Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa
File:                     874651fe-9d9b-31da-8b16-7953e2aaf597.roa (raw, json)
Hash identifier:          qkfy575b3ONfRfxhh6Md6tK2YxRJWKCioAMwpGeQ7+w=
Subject key identifier:   A7:60:E7:A5:17:51:29:4A:29:8E:5B:B7:E5:5A:DA:19:6E:54:EC:04
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE59AF663402585C0B080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e5:9a:f6:63:40:25:85:c0:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6a0122ef-6db4-41d7-b3e9-c0c920584e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:d1:26:88:2b:3c:f4:f6:29:05:33:e5:77:
                    83:5a:a6:2f:ad:9a:1a:4f:6d:9d:cf:b4:e2:3b:f2:
                    1a:bd:95:7e:59:f4:c9:53:76:a8:40:c0:3d:7d:40:
                    de:c5:dc:40:aa:74:f8:6d:3e:d3:b8:51:00:60:56:
                    31:22:39:8e:2d:7e:3c:37:65:8e:93:d0:10:29:4b:
                    96:21:fe:a5:10:af:85:0a:d4:8d:da:03:66:0f:6c:
                    fe:06:d4:33:c0:15:1a:05:c5:04:1b:10:ba:f7:8f:
                    b3:cf:ac:1a:ec:fa:67:05:e7:a8:24:35:8c:c7:db:
                    7b:2c:ae:bb:77:34:ef:00:9a:f5:a2:90:0e:cb:f4:
                    fe:1f:7c:d8:5f:7e:64:5d:71:52:a7:49:88:42:c3:
                    e9:73:68:33:6b:18:6f:94:2c:5e:a2:cd:57:f3:f8:
                    f2:c6:43:39:98:c9:75:cc:83:cd:51:db:b6:73:44:
                    a5:7b:87:02:3f:d2:f0:1e:df:76:b3:d5:a9:16:36:
                    bf:76:bc:59:3a:71:12:24:15:be:22:ac:f9:ee:84:
                    47:78:a0:08:8c:54:ff:00:cc:59:2e:c3:a6:24:8c:
                    fd:74:36:c9:ea:c2:8b:f5:63:56:65:9e:6b:19:7c:
                    90:c6:e9:7e:1a:df:97:9e:2a:a6:a4:39:88:55:26:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:60:E7:A5:17:51:29:4A:29:8E:5B:B7:E5:5A:DA:19:6E:54:EC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:00:83:2c:80:da:80:5a:ee:aa:91:ff:a8:7e:38:74:c4:
         21:39:35:8a:30:1c:ee:57:87:43:9e:7e:3d:7a:84:c9:38:b5:
         7b:f4:49:43:30:f2:d1:1e:03:43:34:7b:e2:ee:25:d5:5a:c7:
         8c:e8:a8:df:41:d1:f1:39:cf:fe:26:d9:d2:10:5e:90:f0:aa:
         d1:b2:13:c5:d3:15:dc:31:f7:dd:6d:34:bf:ec:87:e4:19:5e:
         d5:32:55:4c:da:b5:16:67:f0:84:5a:90:0a:91:ae:af:81:f1:
         82:31:42:d5:f5:19:9f:ff:b7:73:bd:1d:7e:a9:10:80:a9:15:
         59:a2:42:d9:2e:63:64:b4:d8:12:bd:9c:fd:19:3f:cc:38:bc:
         4e:40:ea:fc:6a:dc:82:cd:63:f4:a5:f1:c2:82:9f:90:76:64:
         f5:0e:28:9d:2f:8e:85:9c:11:b7:12:a2:e6:86:9e:af:45:28:
         e0:00:12:8b:d9:6c:04:c0:2e:ef:be:5e:6d:72:ed:6a:c8:ec:
         f6:ce:63:01:8e:6e:da:93:63:9e:34:c3:f4:d4:d9:2a:1b:fc:
         3d:e1:9d:ef:9e:76:ea:a5:0f:c5:8c:66:ae:03:12:61:92:61:
         01:97:22:16:18:f3:a9:93:3c:74:27:ca:a4:7e:c0:43:ab:7a:
         91:f7:44:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeWa9mNAJYXAsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NmEwMTIyZWYtNmRiNC00MWQ3LWIzZTktYzBjOTIwNTg0ZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNDRJogrPPT2KQUz5XeDWqYvrZoaT22dz7Ti
O/IavZV+WfTJU3aoQMA9fUDexdxAqnT4bT7TuFEAYFYxIjmOLX48N2WOk9AQKUuW
If6lEK+FCtSN2gNmD2z+BtQzwBUaBcUEGxC694+zz6wa7PpnBeeoJDWMx9t7LK67
dzTvAJr1opAOy/T+H3zYX35kXXFSp0mIQsPpc2gzaxhvlCxeos1X8/jyxkM5mMl1
zIPNUdu2c0Sle4cCP9LwHt92s9WpFja/drxZOnESJBW+Iqz57oRHeKAIjFT/AMxZ
LsOmJIz9dDbJ6sKL9WNWZZ5rGXyQxul+Gt+XniqmpDmIVSZPGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdg56UXUSlKKY5bt+Va2hluVOwEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODc0NjUxZmUtOWQ5Yi0z
MWRhLThiMTYtNzk1M2UyYWFmNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGl7AIMsgNqAWu6qkf+ofjh0xCE5NYowHO5Xh0Oefj16hMk4tXv0SUMw
8tEeA0M0e+LuJdVax4zoqN9B0fE5z/4m2dIQXpDwqtGyE8XTFdwx991tNL/sh+QZ
XtUyVUzatRZn8IRakAqRrq+B8YIxQtX1GZ//t3O9HX6pEICpFVmiQtkuY2S02BK9
nP0ZP8w4vE5A6vxq3ILNY/Sl8cKCn5B2ZPUOKJ0vjoWcEbcSouaGnq9FKOAAEovZ
bATALu++Xm1y7WrI7PbOYwGObtqTY540w/TU2Sob/D3hne+eduqlD8WMZq4DEmGS
YQGXIhYY86mTPHQnyqR+wEOrepH3RJc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:27 2025 by rpki-client