Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1003e593-be44-33da-81cb-ac3b31144652.roa
File:                     1003e593-be44-33da-81cb-ac3b31144652.roa (raw, json)
Hash identifier:          SQ3qgGMBystNEZb+O3O8YbOPgRb8H0RgtsY0qDoNc/8=
Subject key identifier:   02:D8:67:E1:5B:C8:4E:A7:89:AB:EE:D6:B4:23:4D:E3:6C:04:B7:C1
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584B5F372D67DFD3E6AF5A803F00
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1003e593-be44-33da-81cb-ac3b31144652.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        155.226.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:2d:67:df:d3:e6:af:5a:80:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=0c4ba7d0-8a6f-4035-abc2-7b8e654eb938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:43:4c:ec:93:6b:d5:aa:09:04:58:ae:1f:
                    b7:b9:e3:a8:f7:17:99:35:13:6f:3f:8b:ab:92:96:
                    f4:85:c8:a4:92:49:3d:de:9d:e3:32:01:5e:e4:a6:
                    8f:10:aa:78:39:59:c5:70:40:ec:83:cf:d5:0d:1e:
                    b5:f6:d4:1f:f4:ab:49:5b:74:70:e6:7c:e6:6b:57:
                    5d:e8:b2:11:cd:c0:9d:d8:8b:d4:23:10:48:1d:2a:
                    79:0f:99:13:20:ce:29:2e:f5:8b:a8:1c:c5:72:20:
                    72:cb:0f:cb:8e:3e:9b:9c:05:d2:bd:e9:45:82:9b:
                    9a:1c:83:d5:0a:e5:22:f5:85:2f:46:87:c3:26:aa:
                    84:ce:fa:ae:a6:4a:14:cb:51:10:45:73:ed:86:a5:
                    ce:dd:f2:27:3d:5b:71:92:15:c6:f1:0d:99:d3:c7:
                    2d:bc:66:03:5f:89:cb:6f:8a:18:17:32:52:f7:e8:
                    72:dc:32:52:d7:3c:64:ee:99:b6:1d:b3:5f:31:cf:
                    8d:17:99:ce:ef:25:84:43:22:9c:b3:36:90:1f:40:
                    3f:79:81:33:7e:39:ff:37:14:68:30:b6:07:25:fa:
                    92:b8:b2:72:62:96:b0:b4:1f:82:44:73:20:5c:7e:
                    6c:07:30:aa:12:40:d9:cf:d4:02:7e:8d:7e:52:be:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D8:67:E1:5B:C8:4E:A7:89:AB:EE:D6:B4:23:4D:E3:6C:04:B7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1003e593-be44-33da-81cb-ac3b31144652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:22:09:42:ba:da:d0:e9:e8:ef:14:4d:c1:e5:05:58:51:2c:
         6a:73:b6:a9:c6:c5:8f:43:14:c3:4e:ef:dc:11:4c:4a:f0:e6:
         e5:5c:48:ba:c0:84:91:58:4f:b7:76:7f:5c:d5:94:82:0c:d6:
         48:02:6d:d5:28:dc:83:e7:29:13:0b:8f:e7:a6:b1:48:8b:5c:
         3c:d9:e3:3e:d8:0f:e1:16:1c:09:74:15:91:7b:c1:96:40:2c:
         53:5e:19:75:cd:1a:a6:1a:21:e1:85:df:49:ec:66:13:5c:49:
         51:54:90:63:d5:03:13:b7:d1:35:25:e8:74:8a:2a:fe:11:d5:
         cd:ec:05:65:92:0a:17:2a:03:86:8a:d4:03:af:ab:69:7e:78:
         23:08:b9:ce:95:b0:bf:13:48:97:bc:13:4e:95:27:9f:d0:52:
         ea:de:f8:f3:9c:30:31:10:d0:71:99:dd:80:e7:52:f5:e2:ab:
         14:87:67:15:76:f9:7a:76:a6:b4:87:0b:9d:4f:85:47:4e:d4:
         7f:c5:67:fd:81:80:66:f8:a0:c0:7c:bf:01:17:39:5b:aa:1a:
         69:c1:56:15:a7:c9:f0:48:be:b9:c4:6d:31:f8:a9:8c:52:05:
         60:dd:eb:f6:a7:70:8c:e0:d5:93:65:8d:6e:b1:ed:03:04:42:
         6e:e5:37:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNy1n39Pmr1qAPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
MGM0YmE3ZDAtOGE2Zi00MDM1LWFiYzItN2I4ZTY1NGViOTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM9DTOyTa9WqCQRYrh+3ueOo9xeZNRNvP4ur
kpb0hcikkkk93p3jMgFe5KaPEKp4OVnFcEDsg8/VDR619tQf9KtJW3Rw5nzma1dd
6LIRzcCd2IvUIxBIHSp5D5kTIM4pLvWLqBzFciByyw/Ljj6bnAXSvelFgpuaHIPV
CuUi9YUvRofDJqqEzvqupkoUy1EQRXPthqXO3fInPVtxkhXG8Q2Z08ctvGYDX4nL
b4oYFzJS9+hy3DJS1zxk7pm2HbNfMc+NF5nO7yWEQyKcszaQH0A/eYEzfjn/NxRo
MLYHJfqSuLJyYpawtB+CRHMgXH5sBzCqEkDZz9QCfo1+Ur6rvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFALYZ+FbyE6niavu1rQjTeNsBLfBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMTAwM2U1OTMtYmU0NC0z
M2RhLTgxY2ItYWMzYjMxMTQ0NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm+IgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJgiCUK62tDp6O8UTcHlBVhRLGpztqnGxY9DFMNO79wRTErw5uVcSLrA
hJFYT7d2f1zVlIIM1kgCbdUo3IPnKRMLj+emsUiLXDzZ4z7YD+EWHAl0FZF7wZZA
LFNeGXXNGqYaIeGF30nsZhNcSVFUkGPVAxO30TUl6HSKKv4R1c3sBWWSChcqA4aK
1AOvq2l+eCMIuc6VsL8TSJe8E06VJ5/QUure+POcMDEQ0HGZ3YDnUvXiqxSHZxV2
+Xp2prSHC51PhUdO1H/FZ/2BgGb4oMB8vwEXOVuqGmnBVhWnyfBIvrnEbTH4qYxS
BWDd6/ancIzg1ZNljW6x7QMEQm7lN7Q=
-----END CERTIFICATE-----
Generated at Sat Oct 18 04:17:59 2025 by rpki-client