Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c1f7dc43-6c18-3746-be67-6b25c35eeda1.roa
File:                     c1f7dc43-6c18-3746-be67-6b25c35eeda1.roa (raw, json)
Hash identifier:          mEI3LrwguzURRFJkUiQRXXAlwItctcQmL2v8GQBmdtI=
Subject key identifier:   BC:3D:1C:6F:00:C3:0F:AC:AE:28:70:79:4F:55:C5:6A:3D:DE:64:63
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584B0746AAB5698937841BBDF8C0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c1f7dc43-6c18-3746-be67-6b25c35eeda1.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        148.164.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:aa:b5:69:89:37:84:1b:bd:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=d0e0d2de-92a7-4c8f-98ca-06262bcdf6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b8:c8:c8:48:7c:98:93:cc:7a:f6:84:96:08:
                    88:44:f3:a5:8b:0b:d5:af:ad:32:31:1e:f6:80:69:
                    ee:dd:60:ca:04:ce:fa:fd:1c:cf:3f:4a:03:1f:e6:
                    16:6c:55:12:5d:ee:c1:c6:64:46:cc:fd:40:4c:a4:
                    e4:3e:37:f3:59:a4:7e:1c:df:fb:51:44:cc:cd:b2:
                    24:31:df:cd:ba:3c:64:7b:40:a7:e8:3d:3f:a6:50:
                    07:1f:b0:44:d6:1b:08:bf:cc:fd:09:9f:85:4d:20:
                    cf:68:7f:be:3d:c5:d0:4f:f9:54:68:e3:8b:f6:1b:
                    ad:d7:25:22:13:03:20:f8:e9:0b:64:49:00:e2:cd:
                    ca:c5:01:af:7b:52:e1:26:70:0e:2b:44:fd:52:8f:
                    da:e9:2e:8d:1b:e6:aa:c8:4e:cb:fd:4f:47:15:a3:
                    f7:7d:04:4f:d1:ab:ad:c5:d7:d3:0d:51:0f:04:27:
                    7b:3a:34:24:4d:67:9c:9c:6e:4e:45:19:d5:4a:07:
                    0b:72:ea:45:9b:f2:bd:03:74:79:31:99:3e:c7:a2:
                    7a:3f:8e:0f:b9:99:24:bb:bf:b4:4f:b0:9b:e5:c7:
                    c9:ec:ae:56:d7:2b:7e:6b:04:0e:67:02:c8:9d:12:
                    59:88:f0:cf:8e:28:b0:06:2b:5c:00:fd:6e:be:2f:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3D:1C:6F:00:C3:0F:AC:AE:28:70:79:4F:55:C5:6A:3D:DE:64:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c1f7dc43-6c18-3746-be67-6b25c35eeda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:6e:bf:df:06:15:4f:06:9a:5d:18:50:ec:16:7c:26:5e:
         07:a1:7f:4c:17:ba:59:ce:60:84:8d:73:fa:06:c1:83:c7:7a:
         9b:0f:f7:fd:1e:d1:bd:24:89:50:cd:eb:cc:eb:06:cc:eb:03:
         ea:fe:75:6c:0b:bd:0d:68:5d:cd:86:98:52:d0:f7:6a:de:46:
         8f:f9:b3:44:3f:02:d2:04:f5:75:be:58:71:e0:51:e7:d8:92:
         a6:c1:fd:35:e3:db:f4:2f:02:28:92:e0:b1:66:ec:34:d3:72:
         7a:3e:e7:d1:43:bc:f0:ee:eb:2a:1f:32:ba:77:22:79:79:c1:
         ee:11:53:68:a8:93:54:d6:94:71:b2:78:d3:91:4c:0f:df:cf:
         39:ec:a4:8e:68:d3:20:7b:ae:f1:69:c3:e2:33:58:fe:c4:a7:
         ae:df:25:c7:11:7f:fc:b0:cd:53:16:df:d2:27:c1:50:17:d6:
         27:b4:ab:9e:45:18:4b:c0:5f:5f:d6:f7:d9:ed:5c:c1:e6:52:
         82:65:90:ae:c3:73:c6:63:22:4d:2a:24:7d:88:ea:a9:ec:17:
         e6:88:2f:8f:22:f5:8e:80:46:9c:a4:c5:be:ba:b0:60:ce:e7:
         83:18:7d:eb:19:e9:df:6e:6e:27:92:4f:8f:62:e7:9b:f7:82:
         9c:48:7c:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRqq1aYk3hBu9+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
ZDBlMGQyZGUtOTJhNy00YzhmLTk4Y2EtMDYyNjJiY2RmNmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbjIyEh8mJPMevaElgiIRPOliwvVr60yMR72
gGnu3WDKBM76/RzPP0oDH+YWbFUSXe7BxmRGzP1ATKTkPjfzWaR+HN/7UUTMzbIk
Md/Nujxke0Cn6D0/plAHH7BE1hsIv8z9CZ+FTSDPaH++PcXQT/lUaOOL9hut1yUi
EwMg+OkLZEkA4s3KxQGve1LhJnAOK0T9Uo/a6S6NG+aqyE7L/U9HFaP3fQRP0aut
xdfTDVEPBCd7OjQkTWecnG5ORRnVSgcLcupFm/K9A3R5MZk+x6J6P44PuZkku7+0
T7Cb5cfJ7K5W1yt+awQOZwLInRJZiPDPjiiwBitcAP1uvi+mhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLw9HG8Aww+srihweU9VxWo93mRjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYzFmN2RjNDMtNmMxOC0z
NzQ2LWJlNjctNmIyNWMzNWVlZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQ1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADq/br/fBhVPBppdGFDsFnwmXgehf0wXulnOYISNc/oGwYPHepsP9/0e
0b0kiVDN68zrBszrA+r+dWwLvQ1oXc2GmFLQ92reRo/5s0Q/AtIE9XW+WHHgUefY
kqbB/TXj2/QvAiiS4LFm7DTTcno+59FDvPDu6yofMrp3Inl5we4RU2iok1TWlHGy
eNORTA/fzznspI5o0yB7rvFpw+IzWP7Ep67fJccRf/ywzVMW39InwVAX1ie0q55F
GEvAX1/W99ntXMHmUoJlkK7Dc8ZjIk0qJH2I6qnsF+aIL48i9Y6ARpykxb66sGDO
54MYfesZ6d9ubieST49i55v3gpxIfNI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:29 2025 by rpki-client