Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa
File:                     d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa (raw, json)
Hash identifier:          vOjVOrKYEWZKGAY8xnALDTe3mhDQE4RFcZ+GE3ObyaY=
Subject key identifier:   19:8D:2A:CD:E1:A6:5A:6A:81:32:56:6F:14:22:56:C7:FE:69:65:04
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584A8B0B509F6FBD728F13E305C0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     19691
IP address blocks:        198.37.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:50:9f:6f:bd:72:8f:13:e3:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=60b498bf-d36f-49ea-9963-74547583aa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:c4:93:95:5d:dd:32:b6:98:4c:09:85:74:
                    a1:30:26:ae:cc:a3:a0:10:dc:ca:83:47:a8:ce:18:
                    62:d6:23:42:56:8a:a8:73:33:80:62:5f:b7:47:15:
                    44:54:5d:21:bf:15:7d:c1:87:4c:76:94:12:f3:44:
                    4f:f8:cb:b9:66:00:6c:84:02:ec:f9:7a:7d:c8:64:
                    95:a7:cc:f8:f6:68:16:04:7c:86:38:6a:20:2e:cc:
                    30:c2:1d:41:3f:e6:4d:8a:46:34:79:bd:dd:88:80:
                    8d:41:78:a6:9e:2c:78:7b:4e:62:ed:73:09:60:dd:
                    6d:f6:b8:fa:cd:a7:b5:30:5e:8b:9e:37:5d:95:61:
                    b2:c2:fc:0a:1b:65:04:fd:4a:94:07:72:68:fa:60:
                    da:9d:f0:65:c8:ff:73:af:39:68:dc:d2:57:2b:a2:
                    af:a7:db:0a:ef:e4:61:32:82:26:69:3a:8b:ea:25:
                    99:c2:d2:9a:df:ec:a4:f0:ec:05:b1:58:b8:28:14:
                    60:c4:e3:22:ef:52:fe:94:28:83:aa:f1:99:0d:1a:
                    21:4b:0b:2e:af:7b:7b:22:8c:1c:ab:b9:c6:7b:70:
                    53:a3:4c:c6:80:c8:4a:43:ec:2c:a5:25:9a:fc:7e:
                    94:e8:03:3d:3d:e2:5d:1d:a7:ec:a4:bb:01:19:26:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8D:2A:CD:E1:A6:5A:6A:81:32:56:6F:14:22:56:C7:FE:69:65:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:cd:0d:56:e7:49:5e:9f:b0:89:1b:8c:85:e3:ed:02:79:
         bb:64:81:47:dc:9c:db:14:aa:9e:cf:2c:15:77:84:ef:f8:17:
         88:dc:b8:93:d5:9f:54:5d:a1:60:2a:4c:79:80:3a:b0:11:c0:
         04:68:47:f1:fc:9f:e9:c4:47:1f:37:7e:fa:8b:2d:21:b9:b6:
         e9:2b:bd:55:31:aa:5d:96:73:b5:c5:2d:6f:a3:90:fa:b6:13:
         3d:45:dc:cc:74:50:d4:a5:b8:5c:b0:05:f2:91:ab:1d:f9:8e:
         47:91:ab:60:16:d3:f9:47:56:29:1c:b9:ce:05:69:ff:49:d1:
         d2:4d:23:70:2c:ed:a0:04:18:5b:da:c1:93:eb:8d:bf:fa:48:
         cb:82:2d:25:5b:87:74:04:d2:1b:59:4b:99:8a:02:1b:9d:2b:
         c7:e8:a4:0a:97:2d:4d:24:4c:97:08:0f:39:6f:e8:ca:33:91:
         99:0e:89:e0:67:3b:a4:03:d8:b4:0f:bf:2c:05:b3:62:b7:56:
         59:2b:bf:ee:ac:c4:f5:13:1c:1c:94:8e:d1:13:04:b8:2a:4a:
         27:3f:59:36:98:d5:83:0f:86:88:ae:71:e3:19:10:2c:cf:dc:
         a4:9e:11:cf:95:32:2e:a7:7f:ee:41:b9:89:a3:ad:55:c3:45:
         24:e9:c1:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1Cfb71yjxPjBcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
NjBiNDk4YmYtZDM2Zi00OWVhLTk5NjMtNzQ1NDc1ODNhYTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBTEk5Vd3TK2mEwJhXShMCauzKOgENzKg0eo
zhhi1iNCVoqoczOAYl+3RxVEVF0hvxV9wYdMdpQS80RP+Mu5ZgBshALs+Xp9yGSV
p8z49mgWBHyGOGogLswwwh1BP+ZNikY0eb3diICNQXimnix4e05i7XMJYN1t9rj6
zae1MF6LnjddlWGywvwKG2UE/UqUB3Jo+mDanfBlyP9zrzlo3NJXK6Kvp9sK7+Rh
MoImaTqL6iWZwtKa3+yk8OwFsVi4KBRgxOMi71L+lCiDqvGZDRohSwsur3t7Iowc
q7nGe3BTo0zGgMhKQ+wspSWa/H6U6AM9PeJdHafspLsBGSapKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmNKs3hplpqgTJWbxQiVsf+aWUEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvZDVlNjIyZjItZmI2NC0z
YTdlLWIyNmYtYzdiYzVkZjQxMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHTzQ1W50len7CJG4yF4+0CebtkgUfcnNsUqp7PLBV3hO/4F4jcuJPV
n1RdoWAqTHmAOrARwARoR/H8n+nERx83fvqLLSG5tukrvVUxql2Wc7XFLW+jkPq2
Ez1F3Mx0UNSluFywBfKRqx35jkeRq2AW0/lHVikcuc4Faf9J0dJNI3As7aAEGFva
wZPrjb/6SMuCLSVbh3QE0htZS5mKAhudK8fopAqXLU0kTJcIDzlv6MozkZkOieBn
O6QD2LQPvywFs2K3Vlkrv+6sxPUTHByUjtETBLgqSic/WTaY1YMPhoiuceMZECzP
3KSeEc+VMi6nf+5BuYmjrVXDRSTpweY=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:04 2025 by rpki-client