:44:fc:76:53:
                    a0:6a:bc:f4:66:ea:0b:a0:3c:84:9c:c2:12:7d:af:
                    6c:2b:74:f2:c8:a8:2e:50:ef:a2:7e:01:4b:98:3e:
                    92:62:54:ee:2b:c2:c6:66:e7:ad:38:70:ea:18:b1:
                    cd:e2:0b:9e:3a:bb:1e:14:23:3b:06:8c:c2:14:4f:
                    01:5d:8d:77:e4:ba:55:b2:df:fd:dd:0a:21:5d:bf:
                    ec:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:91:2C:EF:D8:68:6F:81:DD:D9:9A:86:D5:87:68:BD:7B:83:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d62d7e51-c447-3bb0-afb4-fdb3e8ec6ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:99:47:92:6c:b2:79:82:51:34:11:3b:57:60:90:8e:27:6b:
         6b:a9:d7:76:4d:89:cd:28:0e:5f:12:6d:f7:9f:1e:86:4d:f0:
         9c:14:49:c6:38:a0:e6:9c:5e:e1:bd:aa:dc:ef:f6:24:d2:23:
         87:59:1a:1b:99:52:3b:61:a3:c6:b3:ce:77:d2:e1:13:0a:66:
         f6:e1:29:14:3b:73:e0:e5:48:6d:49:77:fa:74:a5:89:68:d4:
         46:09:a2:2f:f3:da:2d:f7:3e:13:7e:ca:df:f5:51:22:59:f8:
         05:ec:30:34:93:f1:4a:39:6d:fb:c0:fd:c2:12:14:11:a4:63:
         0a:d3:28:bf:ff:af:ec:75:10:7f:e2:29:b3:69:c8:76:9f:01:
         b5:aa:3c:f5:11:ee:ef:30:19:2f:51:8a:fd:70:e7:c9:cc:6a:
         43:9c:b2:bd:0f:b3:75:52:3b:b4:72:34:25:c1:95:b1:4b:d8:
         6c:2c:ae:43:d6:26:a2:e0:9e:c7:a5:76:f4:7c:2a:54:ee:7f:
         c7:b5:92:15:b6:dd:81:c2:f6:9f:1e:17:7c:7e:33:d5:74:b9:
         11:2b:cd:a9:c5:25:1c:30:23:e0:5e:33:75:91:be:82:02:3d:
         6e:2c:1f:93:6d:b4:70:e8:4c:bc:54:4b:7f:cb:21:4c:41:e1:
         36:78:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:02:45 2025 by rpki-client