Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
File:                     98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa (raw, json)
Hash identifier:          nZ+6KUgCBA9VmU+ETIymVjwhVNo0Ce3CL060GqL8M8k=
Subject key identifier:   14:01:B2:7B:E0:98:0D:5B:EB:A9:DF:C0:6C:4E:B9:CE:6E:E2:C4:DF
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584B110C00CCD874326249F16A00
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        198.37.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:00:cc:d8:74:32:62:49:f1:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=c780e458-1105-44fc-8206-f4848e2b9bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:59:14:6b:4c:39:99:3a:de:85:80:26:b0:
                    0a:46:39:b0:4f:db:46:0e:92:46:49:1f:a6:50:53:
                    be:a9:d6:d6:03:2d:22:ce:3f:89:b9:77:aa:61:86:
                    a9:46:41:5b:5d:d9:1f:35:34:c3:43:d4:d9:f0:08:
                    1d:db:9b:30:8a:33:ed:a2:2c:ec:50:6f:6a:99:51:
                    01:cd:d4:d5:65:52:11:bb:cf:72:d9:ee:63:1d:76:
                    cf:4b:3f:ca:5f:d9:12:74:36:2c:b4:d7:d2:bf:e4:
                    11:8b:bb:96:e7:b4:cd:cb:c6:d3:66:9c:5b:cc:ed:
                    50:6e:de:1f:81:68:08:85:b8:2c:8a:e2:15:0f:e9:
                    9e:d5:2c:ef:4c:48:5f:28:94:eb:73:c3:fb:51:7a:
                    bc:da:42:ee:6e:ef:c7:e4:32:83:53:ae:af:96:71:
                    1a:ab:d0:ea:69:1e:e5:f8:46:72:c6:95:a7:4b:e0:
                    44:e9:19:3d:af:55:d2:fc:12:c1:30:f5:78:c5:0f:
                    6a:32:7b:e3:1a:3a:4d:8f:25:59:e7:da:3c:e9:ef:
                    cf:a6:36:03:8a:43:0f:ad:66:d0:fd:7d:1f:b3:60:
                    ae:fd:88:30:5a:59:59:5e:c7:ea:42:47:c6:bd:2f:
                    6e:79:4b:49:c6:52:91:02:8e:15:5e:5b:ea:54:9d:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:B2:7B:E0:98:0D:5B:EB:A9:DF:C0:6C:4E:B9:CE:6E:E2:C4:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e2:59:bd:b7:36:92:52:ac:cd:49:f9:af:85:90:c1:46:a7:
         8a:fc:21:9a:52:de:03:e1:64:46:4c:c0:44:e3:20:78:44:ac:
         3b:27:cd:f8:c8:0b:26:05:0c:c2:5a:f2:83:2c:b8:5a:ee:a2:
         78:cb:27:5e:97:10:d2:5e:3f:20:4c:28:0e:ab:19:bb:e9:59:
         d3:40:9c:9e:db:b6:42:7f:48:0d:97:8a:69:65:c1:59:04:98:
         bf:f9:16:55:da:46:73:c7:51:49:3f:4e:50:58:85:c0:25:03:
         83:69:22:b7:a4:13:cd:4f:da:a9:ac:b7:89:18:c8:0e:11:b4:
         f7:65:27:9f:d2:89:bd:4b:6b:5a:47:bf:d5:ba:75:ed:fe:2e:
         47:f5:63:33:85:d7:e0:11:d2:7b:7e:3b:eb:a3:94:8b:64:c4:
         3f:0b:13:6d:13:df:ff:a9:a2:51:e5:d4:9f:a8:52:60:39:70:
         9c:67:d9:6f:92:41:e3:f7:8c:f9:ba:c1:cc:a2:22:eb:4e:42:
         1c:b0:9b:ce:84:b5:68:14:6d:d7:08:68:8c:14:6b:c9:1b:b5:
         b6:63:76:08:93:61:df:1f:78:ee:4f:6f:b5:fc:c6:86:70:d1:
         f4:72:3a:88:58:76:e9:95:ae:ed:42:ae:a9:c9:2d:07:ab:39:
         69:d5:f1:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDADM2HQyYknxagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
Yzc4MGU0NTgtMTEwNS00NGZjLTgyMDYtZjQ4NDhlMmI5YmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vBZFGtMOZk63oWAJrAKRjmwT9tGDpJGSR+m
UFO+qdbWAy0izj+JuXeqYYapRkFbXdkfNTTDQ9TZ8Agd25swijPtoizsUG9qmVEB
zdTVZVIRu89y2e5jHXbPSz/KX9kSdDYstNfSv+QRi7uW57TNy8bTZpxbzO1Qbt4f
gWgIhbgsiuIVD+me1SzvTEhfKJTrc8P7UXq82kLubu/H5DKDU66vlnEaq9DqaR7l
+EZyxpWnS+BE6Rk9r1XS/BLBMPV4xQ9qMnvjGjpNjyVZ59o86e/PpjYDikMPrWbQ
/X0fs2Cu/YgwWllZXsfqQkfGvS9ueUtJxlKRAo4VXlvqVJ0NuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQBsnvgmA1b66nfwGxOuc5u4sTfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvOThmM2FiMmQtZTU5Yi0z
ZTM5LTk4MTItMGUwNTFmOWQ2ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7iWb23NpJSrM1J+a+FkMFGp4r8IZpS3gPhZEZMwETjIHhErDsnzfjI
CyYFDMJa8oMsuFruonjLJ16XENJePyBMKA6rGbvpWdNAnJ7btkJ/SA2XimllwVkE
mL/5FlXaRnPHUUk/TlBYhcAlA4NpIrekE81P2qmst4kYyA4RtPdlJ5/Sib1La1pH
v9W6de3+Lkf1YzOF1+AR0nt+O+ujlItkxD8LE20T3/+polHl1J+oUmA5cJxn2W+S
QeP3jPm6wcyiIutOQhywm86EtWgUbdcIaIwUa8kbtbZjdgiTYd8feO5Pb7X8xoZw
0fRyOohYdumVru1CrqnJLQerOWnV8ec=
-----END CERTIFICATE-----
Generated at Sat Sep 6 22:38:32 2025 by rpki-client