Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa
File:                     e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa (raw, json)
Hash identifier:          H48le2BGeFKLSc5EQAOA/mUYbKnCTACr9x5fAa3tipg=
Subject key identifier:   E4:30:74:72:D7:7C:33:A1:E5:3A:EA:50:44:73:0F:F7:B0:35:08:A4
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584DA81571E2FC0D3E50757D5840
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     23154
IP address blocks:        148.164.0.0/23 maxlen: 23
                          148.164.0.0/24 maxlen: 24
                          148.164.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:71:e2:fc:0d:3e:50:75:7d:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=58f2479d-d933-42c7-a677-a57e7639ea8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:e7:5f:c5:64:11:75:20:a6:ce:33:df:1b:
                    af:71:c8:fc:b5:2a:31:71:f3:b0:27:4a:2a:50:e8:
                    18:3c:e3:a3:e0:13:80:ee:81:09:35:8c:43:d4:d2:
                    97:65:a7:92:61:8c:df:1c:2c:9e:99:d9:5a:34:a5:
                    86:0d:58:a2:c6:23:de:46:a3:f6:99:f4:0c:14:ab:
                    9b:34:6d:5f:4f:10:8b:24:cf:a9:89:92:86:e0:86:
                    09:7a:17:f7:27:c0:2b:7b:d1:1c:e7:7c:fe:bb:df:
                    0e:fb:e8:dc:e4:c5:14:fd:12:2e:e5:43:00:d0:39:
                    dc:c2:12:7b:96:e8:55:43:c4:14:93:3c:da:d3:bb:
                    56:9a:c5:8c:d4:1a:ef:aa:3b:33:04:98:fa:d1:ff:
                    46:0d:7f:1c:90:2b:24:eb:29:bf:73:c5:23:df:9f:
                    70:d2:32:f0:9e:e2:7a:65:c4:6a:f3:b8:d5:52:c2:
                    65:0f:3d:46:b2:d3:df:50:29:00:a3:aa:fa:29:48:
                    dc:b7:48:f4:e3:ee:91:0d:83:e5:e5:c7:2a:5f:71:
                    d8:66:15:e1:87:08:35:49:e1:c6:52:12:00:1a:4e:
                    d0:94:5a:28:69:ab:77:08:42:4a:08:86:a0:37:f3:
                    99:63:7a:ac:04:a4:b9:e7:bd:6e:9f:84:80:f4:b2:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:30:74:72:D7:7C:33:A1:E5:3A:EA:50:44:73:0F:F7:B0:35:08:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4f:83:25:05:a9:30:02:66:e7:9f:03:b0:97:6d:fc:55:6f:
         9d:ff:77:d1:7b:be:09:cd:91:ca:b2:56:3d:25:26:ef:13:ad:
         db:4a:18:dc:67:f0:5a:a4:29:53:ed:57:cb:02:e6:be:57:d2:
         90:f4:ac:72:fc:d0:61:35:92:0e:c1:ac:f0:02:62:6b:78:a0:
         1a:62:d5:e2:dc:29:0a:c2:a7:00:65:60:ee:b6:e4:eb:13:fc:
         73:8e:53:c9:7f:b5:ef:71:27:93:93:cc:a4:2d:54:9e:0b:c4:
         84:f9:64:99:bb:c9:d8:cb:5f:cb:90:84:33:a8:b9:ab:1e:0f:
         0b:e0:28:09:f7:59:bb:e9:d7:ce:d5:72:91:92:85:6c:d8:d2:
         1b:a5:95:2e:4b:e9:57:6a:f3:df:e6:11:d5:15:03:75:40:52:
         a4:5d:2f:db:67:9d:a2:e1:8c:96:2f:1f:df:2b:a2:f2:43:10:
         55:bf:62:6b:ee:4a:d5:38:0a:38:23:09:f9:b0:b7:5d:02:d4:
         b0:1d:70:44:dd:02:8c:2b:8e:40:14:ad:46:84:d7:07:c0:fb:
         e1:01:35:78:81:bf:e1:ee:0c:db:dd:be:a3:40:80:c3:0b:9e:
         83:bd:00:63:8e:87:14:ac:c5:02:e8:52:d0:c0:c8:6c:ae:1f:
         27:7f:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:38:02 2026 by rpki-client