Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/10b91710-4791-3820-9b4d-853613d5073f.roa
File:                     10b91710-4791-3820-9b4d-853613d5073f.roa (raw, json)
Hash identifier:          15REIWmDME0cvaV9Cu39S1lCvh2Kb1R0v0p+V2q/7Ko=
Subject key identifier:   14:8C:EE:C9:DA:F6:48:7B:F5:A5:9F:29:A4:49:4B:1C:30:89:D5:DA
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584A8575F47670A47F14EB99FF00
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/10b91710-4791-3820-9b4d-853613d5073f.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     23154
IP address blocks:        148.164.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f4:76:70:a4:7f:14:eb:99:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=f766ef38-bb05-4410-965b-cae45451ed12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:ce:91:79:8a:62:cb:50:0b:a0:01:d3:d7:
                    86:1a:7b:10:ea:25:97:a5:81:05:89:ec:76:98:e7:
                    50:a6:df:ff:43:29:cc:c2:40:b5:e0:3d:65:b2:88:
                    c6:aa:3e:05:7c:00:61:17:8a:8d:c6:dd:5c:0a:ce:
                    95:68:d0:84:da:ca:ab:8d:78:44:bf:0d:20:52:03:
                    94:ad:4d:05:58:30:57:68:0f:51:6f:05:38:cb:b5:
                    fb:aa:92:b0:25:b7:44:67:79:70:c3:77:03:e2:13:
                    97:d8:d1:2a:e3:a3:5c:fa:1f:fe:ef:72:db:1d:db:
                    34:c8:2b:b3:d0:14:9c:55:c8:40:97:20:03:19:8b:
                    57:f9:98:1c:a7:77:e4:d1:89:c5:0f:94:be:cc:2c:
                    8d:4d:76:9b:26:7e:3c:66:65:07:9e:22:4c:bc:22:
                    0b:de:53:4b:5d:a1:58:d7:24:a0:82:05:51:96:1b:
                    08:85:b8:2e:20:41:79:99:84:41:c6:33:25:e3:c1:
                    12:c4:67:06:66:d9:35:d0:d0:bc:a8:6a:b6:0b:1c:
                    4a:a2:59:dd:3a:73:88:d0:0f:8b:99:67:34:f4:ba:
                    33:11:2a:57:5d:22:46:80:9a:d5:c0:b1:7d:00:d8:
                    4b:6e:85:42:3f:a1:95:71:9d:85:fd:64:a1:42:b3:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8C:EE:C9:DA:F6:48:7B:F5:A5:9F:29:A4:49:4B:1C:30:89:D5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/10b91710-4791-3820-9b4d-853613d5073f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:4c:ee:67:16:a8:12:88:a9:18:cf:f8:09:69:1c:fb:af:
         65:8d:cd:53:05:e1:d5:15:dd:e2:83:7a:d8:78:4f:e2:29:51:
         ba:63:95:cf:e6:3b:4d:cb:b0:bd:b7:0d:86:3d:c2:18:8d:44:
         77:af:3b:43:bd:d8:d1:0c:02:e3:ad:02:54:f5:d4:b7:a8:78:
         55:4d:a4:c0:b8:53:b1:d9:a5:23:6c:c1:94:5c:f2:b8:c9:60:
         ea:fd:60:a0:7d:e8:95:c4:32:af:79:8d:9e:36:42:f2:95:d3:
         6b:4a:38:c5:5b:cc:bb:fb:ad:56:7c:c2:0f:27:a3:67:57:2e:
         4c:b7:f3:eb:f3:55:ad:e1:da:f2:c3:b6:1a:f4:69:a9:1c:f4:
         2e:06:18:3e:4b:a3:cd:85:32:66:09:c5:c7:ae:b2:47:8d:12:
         08:ab:97:83:fb:f5:63:5b:c9:4c:13:df:88:96:c5:21:3a:c4:
         2c:1d:21:1e:a8:25:1e:5b:be:76:cf:62:90:ad:a9:97:48:d9:
         eb:17:4d:25:90:9c:da:06:7d:07:1c:22:6e:67:56:40:c8:99:
         ef:1e:62:e3:18:04:ef:fc:09:6c:be:13:85:fa:a6:7d:60:b0:
         5b:51:5b:1d:cf:6d:84:06:70:20:84:00:a7:51:2f:05:24:d5:
         63:97:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:10 2025 by rpki-client