Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bdb657ce-7bc3-3b41-a9b6-efec7e6119d9.roa
File:                     bdb657ce-7bc3-3b41-a9b6-efec7e6119d9.roa (raw, json)
Hash identifier:          uhRduIn/EcWR4V9OCaBtEY7aIOt26OdocGw9EFyUsYg=
Subject key identifier:   6B:CC:68:E2:76:FE:2C:12:C3:69:27:0B:CD:2A:3E:8F:09:CF:DE:FC
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285848A830B593760FE1D8D76B4AC0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bdb657ce-7bc3-3b41-a9b6-efec7e6119d9.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     14537
IP address blocks:        198.37.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:b5:93:76:0f:e1:d8:d7:6b:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=30cedc44-452c-4f08-b167-7453603b94ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:ad:90:c1:7a:17:73:c8:60:2c:9a:2f:ef:
                    9c:a9:9c:b3:61:e4:f9:f8:48:ad:33:ef:6c:c2:bf:
                    1b:c8:ab:df:f4:fb:6e:19:df:e3:99:b9:d1:e7:1c:
                    1c:69:e6:f0:24:a2:80:d0:df:8a:d7:3f:87:a8:07:
                    f4:11:e4:0a:1e:15:5a:03:ca:9d:bb:21:77:75:8e:
                    15:8c:70:d3:f5:47:f3:5c:f6:0d:69:65:f9:aa:eb:
                    42:77:9e:f0:a5:3b:b0:5b:1c:48:dc:07:b3:a6:b8:
                    4f:70:57:e9:c1:a6:02:fa:0a:ef:f5:f2:24:24:44:
                    a5:81:2b:f0:f5:3b:8b:a4:b4:c0:dd:56:29:f3:ac:
                    12:aa:aa:16:ff:5d:2b:7f:97:27:97:80:08:09:15:
                    80:0c:3a:6e:16:52:13:2e:e5:f1:8a:49:12:e9:3a:
                    96:8a:a9:ec:e9:46:15:ff:bb:5b:53:2f:46:5b:f3:
                    c3:6c:b8:a2:10:01:00:59:6f:91:02:7e:b9:7a:d9:
                    d3:34:f9:7a:11:c8:c7:02:c6:a5:34:f8:b1:5f:db:
                    62:98:29:92:fe:0c:dd:00:e3:28:54:ce:cf:44:90:
                    49:fd:5b:55:6a:76:4c:e4:e6:be:59:72:65:f7:0b:
                    81:c1:cc:77:f4:10:f5:89:e3:c2:37:7d:b1:b5:15:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CC:68:E2:76:FE:2C:12:C3:69:27:0B:CD:2A:3E:8F:09:CF:DE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bdb657ce-7bc3-3b41-a9b6-efec7e6119d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:17:b6:65:b7:aa:15:b1:b9:96:87:0d:0f:45:ce:aa:c0:
         3f:c5:4a:49:8c:4e:90:d6:cc:fb:a8:4a:46:8c:ad:e1:c4:37:
         f7:ad:e6:65:35:ca:c1:e4:f9:e0:39:a6:af:8a:91:67:39:67:
         54:eb:79:f8:eb:56:ee:a2:96:18:35:f6:1b:dc:2d:20:c0:0d:
         67:60:20:bd:f3:92:94:9e:16:7e:73:68:21:96:1c:d5:a4:e7:
         d4:e5:10:63:9b:f2:a9:e0:17:72:63:84:fd:e7:64:d2:34:7f:
         f9:0f:f5:f9:6e:90:18:3d:a7:00:0d:d3:d1:d8:98:d3:12:a8:
         22:ea:28:3a:2d:5b:49:71:2c:ae:95:7d:c6:ab:3c:d1:8b:e7:
         3a:9b:d0:d4:82:ba:66:61:cf:28:72:11:83:1a:a4:42:d8:f0:
         a7:55:f7:ab:5d:46:c4:af:1f:c7:ba:d1:b4:2a:d5:19:2f:ba:
         f0:da:1e:56:63:0f:b6:c6:da:bf:0d:e6:4e:a5:d9:be:6a:f3:
         c6:31:58:c5:bb:41:f9:a9:48:1a:8d:7f:da:cf:6e:33:1b:28:
         27:1f:a0:50:80:60:51:89:2d:23:40:51:3e:84:2e:9d:e6:7d:
         2c:80:1a:15:3e:a6:0b:cb:55:09:d1:51:26:5d:b7:3a:ee:88:
         a8:70:c2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:23 2025 by rpki-client