Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
File:                     4de99023-4420-3dea-891c-b23712defbf9.roa (raw, json)
Hash identifier:          jR7YJ+OZED/+NRLo5i8O7P27Nb6MgeaKMuKvRC1AlNA=
Subject key identifier:   78:A1:A7:D6:9C:C1:06:B5:F2:CA:2A:B1:48:BA:89:9E:B3:DD:1E:44
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584DBD058B5A21F349C63B055280
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     23154
IP address blocks:        148.164.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:8b:5a:21:f3:49:c6:3b:05:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=cb627c94-a026-4292-ba6b-943f11f9ce7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:99:4c:73:e9:ad:f8:70:a1:2b:35:a4:5d:
                    fa:f1:6b:43:0a:c4:33:87:24:3e:88:d9:48:01:e0:
                    c9:c5:a8:db:e6:97:af:d3:95:d8:76:99:68:01:47:
                    b0:bd:04:c6:d5:ef:99:d9:5b:ed:93:76:a0:20:9d:
                    c4:b6:59:b3:7f:99:a2:96:80:eb:a1:a1:40:d5:77:
                    cc:a3:d8:f7:c4:7b:e7:1c:96:fa:52:62:3e:0f:45:
                    9a:ca:b3:4c:82:57:c4:f3:f9:3f:35:33:51:45:c9:
                    42:73:3f:b8:e1:fa:67:c7:cc:57:e9:c8:2e:8d:06:
                    54:6d:a2:d4:fc:d0:d3:5a:fb:5f:84:55:3c:77:d9:
                    61:84:01:84:7c:74:a1:7e:1f:1e:59:5f:33:b5:a6:
                    a6:e2:9d:3f:4a:6a:48:de:e3:bf:13:e6:97:65:65:
                    84:2a:57:2e:5d:56:ae:d0:f1:42:54:d3:39:34:84:
                    b7:c9:d1:98:6f:34:23:46:e0:08:5e:ed:ec:8a:e0:
                    37:0f:a3:87:e7:0e:4d:40:46:3f:61:82:e2:45:d5:
                    17:55:9f:26:0f:63:84:75:3e:5e:e8:3e:a8:de:5c:
                    25:9e:8b:b4:e9:32:8b:0c:48:5b:7b:a4:ba:84:5d:
                    31:cf:45:f6:72:b4:d9:19:fa:78:2b:a2:9a:51:76:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A1:A7:D6:9C:C1:06:B5:F2:CA:2A:B1:48:BA:89:9E:B3:DD:1E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:b8:67:3b:b3:57:76:5a:2c:81:1a:36:69:95:8c:24:d1:
         85:02:4b:26:e8:5e:94:f4:a3:a1:77:31:89:ca:f8:20:1b:e6:
         ab:29:12:02:b2:66:f2:08:d9:ba:59:60:b6:96:3c:d4:9b:18:
         dd:a8:d8:49:22:f2:81:3b:e0:75:2b:b3:ea:74:69:25:04:d9:
         c5:ca:9b:99:8b:52:0e:a9:a1:21:c5:a3:a2:6e:d6:32:ad:31:
         61:60:1d:d8:43:6a:22:ac:27:f9:f6:a8:dc:2e:68:76:20:db:
         b6:b0:08:7e:dd:67:28:b9:f0:aa:c0:6a:f5:9a:33:98:af:29:
         4f:b6:d4:fb:ef:8b:27:e4:83:d4:b9:ec:71:1e:22:72:06:6b:
         a2:c9:c8:a4:3a:f7:1d:c5:80:6d:75:a2:a0:64:91:ad:e3:4d:
         ce:1f:70:1d:0b:da:b3:03:89:15:d1:82:00:49:0f:8c:9e:23:
         a3:c6:a2:31:0b:5d:81:6b:3d:61:41:01:ff:25:da:75:8e:e8:
         ad:75:51:4e:48:d6:75:f0:73:5c:1e:11:0f:21:90:5e:57:dc:
         ae:27:c2:8c:e6:c8:14:8f:ba:f3:46:4c:98:57:ec:e9:68:0c:
         61:b2:25:5d:ad:60:4d:b2:da:b4:9f:ed:0b:21:af:b5:ae:9b:
         13:ff:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:13 2026 by rpki-client