Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26286.roa
File:                     AS26286.roa (raw, json)
Hash identifier:          YUaHiJWGmZTmZK71epqTVhIgc6PLqyQzZ/TiLinruS0=
Subject key identifier:   55:FB:67:46:2F:C9:AC:43:AC:85:8F:99:53:C1:5A:F9:1B:14:23:74
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5A2F5D6715B7335758B381400D066FCCFA9D4EA9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26286.roa
Signing time:             Wed 25 Jun 2025 20:25:10 +0000
ROA not before:           Wed 25 Jun 2025 20:20:10 +0000
ROA not after:            Wed 24 Jun 2026 20:25:10 +0000
asID:                     26286
IP address blocks:        157.254.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 20:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2f:5d:67:15:b7:33:57:58:b3:81:40:0d:06:6f:cc:fa:9d:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 25 20:20:10 2025 GMT
            Not After : Jun 24 20:25:10 2026 GMT
        Subject: CN=55FB67462FC9AC43AC858F9953C15AF91B142374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:b5:8c:a3:2e:2a:fe:78:0c:be:af:b1:69:
                    10:15:2a:bc:b2:80:a6:14:cc:72:38:5a:c3:4c:cc:
                    f6:af:12:d4:69:c6:55:27:fd:3e:d6:b6:c1:8d:2a:
                    30:7f:af:cb:00:e7:1c:f1:93:49:f1:c1:f7:4c:6d:
                    fc:73:e3:88:b4:61:cc:8f:34:5e:02:9f:9a:2b:14:
                    d0:75:d8:e0:b9:d3:86:93:0e:5c:81:3e:da:b1:3d:
                    ab:36:d9:0c:fc:6b:a2:4f:89:b2:96:86:d5:21:be:
                    e2:b9:7b:d9:2a:3f:e0:2f:be:7c:6a:26:71:26:8d:
                    01:b2:eb:a6:5a:5f:f0:79:c9:cb:24:a8:db:08:01:
                    a6:ec:ad:6c:99:31:4c:27:ae:3b:44:6c:6e:9e:20:
                    0d:cd:50:c0:c8:8c:46:f6:c9:5e:95:30:45:08:74:
                    ec:6b:b4:7a:cb:d3:81:c5:7d:68:59:da:3d:56:2d:
                    77:af:91:9a:1d:82:52:4d:d7:b6:bf:55:06:51:06:
                    65:38:85:19:8a:8e:99:38:7e:a2:fd:84:5a:58:98:
                    92:43:7f:6f:ff:c5:75:72:bb:3b:8c:02:0a:ef:c9:
                    77:fa:e6:85:77:05:9b:d6:e3:b1:ef:09:37:97:24:
                    df:b5:4a:32:e4:69:76:79:67:35:65:a7:2c:09:1e:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FB:67:46:2F:C9:AC:43:AC:85:8F:99:53:C1:5A:F9:1B:14:23:74
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:0f:39:6d:ab:95:0a:d2:2d:f7:07:bb:26:2c:6d:3f:35:c8:
         2c:ef:e7:80:41:c3:9c:48:72:09:97:75:51:a3:76:16:39:84:
         b1:49:b1:00:db:b7:ad:36:ce:7d:e7:41:42:b4:6f:df:df:f2:
         11:ed:1c:d3:83:36:99:0f:cc:81:85:87:d7:29:11:6b:76:2f:
         2d:51:6c:7e:e6:b7:5a:4b:7f:7a:80:2c:9c:da:5e:f6:d3:63:
         2d:b8:ea:ad:60:ed:0c:f0:a0:21:b5:b5:a6:41:0a:62:6f:ee:
         a3:07:61:c4:4d:f4:5d:c9:39:cd:db:bd:a0:dd:f6:61:2d:78:
         ae:c9:9f:85:90:94:92:27:4a:6a:c7:0c:4a:58:7c:3c:5a:19:
         4d:ac:11:71:f4:54:b2:f3:d4:84:71:d4:6b:d6:78:e6:19:86:
         01:aa:26:17:4f:48:b1:bd:14:88:b6:c8:e9:2b:13:7d:9e:6b:
         07:3e:07:4e:2a:26:16:f5:47:c7:36:34:9d:7e:28:7f:fb:6b:
         d6:27:07:4a:46:e3:3c:36:c5:06:19:ba:bc:50:75:bb:e4:27:
         5b:58:2a:61:fc:8d:46:57:90:6d:26:85:17:d2:97:bd:c2:d8:
         23:58:81:2f:5b:a3:3b:0e:db:ba:31:e1:2d:d5:b0:45:52:15:
         95:f9:3c:0d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUWi9dZxW3M1dYs4FADQZvzPqdTqkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNjI1MjAyMDEwWhcNMjYwNjI0MjAyNTEw
WjAzMTEwLwYDVQQDEyg1NUZCNjc0NjJGQzlBQzQzQUM4NThGOTk1M0MxNUFGOTFC
MTQyMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHK1jKMuKv54
DL6vsWkQFSq8soCmFMxyOFrDTMz2rxLUacZVJ/0+1rbBjSowf6/LAOcc8ZNJ8cH3
TG38c+OItGHMjzReAp+aKxTQddjgudOGkw5cgT7asT2rNtkM/GuiT4mylobVIb7i
uXvZKj/gL758aiZxJo0BsuumWl/wecnLJKjbCAGm7K1smTFMJ647RGxuniANzVDA
yIxG9slelTBFCHTsa7R6y9OBxX1oWdo9Vi13r5GaHYJSTde2v1UGUQZlOIUZio6Z
OH6i/YRaWJiSQ39v/8V1crs7jAIK78l3+uaFdwWb1uOx7wk3lyTftUoy5Gl2eWc1
ZacsCR5Q8QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFX7Z0YvyaxDrIWPmVPBWvkb
FCN0MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzI2Mjg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7bMA0GCSqGSIb3DQEBCwUAA4IB
AQAoDzltq5UK0i33B7smLG0/Ncgs7+eAQcOcSHIJl3VRo3YWOYSxSbEA27etNs59
50FCtG/f3/IR7RzTgzaZD8yBhYfXKRFrdi8tUWx+5rdaS396gCyc2l7202MtuOqt
YO0M8KAhtbWmQQpib+6jB2HETfRdyTnN272g3fZhLXiuyZ+FkJSSJ0pqxwxKWHw8
WhlNrBFx9FSy89SEcdRr1njmGYYBqiYXT0ixvRSItsjpKxN9nmsHPgdOKiYW9UfH
NjSdfih/+2vWJwdKRuM8NsUGGbq8UHW75CdbWCph/I1GV5BtJoUX0pe9wtgjWIEv
W6M7Dtu6MeEt1bBFUhWV+TwN
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:36:02 2025 by rpki-client