Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa
File:                     d8ec290c-925e-31d6-8996-1edd8ee927ed.roa (raw, json)
Hash identifier:          JhVA8DhxAOr7KVJpBmpfk6cCe1Jaf+MkJoWLasuNv7E=
Subject key identifier:   58:35:EC:7F:91:B1:C9:01:1E:21:D9:E9:EA:3A:40:E3:EF:78:7D:6D
Certificate issuer:       /CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
Certificate serial:       010D0C9F4328584B6632027720A6F84806DA89A0
Authority key identifier: D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     19189
IP address blocks:        198.148.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:02:77:20:a6:f8:48:06:da:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=b6b6eb18-bfa9-4f03-b59d-19b4869595d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:2c:26:ad:2f:69:62:e3:75:e3:8e:e9:5d:
                    2e:c9:95:e5:38:79:b6:9b:fa:a8:98:15:92:00:1b:
                    1d:7c:11:30:a8:4d:9f:05:c7:98:9c:da:e6:10:4a:
                    43:a6:dd:6a:90:e1:cc:44:0d:13:b3:5f:f1:b2:dc:
                    26:81:32:59:cf:27:41:7d:fe:fa:d3:27:72:f7:48:
                    85:a7:1f:68:b1:96:35:dc:4e:39:bc:87:95:43:89:
                    70:39:80:e1:c0:cc:1b:18:fc:f9:43:5b:e7:82:7c:
                    40:ba:2d:73:a2:3a:4c:e4:30:cf:df:17:a8:a0:c6:
                    a9:8a:17:82:36:ea:3e:2f:87:d4:7a:de:06:30:f5:
                    a7:31:bc:79:db:48:68:dd:4c:b8:fa:36:46:49:b5:
                    cb:51:53:69:c1:09:b2:ba:96:b1:73:03:36:aa:57:
                    c9:ed:72:86:06:3a:25:b7:18:a2:8a:fc:14:fe:11:
                    5c:70:84:2a:33:69:3c:44:92:aa:90:95:72:fe:42:
                    61:70:27:0d:cb:44:61:05:94:67:03:0b:fb:c4:0f:
                    b9:88:8c:72:02:51:67:dc:c6:65:26:2c:6a:66:00:
                    b7:66:35:0a:8d:3f:1b:8c:23:57:2d:c8:97:94:de:
                    43:02:bd:43:63:cb:92:b3:f3:fe:0c:8f:49:f8:e7:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:EC:7F:91:B1:C9:01:1E:21:D9:E9:EA:3A:40:E3:EF:78:7D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:22:d9:53:a6:9c:66:2e:39:41:51:b0:a4:74:40:32:25:62:
         25:53:f2:76:41:9d:13:22:67:0f:4c:da:fd:15:53:03:de:1f:
         ef:5a:72:99:b2:72:2f:78:ba:b8:07:1a:c3:74:1f:e0:2b:d5:
         cb:8c:62:81:83:ea:7c:1b:41:cf:27:87:ac:a6:d7:30:51:cf:
         05:15:d7:c4:d1:60:8e:29:a1:15:39:67:26:8b:02:3a:97:67:
         0c:f9:c9:93:f1:75:33:d0:64:a3:d4:d0:2c:18:ba:49:72:54:
         03:23:87:17:d7:cf:e1:54:f1:e4:ab:19:ba:a2:7d:46:e2:86:
         59:96:ca:28:65:16:2c:f8:4a:bd:50:aa:6f:be:79:b8:a1:50:
         5d:54:80:9e:f4:fa:17:b2:ed:d1:96:b6:0c:14:40:c3:8f:14:
         6d:f1:29:c3:9f:a9:13:02:55:9f:ad:bd:4d:e7:d1:60:f2:e7:
         f8:20:7e:f4:f8:eb:b7:4b:90:e0:64:00:40:3f:00:a4:57:e3:
         f5:05:4e:b8:e7:17:88:53:36:00:b5:3e:c7:6a:31:22:8f:52:
         c0:9a:17:29:05:6a:b9:b1:c9:f4:ef:bc:50:89:f1:50:89:9e:
         0e:5a:ee:90:45:38:06:45:6c:4a:21:6b:0d:77:30:5b:aa:76:
         45:14:a6:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgJ3IKb4SAbaiaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNjNDlkMmYtMzNmMC00MmY3LWJjNjEtYjQxODdkZDE1
NWE4MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
YjZiNmViMTgtYmZhOS00ZjAzLWI1OWQtMTliNDg2OTU5NWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY8sJq0vaWLjdeOO6V0uyZXlOHm2m/qomBWS
ABsdfBEwqE2fBceYnNrmEEpDpt1qkOHMRA0Ts1/xstwmgTJZzydBff760ydy90iF
px9osZY13E45vIeVQ4lwOYDhwMwbGPz5Q1vngnxAui1zojpM5DDP3xeooMapiheC
Nuo+L4fUet4GMPWnMbx520ho3Uy4+jZGSbXLUVNpwQmyupaxcwM2qlfJ7XKGBjol
txiiivwU/hFccIQqM2k8RJKqkJVy/kJhcCcNy0RhBZRnAwv7xA+5iIxyAlFn3MZl
JixqZgC3ZjUKjT8bjCNXLciXlN5DAr1DY8uSs/P+DI9J+OegjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg17H+RsckBHiHZ6eo6QOPveH1tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iY2M0
OWQyZi0zM2YwLTQyZjctYmM2MS1iNDE4N2RkMTU1YTgvZDhlYzI5MGMtOTI1ZS0z
MWQ2LTg5OTYtMWVkZDhlZTkyN2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmNjNDlkMmYtMzNmMC00MmY3LWJj
NjEtYjQxODdkZDE1NWE4L2JjYzQ5ZDJmLTMzZjAtNDJmNy1iYzYxLWI0MTg3ZGQx
NTVhOC5jcmwwHwYDVR0jBBgwFoAU1B7WMnAssvAh8aCR/IgOcmJyThYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iY2M0OWQyZi0zM2YwLTQyZjctYmM2MS1iNDE4
N2RkMTU1YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpQaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEi2VOmnGYuOUFRsKR0QDIlYiVT8nZBnRMiZw9M2v0VUwPeH+9acpmy
ci94urgHGsN0H+Ar1cuMYoGD6nwbQc8nh6ym1zBRzwUV18TRYI4poRU5ZyaLAjqX
Zwz5yZPxdTPQZKPU0CwYuklyVAMjhxfXz+FU8eSrGbqifUbihlmWyihlFiz4Sr1Q
qm++ebihUF1UgJ70+hey7dGWtgwUQMOPFG3xKcOfqRMCVZ+tvU3n0WDy5/ggfvT4
67dLkOBkAEA/AKRX4/UFTrjnF4hTNgC1PsdqMSKPUsCaFykFarmxyfTvvFCJ8VCJ
ng5a7pBFOAZFbEohaw13MFuqdkUUpgM=
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:18:55 2025 by rpki-client