Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/b3fd9998-1320-396c-871f-60c0d57dc9a8.roa
File:                     b3fd9998-1320-396c-871f-60c0d57dc9a8.roa (raw, json)
Hash identifier:          lY4mMzHx6RYHU6toovA2yG7GiIDr1EyvmAPhLOjlmq4=
Subject key identifier:   4B:47:1B:67:76:5A:08:AF:70:38:8E:D1:AF:E1:5F:D1:07:0C:BD:71
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584B0746AAE6C2BDB264E6153D40
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/b3fd9998-1320-396c-871f-60c0d57dc9a8.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        148.164.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:aa:e6:c2:bd:b2:64:e6:15:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=a00c5bba-4048-4f13-8386-d97f01d6bf4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:03:74:60:8f:4c:4a:44:d0:01:3f:1f:28:
                    2f:36:53:7e:57:81:24:6d:08:f1:d5:e9:9b:05:d8:
                    03:3a:3e:47:cd:10:45:40:96:2b:75:84:21:56:51:
                    5b:6a:6f:cc:61:9a:58:33:b5:98:ad:16:9c:a1:e7:
                    e8:86:4e:8c:47:f4:ed:5c:3c:7d:b6:7c:59:75:85:
                    5b:e8:64:1e:cd:bf:4c:19:ab:67:16:d1:ab:9a:e1:
                    e8:3a:7f:9c:f1:7f:cb:9d:da:6f:ff:73:36:55:d3:
                    05:42:a3:b1:c4:be:48:de:d7:0a:b2:22:ed:16:82:
                    ac:c7:3b:0a:3e:88:77:46:8b:a5:82:16:70:2f:d0:
                    45:09:14:75:f0:ec:20:68:7f:da:d7:10:34:13:6b:
                    60:71:c1:0f:87:e2:0a:bf:13:39:86:28:96:32:6e:
                    35:57:8c:d4:4a:96:6d:84:79:2c:14:60:33:17:3d:
                    46:45:10:de:06:b3:26:28:ac:ad:54:98:48:44:da:
                    c8:ed:74:aa:1c:9e:1c:1a:5f:77:ae:f5:92:a2:1f:
                    9e:f1:d5:c1:aa:ea:be:00:db:c8:ea:21:78:5c:09:
                    48:b6:22:b6:bd:18:d9:be:29:72:fe:94:ca:ff:93:
                    d5:88:0b:41:27:c9:29:1c:f1:ce:39:e0:f7:54:74:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:47:1B:67:76:5A:08:AF:70:38:8E:D1:AF:E1:5F:D1:07:0C:BD:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/b3fd9998-1320-396c-871f-60c0d57dc9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c5:a1:52:27:86:21:6c:87:88:48:09:c1:f4:9e:bc:d8:79:
         7a:56:2e:44:a6:98:ce:64:0c:c6:77:69:61:70:9b:92:4a:18:
         4e:5a:c8:c4:7e:3d:fc:93:72:40:d5:ea:72:d4:72:46:de:e0:
         39:83:b5:8a:03:fa:3b:43:35:e9:0a:0f:71:f3:d4:1c:de:4c:
         d8:03:e4:4f:73:b6:b5:90:3b:f4:e9:8e:23:cc:d9:fa:01:28:
         03:cc:a0:24:e0:dd:64:12:7f:38:d8:6c:af:48:b8:36:8c:7c:
         66:3d:91:5a:56:56:19:ca:eb:1b:78:21:ba:84:7e:b0:08:a9:
         46:84:55:12:c1:67:6d:5a:e0:8e:2b:7f:1d:9f:e7:f3:8c:50:
         5a:d0:62:de:c8:fb:43:f3:f5:9a:10:d6:91:3e:03:40:e1:bf:
         83:46:a3:37:3a:fb:de:1a:59:9e:17:02:b5:9f:f7:1c:53:4d:
         a2:cf:82:49:51:ce:8c:c2:e5:8e:e8:de:00:80:de:00:80:e4:
         f9:22:52:55:46:41:cd:66:ec:fa:e5:a1:9d:45:6c:43:a3:e5:
         23:0f:87:01:d4:c0:ac:76:ba:06:fc:44:96:d1:56:2c:82:45:
         1e:65:dc:be:fb:19:5b:8b:40:18:a2:ac:d6:fa:db:f2:4c:fc:
         f3:f3:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:26 2025 by rpki-client