Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/e623ee2c-f18b-3bb4-a50c-d9feffc64443.roa
File:                     e623ee2c-f18b-3bb4-a50c-d9feffc64443.roa (raw, json)
Hash identifier:          MEUEnGAfIUIBNBvzxuEC4LHde2SXLdWIW3fHH2xXWds=
Subject key identifier:   A4:5B:4E:BC:8F:77:63:40:E0:23:79:BF:46:3B:EE:BB:65:47:52:0D
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584B110BFBBDBF9D8616E4496AC0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/e623ee2c-f18b-3bb4-a50c-d9feffc64443.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     19691
IP address blocks:        198.37.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0b:fb:bd:bf:9d:86:16:e4:49:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=48515b59-3fdf-417f-9e03-45e309412d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:66:7b:51:75:92:60:31:d8:42:82:b8:29:
                    ba:af:3a:5f:85:0f:1d:2d:3a:9c:91:64:ca:f0:19:
                    06:f6:96:ab:61:6d:13:bc:be:bf:6e:2c:16:c4:a7:
                    70:37:84:d2:2c:e9:3d:20:d5:0b:11:9f:c0:69:68:
                    60:79:5c:2c:e0:46:bf:f1:0e:ae:8c:43:50:b7:57:
                    c1:72:7b:00:63:57:23:48:1f:c8:a3:b6:5a:0d:ad:
                    8c:2d:2d:65:8e:7a:95:3d:d1:b8:b2:2d:73:c0:7c:
                    e2:44:5d:c5:cd:ec:63:e4:5f:a0:28:87:f0:42:12:
                    3d:70:55:19:f6:64:57:e9:f3:e8:55:45:03:47:d7:
                    75:24:d9:a8:1d:90:ca:c5:9d:af:d3:71:ec:cc:fd:
                    09:97:cf:98:a5:fb:9a:e3:9f:16:7d:f4:fe:a7:43:
                    6d:36:ce:01:67:98:79:6e:1c:e6:4d:d4:9d:11:54:
                    6e:c0:73:5a:84:c4:3b:b9:15:e3:ae:96:64:dc:9b:
                    1a:49:7d:f0:93:57:2f:24:32:af:53:16:ab:f8:c0:
                    c4:69:0e:38:78:cb:b0:bf:14:4b:8d:72:57:61:c7:
                    d8:52:2c:6c:61:8d:1e:b9:f9:34:3d:6d:08:3f:ff:
                    3a:58:ca:ad:a8:05:55:ae:33:16:5c:9f:f3:f0:02:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5B:4E:BC:8F:77:63:40:E0:23:79:BF:46:3B:EE:BB:65:47:52:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/e623ee2c-f18b-3bb4-a50c-d9feffc64443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:da:82:cc:b7:9a:8f:87:6c:c7:25:f0:31:8d:ea:b8:fb:
         94:ec:69:bd:35:f0:d3:fe:36:4a:5f:a3:60:a0:44:9e:19:10:
         bd:30:f2:db:4f:ca:df:54:b8:56:85:b5:c6:75:dd:ac:66:dd:
         74:d7:4b:30:ad:b3:da:87:4b:2f:39:b6:b9:41:c7:f8:29:1a:
         fd:f7:36:58:8f:70:df:64:91:7b:b9:10:bf:df:ac:19:47:5d:
         c8:b7:a4:bd:0b:53:e2:e0:51:4b:99:bb:51:bf:bf:5d:76:8f:
         4e:c4:1b:e9:60:20:1c:8b:99:02:83:0d:88:f9:5d:29:07:bd:
         29:f2:de:cc:7e:2f:7e:4d:26:5b:e7:48:fe:96:50:53:10:16:
         a0:de:f2:f0:8e:ec:8c:a2:dc:12:cc:72:76:c9:be:be:8c:fe:
         86:5f:50:b3:12:bd:e0:c0:07:ca:71:90:f7:2a:3b:c8:2c:64:
         5e:43:33:1e:66:7c:ed:98:98:7e:85:90:43:11:9d:34:76:d8:
         db:e5:e4:1b:85:81:31:0f:76:0b:dc:f6:c5:ce:46:9c:01:ad:
         9a:39:62:b4:5a:dd:18:fc:f3:ad:6b:2a:0a:d6:b7:22:51:01:
         b2:5b:65:c9:49:46:16:ae:0f:b3:9d:70:8c:16:4a:04:da:ff:
         de:3b:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 22:49:00 2025 by rpki-client