Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
File:                     4de99023-4420-3dea-891c-b23712defbf9.roa (raw, json)
Hash identifier:          cISztD6sESNtSyDrcbi6H1IL3ktEnBvCET7L28KZ2SE=
Subject key identifier:   E4:1D:89:4A:41:11:86:DC:DA:3F:53:8A:50:88:B8:64:0C:F2:86:CC
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584F3FAD2D35FBE848F1E7D2B290
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     23154
IP address blocks:        148.164.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:2d:35:fb:e8:48:f1:e7:d2:b2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=03e6d9e8-bcc7-431e-93ea-783b89faa0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:71:c7:10:d3:f0:67:51:1b:56:69:4d:57:
                    ab:f7:c8:57:0c:c3:b4:af:42:fc:9c:b9:44:cd:ae:
                    44:06:45:b5:20:73:1d:6a:77:1c:54:07:9b:cd:a0:
                    63:7a:8d:23:fe:52:85:9e:12:0a:db:d8:69:08:42:
                    62:50:94:5b:63:b5:5c:0e:dd:32:47:22:50:bf:22:
                    f8:5a:18:0b:42:9c:2b:df:d6:79:6f:8a:2e:5b:d4:
                    81:03:5a:0f:ee:f9:22:16:3f:6c:35:f8:aa:4e:6b:
                    ee:54:10:ba:f0:14:ca:3e:17:38:bc:fc:9a:4a:d8:
                    2c:87:9c:0f:ff:2a:3b:ae:2c:3e:a1:dd:f3:bb:0c:
                    ec:b2:89:9a:bd:ae:f8:45:04:8c:cc:59:bb:4e:59:
                    a0:4c:4a:3a:3c:ac:6d:19:be:fd:87:c8:19:4b:eb:
                    2a:ac:45:72:57:ef:c6:a7:fd:6e:13:43:1c:92:1b:
                    6f:88:ae:49:f4:fc:cb:1b:04:63:f1:63:38:7a:3e:
                    fa:66:42:21:90:90:4b:5c:bb:38:9c:5c:6c:3f:95:
                    de:c6:dd:c8:e2:0e:ee:33:35:e7:44:14:f3:84:e7:
                    d2:ac:71:c3:ce:c1:a0:f5:ff:90:96:bb:15:52:e8:
                    00:15:05:f1:60:d8:99:4c:91:94:02:08:0d:e0:ce:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1D:89:4A:41:11:86:DC:DA:3F:53:8A:50:88:B8:64:0C:F2:86:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:53:d8:5c:63:f1:e3:19:77:ef:2b:c7:70:ef:42:b1:51:1e:
         a1:07:99:fb:5f:c3:84:af:6b:f4:49:45:38:9b:f4:c8:52:f9:
         15:dd:dc:92:36:d2:f3:c1:bd:a5:d4:65:81:16:05:02:a4:26:
         3f:e9:bb:1f:ef:92:d9:8b:7c:a0:d9:20:bf:76:3c:44:86:6c:
         90:b6:e2:d0:62:0b:48:eb:05:90:f6:da:1d:b2:18:f2:03:90:
         e9:e3:ff:d2:be:f2:a2:66:0f:74:a2:3e:9b:94:84:79:27:9d:
         aa:0e:be:f3:ea:fb:ee:77:2b:3b:cb:cc:f7:b2:32:39:82:f8:
         3b:7b:0a:c5:0f:c7:a5:3f:68:93:fe:9a:18:cb:53:ac:07:b7:
         3f:8d:2e:be:a0:aa:85:3d:b1:7f:28:08:46:b3:ea:cf:fe:30:
         c8:e3:7f:b7:54:b9:73:09:99:8c:27:cd:d6:aa:84:a6:8b:67:
         84:e8:f2:20:8b:55:e1:0e:13:9c:bb:9d:36:a2:96:f5:0f:cc:
         fe:ed:99:d1:60:1b:b8:54:25:f6:80:10:06:89:c8:36:3e:05:
         3e:73:2c:42:3e:72:72:52:44:62:85:7c:fb:8e:05:74:f7:a7:
         2b:68:a2:df:99:f0:68:ad:c2:98:69:a5:6a:b3:5c:3d:24:3b:
         03:92:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:45:39 2026 by rpki-client