Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ccfe5f86-695e-3d1e-9761-8d0d251703ed.roa
File:                     ccfe5f86-695e-3d1e-9761-8d0d251703ed.roa (raw, json)
Hash identifier:          ojbqqtqvqY/Eb2Nt3tTjy6XybZO/4CzumhA2qzJWYyc=
Subject key identifier:   05:6E:17:C4:43:3C:69:A0:42:48:E1:1E:29:5D:E5:6D:76:40:96:0C
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584A268AAC3827F053620ED36100
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ccfe5f86-695e-3d1e-9761-8d0d251703ed.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     23154
IP address blocks:        148.164.44.0/23 maxlen: 23
                          148.164.44.0/24 maxlen: 24
                          148.164.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:ac:38:27:f0:53:62:0e:d3:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=c9755bd7-aa99-4f68-902e-3289d33cb93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:5d:c0:68:80:38:9f:f4:b0:af:62:9f:8a:
                    a0:2b:89:5f:78:6e:09:a1:b8:1b:c2:43:bd:d7:57:
                    21:32:f6:89:32:fd:31:27:d5:e9:08:95:97:c2:d3:
                    ff:09:40:4b:c8:d4:bb:29:97:12:0a:37:99:8a:b8:
                    c0:5b:e0:67:96:9f:5e:c9:b8:78:67:9d:94:21:9e:
                    c8:23:65:69:bc:54:78:a5:0b:50:7f:c2:a6:d5:a1:
                    b2:fd:bd:65:c4:4f:56:76:a5:f4:4e:8f:88:ed:26:
                    7f:7b:3c:74:63:10:ce:42:98:da:dd:64:a7:a9:eb:
                    62:7c:e5:f7:12:48:df:27:9b:b2:09:1a:83:d1:e8:
                    00:c8:7a:fb:1f:ad:83:a5:7e:03:64:d5:46:4b:63:
                    c9:7a:10:f9:07:cc:81:4a:9f:97:6b:98:78:36:d0:
                    99:3f:42:a7:2d:0e:b1:26:33:27:ec:0c:f2:c7:7f:
                    09:fb:24:8d:dc:cb:fb:a3:4d:94:5b:e1:92:4f:7b:
                    67:34:47:58:e5:96:69:fe:70:75:49:61:4e:a6:50:
                    ff:bb:ce:95:15:79:8b:e1:1d:69:ff:1e:06:02:85:
                    c8:a3:11:c6:a3:80:af:d9:fa:6b:6a:c7:47:95:6c:
                    e8:9a:ab:bc:75:89:1e:2b:ef:2a:e8:bf:b5:2b:0b:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:17:C4:43:3C:69:A0:42:48:E1:1E:29:5D:E5:6D:76:40:96:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ccfe5f86-695e-3d1e-9761-8d0d251703ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:00:60:81:4b:35:15:39:8b:ec:f0:8b:99:9a:9e:f9:29:89:
         a6:8e:76:36:66:0c:84:4a:d1:c6:db:04:17:db:30:dc:bf:ed:
         da:ff:c4:83:17:39:29:7e:6c:c3:30:33:f2:76:bf:94:c1:47:
         09:0c:fe:78:ba:1c:84:2b:05:82:ef:e4:b0:8f:a2:52:48:e3:
         c1:22:78:c1:4f:e0:8d:0b:6b:92:0d:e6:99:66:8c:8f:44:20:
         8e:22:27:b8:5e:ac:39:82:4e:dc:2b:90:d1:b3:e3:03:1e:5b:
         ab:86:ff:16:67:75:c7:a3:c2:85:56:46:96:e3:1a:91:66:8f:
         67:4b:2c:8d:e4:87:7a:79:76:3b:fa:8b:b8:3b:ec:19:54:2d:
         94:f4:f9:a3:50:62:1f:82:17:a6:1c:2d:91:ce:3a:85:a9:10:
         71:74:53:86:62:b9:42:79:00:1f:81:8b:b6:33:d2:e1:3f:86:
         56:55:75:55:01:de:ce:73:57:37:11:8a:3a:aa:a5:74:0a:7a:
         19:96:78:2c:57:ce:ab:e9:d9:b4:3f:dd:f5:b9:01:99:e9:77:
         af:7d:65:ae:14:91:13:36:80:f2:a9:6c:fc:d1:41:c8:d0:06:
         ed:70:cf:3f:82:52:35:0f:1b:36:80:07:50:cc:c7:66:3d:ec:
         0b:1c:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:03:22 2025 by rpki-client