Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
File:                     25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa (raw, json)
Hash identifier:          TZXrqEA9HT2P5Tk/ALL+6cKbunycCaQFiS8/d4R6AqE=
Subject key identifier:   CC:84:52:99:C1:3C:4A:19:E0:B1:CA:B6:45:E9:86:D2:D6:43:78:7B
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584950F95D0ACEDE72E0A3064D00
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     701
IP address blocks:        198.37.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:5d:0a:ce:de:72:e0:a3:06:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=47920d66-ea24-4943-890e-38df603a4d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:86:98:0e:97:02:26:0b:a7:57:0a:dd:2c:
                    27:88:cd:98:47:c9:3f:2a:98:57:2b:07:61:02:ae:
                    ae:f5:50:88:be:f6:76:33:1c:f5:c5:42:41:75:fa:
                    ba:7a:27:20:a2:20:12:c3:48:08:c7:36:01:28:d4:
                    3d:d1:a0:fd:12:7b:c6:e4:4f:27:a2:a1:06:1c:a9:
                    cc:51:7f:19:b1:1f:44:02:a5:f1:5c:27:bf:30:e4:
                    de:fc:2c:2c:67:ff:93:b4:01:2e:ca:13:82:dd:96:
                    a7:76:53:09:f8:5a:c1:75:3a:03:0c:bf:a4:1f:76:
                    2e:12:2a:63:f3:1c:82:42:f2:06:95:d5:cd:59:c6:
                    cd:88:30:73:aa:bd:3d:f5:bb:8b:8b:21:2f:61:13:
                    69:9a:c4:d9:a3:7a:37:9b:51:91:fd:ae:a4:8c:bd:
                    bb:87:7a:60:36:d8:43:6f:fb:74:ef:43:f8:bd:d0:
                    1a:11:e3:2b:da:20:64:f8:a9:77:5a:f7:84:96:81:
                    84:ea:c8:0e:ee:55:74:3a:ae:31:c2:37:ff:6c:30:
                    4d:3d:6d:f6:71:7f:15:2d:91:3f:0a:c0:60:ed:06:
                    df:5f:9b:54:a8:e2:a2:27:06:3e:93:60:44:34:c1:
                    e4:f1:be:fd:93:89:b4:d7:81:3d:e9:72:d6:b6:5f:
                    ac:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:84:52:99:C1:3C:4A:19:E0:B1:CA:B6:45:E9:86:D2:D6:43:78:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:53:b6:ea:ef:47:f3:44:e0:16:40:fe:a8:74:23:89:4c:50:
         97:87:87:31:20:d4:6a:53:64:16:08:81:fb:f9:d5:49:fe:96:
         19:c9:2e:ff:e6:31:9e:49:7c:2c:71:76:3d:0a:c2:1a:28:c9:
         91:a1:95:70:53:99:be:4e:dd:77:5c:7f:a1:58:ac:7e:87:0b:
         4e:f6:5f:22:9b:d7:0d:29:a1:aa:30:b3:03:88:34:7c:78:d0:
         69:f8:50:a1:9d:53:ea:2c:a9:84:75:a6:44:25:9c:2c:21:2e:
         ef:ce:3d:cc:d6:43:c4:71:40:80:7a:69:c1:71:53:b6:d7:6a:
         16:7b:cd:c3:7c:4c:c3:74:c8:48:92:0e:fc:d8:b4:7d:0a:a7:
         00:0d:81:c3:97:9b:21:4c:cb:16:93:14:7d:0e:04:7e:28:9b:
         24:95:c2:fb:75:59:17:1b:11:3c:20:92:c1:d0:0b:c2:05:25:
         12:49:fb:37:33:97:ae:a9:bb:ca:97:c3:f3:85:2a:1d:c0:be:
         5d:bf:60:dd:b3:69:40:c6:4f:cd:05:a5:b1:90:b1:6d:0a:5b:
         00:07:69:05:2a:2b:85:20:4c:af:c1:e8:4f:5d:cb:0d:49:9a:
         91:3b:f5:d2:7e:e7:e1:b4:59:b2:61:5f:18:8c:c3:2b:9f:70:
         7b:90:b4:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+V0Kzt5y4KMGTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
NDc5MjBkNjYtZWEyNC00OTQzLTg5MGUtMzhkZjYwM2E0ZDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldWGmA6XAiYLp1cK3SwniM2YR8k/KphXKwdh
Aq6u9VCIvvZ2Mxz1xUJBdfq6eicgoiASw0gIxzYBKNQ90aD9EnvG5E8noqEGHKnM
UX8ZsR9EAqXxXCe/MOTe/CwsZ/+TtAEuyhOC3ZandlMJ+FrBdToDDL+kH3YuEipj
8xyCQvIGldXNWcbNiDBzqr099buLiyEvYRNpmsTZo3o3m1GR/a6kjL27h3pgNthD
b/t070P4vdAaEeMr2iBk+Kl3WveEloGE6sgO7lV0Oq4xwjf/bDBNPW32cX8VLZE/
CsBg7QbfX5tUqOKiJwY+k2BENMHk8b79k4m014E96XLWtl+snQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyEUpnBPEoZ4LHKtkXphtLWQ3h7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvMjVmM2VjZGItNTE5NS0z
NTE3LWI4YjYtZWY1NjIwOTJmNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNTturvR/NE4BZA/qh0I4lMUJeHhzEg1GpTZBYIgfv51Un+lhnJLv/m
MZ5JfCxxdj0KwhooyZGhlXBTmb5O3Xdcf6FYrH6HC072XyKb1w0poaowswOINHx4
0Gn4UKGdU+osqYR1pkQlnCwhLu/OPczWQ8RxQIB6acFxU7bXahZ7zcN8TMN0yEiS
DvzYtH0KpwANgcOXmyFMyxaTFH0OBH4omySVwvt1WRcbETwgksHQC8IFJRJJ+zcz
l66pu8qXw/OFKh3Avl2/YN2zaUDGT80FpbGQsW0KWwAHaQUqK4UgTK/B6E9dyw1J
mpE79dJ+5+G0WbJhXxiMwyufcHuQtAI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:05 2025 by rpki-client