Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa
File:                     ce422f59-9421-3f6a-952c-c89677146d0b.roa (raw, json)
Hash identifier:          IMw33893nwArJobyw1BH3ePkLyDvDe8/2boKYzZtAeI=
Subject key identifier:   DD:01:91:DC:FB:79:35:8D:68:18:B8:D4:4E:B7:91:CC:FC:7C:66:9B
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584B0746A9E201FD7B95CB413840
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        148.164.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:a9:e2:01:fd:7b:95:cb:41:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=b6cf0407-7f88-44e9-b3f2-11498f9288db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:c3:6c:d1:d4:97:93:4e:4c:5d:87:17:dd:
                    bf:f3:f6:ed:21:f6:2c:d9:e9:3f:6e:9f:ae:36:95:
                    ce:41:81:99:09:06:e2:93:93:e3:6e:29:bb:e3:a3:
                    60:a9:6f:9c:59:02:2d:d6:21:c1:2e:78:43:71:bc:
                    e3:b0:9a:a3:1d:f4:5c:92:84:86:58:35:8a:15:f6:
                    03:fb:a4:51:30:18:36:88:6f:57:a7:33:d4:88:70:
                    1b:6f:3b:00:53:06:00:11:7f:77:26:4a:12:cb:55:
                    25:cc:a3:df:b0:7e:9e:28:68:f5:e3:5a:30:11:8b:
                    d8:2b:95:2a:7f:d2:22:4e:cc:79:1f:92:2d:93:7c:
                    aa:b0:e4:37:e1:47:91:75:ff:be:06:7f:03:68:65:
                    84:92:38:2b:ff:cb:aa:2b:41:06:ed:88:b1:9f:15:
                    fe:ed:58:fd:83:ba:aa:ad:bc:2d:da:db:e6:c5:8b:
                    71:37:f9:75:e1:66:3d:4d:04:01:44:78:bc:62:7a:
                    b2:82:a6:9b:3f:64:2d:98:d2:30:6a:69:1b:62:80:
                    e8:a1:19:79:b7:b0:03:e4:50:3c:81:88:df:8e:01:
                    1d:bb:20:5f:3e:d7:91:42:45:34:7a:1d:d4:1f:6b:
                    65:e9:ed:45:bd:be:2a:ef:2e:c0:e1:e5:84:a4:e9:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:01:91:DC:FB:79:35:8D:68:18:B8:D4:4E:B7:91:CC:FC:7C:66:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:79:39:9e:51:24:61:bd:49:01:59:79:3f:d6:6c:d3:c1:
         58:82:a2:09:2e:2a:54:92:70:09:67:1d:cc:9e:2b:15:34:a5:
         93:d8:44:fc:cd:c4:ee:21:ac:9a:5a:33:20:20:9a:03:5d:7b:
         45:43:8a:9b:ae:e2:4b:01:05:37:b1:0b:e8:6f:70:c9:b4:5c:
         cb:ba:87:59:a4:0a:05:3e:8f:bd:e6:62:ea:f5:9f:ed:58:e3:
         c9:10:a9:63:ac:be:a1:97:78:d4:9e:28:62:24:04:de:fd:3e:
         71:c2:c3:cf:3d:4c:76:1d:52:8c:1e:a0:2c:d8:1d:23:2a:04:
         46:ec:10:42:b8:bc:64:fe:a5:d9:43:8d:d1:7e:2f:e2:f2:80:
         5a:83:f5:ab:d7:7c:fb:ea:2a:0b:51:9e:b3:db:1d:8f:23:fa:
         4c:a2:25:59:11:88:27:fc:20:6c:87:ef:1c:8f:36:55:e3:0e:
         37:b2:fd:41:d2:a9:33:89:b8:66:76:25:d8:fe:cb:f3:60:42:
         e1:f8:c3:46:3c:52:79:74:40:39:60:79:20:11:9d:77:fe:95:
         6b:71:18:5c:32:a4:0f:09:e6:b1:7f:ab:ac:60:72:4c:aa:9d:
         3f:14:fa:a2:35:8a:0a:87:66:c1:2c:e9:43:c1:e9:70:45:83:
         47:33:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:20 2025 by rpki-client