Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/16ed4e65-bd20-3b5a-bfe6-96dc53aed5a8.roa
File:                     16ed4e65-bd20-3b5a-bfe6-96dc53aed5a8.roa (raw, json)
Hash identifier:          mAg8BDfQ+qfnOocC+oSxpZDKIW0iqlJyLF/5s2x0Klo=
Subject key identifier:   39:B7:85:D2:46:42:20:BD:EE:2F:6B:84:E3:FB:60:FB:EF:44:61:73
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584E885A3BB3A34D3B84607A4A80
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/16ed4e65-bd20-3b5a-bfe6-96dc53aed5a8.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     23154
IP address blocks:        148.164.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3b:b3:a3:4d:3b:84:60:7a:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=8b9c5df6-fe34-4d9e-9db2-68767bc1b1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:d1:3c:f1:cb:78:b9:95:9f:c5:cd:c9:39:
                    1f:c2:b4:0f:bc:50:bd:2c:81:dc:77:2c:b2:81:4a:
                    33:ce:10:d9:32:fa:0b:98:19:14:ee:1e:3a:52:42:
                    9a:95:3c:8d:de:3e:f4:1f:af:27:ae:9c:07:95:e6:
                    c4:e5:1c:8b:07:c7:44:a0:ce:f8:3a:dc:12:3c:9f:
                    87:bc:44:e5:07:e9:c2:85:5f:7a:84:93:ce:a3:b9:
                    d8:95:c5:f4:18:1d:63:eb:36:19:b2:59:6d:b7:ca:
                    87:67:73:0a:a0:e3:76:85:02:12:f7:2d:67:18:98:
                    f5:8e:61:03:4a:5b:23:1c:04:f4:7d:9e:d5:fb:70:
                    63:e7:c3:f6:ac:48:c6:d8:8b:79:bd:b7:af:f9:ea:
                    b5:96:6a:72:95:bb:06:f8:4a:41:59:fb:a3:1a:4e:
                    0a:78:37:6c:75:b2:a5:f1:f4:ea:05:35:1f:30:f5:
                    52:ea:2e:a5:5f:96:a9:67:39:66:3d:e2:b4:1a:d8:
                    88:54:c5:51:21:fc:91:3c:23:e5:29:36:78:29:00:
                    28:03:09:ce:20:6f:8a:5e:5e:34:29:02:61:ea:45:
                    12:56:21:ff:a2:c3:88:7b:49:a4:2b:1f:8e:9a:81:
                    bd:92:48:e6:46:ae:6b:a5:36:79:fc:e7:6a:3f:75:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B7:85:D2:46:42:20:BD:EE:2F:6B:84:E3:FB:60:FB:EF:44:61:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/16ed4e65-bd20-3b5a-bfe6-96dc53aed5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:8b:96:4f:f1:e3:5e:05:21:9d:2a:7a:c4:ae:42:ba:28:
         5b:7e:c7:09:67:80:67:85:7d:a8:6a:50:ae:cf:47:96:03:7a:
         f8:5f:84:46:d1:e4:a6:cd:a2:1c:45:64:87:20:76:ab:46:2c:
         2f:f9:88:83:94:ca:fd:1d:a0:70:b7:66:b4:b8:9b:eb:21:25:
         11:19:72:de:54:21:ab:fe:d5:79:43:5d:d4:0b:0e:39:86:a0:
         b7:8a:02:9d:1b:da:96:df:ec:54:53:76:9e:37:39:5e:f1:16:
         f9:7d:de:58:7f:49:94:b3:2a:b7:c7:4f:05:ed:3d:62:36:60:
         72:1e:7a:ea:68:4a:29:a4:e1:97:65:27:87:41:af:f7:f0:25:
         c6:25:a4:80:65:fd:ee:2a:53:46:dc:a1:84:40:2d:e3:7a:52:
         b5:fd:2d:fb:46:de:dc:df:72:80:26:90:66:f2:42:7b:37:1b:
         e3:f2:6f:b0:8e:1b:f4:4b:e7:35:1f:5f:c3:a3:18:33:ab:8d:
         53:37:36:5e:14:7c:d8:b2:17:1e:9f:f6:8b:5e:ac:e9:95:9d:
         0e:4b:c6:56:ff:12:6c:f6:13:12:ac:30:e0:63:9b:9d:f4:43:
         64:98:24:e1:57:43:2d:a9:fe:61:ef:99:20:0b:ee:2f:7e:4e:
         03:84:88:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWjuzo007hGB6SoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
OGI5YzVkZjYtZmUzNC00ZDllLTlkYjItNjg3NjdiYzFiMWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36HRPPHLeLmVn8XNyTkfwrQPvFC9LIHcdyyy
gUozzhDZMvoLmBkU7h46UkKalTyN3j70H68nrpwHlebE5RyLB8dEoM74OtwSPJ+H
vETlB+nChV96hJPOo7nYlcX0GB1j6zYZslltt8qHZ3MKoON2hQIS9y1nGJj1jmED
SlsjHAT0fZ7V+3Bj58P2rEjG2It5vbev+eq1lmpylbsG+EpBWfujGk4KeDdsdbKl
8fTqBTUfMPVS6i6lX5apZzlmPeK0GtiIVMVRIfyRPCPlKTZ4KQAoAwnOIG+KXl40
KQJh6kUSViH/osOIe0mkKx+OmoG9kkjmRq5rpTZ5/OdqP3W0XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDm3hdJGQiC97i9rhOP7YPvvRGFzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvMTZlZDRlNjUtYmQyMC0z
YjVhLWJmZTYtOTZkYzUzYWVkNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKTBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2ei5ZP8eNeBSGdKnrErkK6KFt+xwlngGeFfahqUK7PR5YDevhfhEbR
5KbNohxFZIcgdqtGLC/5iIOUyv0doHC3ZrS4m+shJREZct5UIav+1XlDXdQLDjmG
oLeKAp0b2pbf7FRTdp43OV7xFvl93lh/SZSzKrfHTwXtPWI2YHIeeupoSimk4Zdl
J4dBr/fwJcYlpIBl/e4qU0bcoYRALeN6UrX9LftG3tzfcoAmkGbyQns3G+Pyb7CO
G/RL5zUfX8OjGDOrjVM3Nl4UfNiyFx6f9oterOmVnQ5Lxlb/Emz2ExKsMOBjm530
Q2SYJOFXQy2p/mHvmSAL7i9+TgOEiGo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:25 2026 by rpki-client