Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d1a1d0b0-a062-33ea-95ef-6f49f11b6ba7.roa
File:                     d1a1d0b0-a062-33ea-95ef-6f49f11b6ba7.roa (raw, json)
Hash identifier:          eULptmj6hFdPmq3hyiBFGv4d4R0Tl9avWaSGrvXxURs=
Subject key identifier:   70:BE:4F:5A:57:4D:69:1B:87:A0:A1:D2:C3:2D:DA:ED:2E:AD:77:F1
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F432858489BA0B0C1F99F262182A07D00
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d1a1d0b0-a062-33ea-95ef-6f49f11b6ba7.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     14537
IP address blocks:        198.37.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b0:c1:f9:9f:26:21:82:a0:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=6be10373-a55a-487e-9801-80c032c52b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:59:ff:12:97:05:3d:ad:e6:b9:62:58:df:
                    41:44:2c:92:73:72:ca:b9:b7:36:25:3f:33:74:fd:
                    1e:d4:fe:52:56:cd:fa:cb:91:35:1b:53:99:e5:19:
                    64:93:3e:01:eb:a0:01:44:33:5a:a1:0d:e2:74:20:
                    6b:bd:e5:ae:28:ed:1c:2d:8f:56:13:10:dd:d0:ff:
                    4f:1b:e9:a1:51:49:da:e6:fb:74:56:35:11:c2:a8:
                    2b:11:58:2a:c4:70:d3:93:81:42:cc:d4:bd:39:70:
                    c2:9f:60:bb:d5:2a:6e:75:20:53:90:4a:fd:18:e8:
                    5d:40:30:cf:86:f4:06:d9:e8:ec:b8:66:be:ef:be:
                    f6:06:a9:80:8f:8a:19:02:c3:0f:c9:6a:f3:0f:21:
                    39:76:92:a5:af:81:d6:ff:ec:89:bd:3a:de:03:c5:
                    9d:e2:8c:46:24:ea:c6:a7:41:b5:09:78:1a:10:2f:
                    40:48:d8:32:5a:d6:b4:93:f2:41:8e:c9:61:1f:2a:
                    1b:88:09:25:40:41:01:bd:84:c3:db:74:12:97:5c:
                    5c:3d:a7:9a:35:dd:83:1d:90:6f:d5:70:da:e0:cc:
                    64:93:e3:ce:15:c2:b6:cf:b4:84:17:26:3a:9e:9d:
                    00:25:a2:a2:89:61:49:8f:5d:b2:ca:0e:33:49:66:
                    38:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BE:4F:5A:57:4D:69:1B:87:A0:A1:D2:C3:2D:DA:ED:2E:AD:77:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d1a1d0b0-a062-33ea-95ef-6f49f11b6ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:26:ff:bd:ac:f9:9a:9e:77:ba:2e:bf:91:a5:5b:83:34:54:
         da:3f:80:59:64:8a:6e:44:e6:e1:b5:55:f8:ce:c1:a8:08:f3:
         58:40:52:13:c4:c8:90:63:55:68:23:fe:7f:ad:31:25:74:db:
         38:40:75:ae:e6:e2:d6:65:71:c4:48:b5:36:07:bb:9a:1a:b0:
         cb:5e:0c:5e:26:8c:c9:52:c6:c1:1d:a4:10:23:62:bc:ed:69:
         5f:7d:9e:44:04:be:0e:eb:71:f7:2e:dd:1b:e8:7c:c9:88:1c:
         e3:02:4a:94:1e:9d:43:b7:72:9e:49:54:2e:b0:24:d2:b1:e9:
         34:f7:6c:b7:85:66:e2:49:82:18:ce:d9:2b:9e:07:74:61:e6:
         16:c7:40:0f:2b:2d:05:69:31:3e:03:fc:b7:f9:71:3b:46:28:
         bc:32:15:93:70:9d:ff:85:b2:31:f6:f2:6b:c7:c3:17:33:5b:
         34:f9:8e:26:f8:ae:87:54:b5:0f:35:48:d6:b3:0c:d0:11:1d:
         49:c1:43:77:92:aa:70:d4:e2:ce:8d:42:f2:e4:63:e0:4f:8c:
         88:56:0b:47:e8:c8:3f:e4:a3:a3:b6:c4:bd:3e:0c:ab:94:49:
         70:43:7b:6e:6f:92:b3:8d:bf:dc:9e:0e:f1:2b:bd:9a:af:21:
         e7:8c:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:11 2025 by rpki-client