Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa
File:                     2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa (raw, json)
Hash identifier:          0dUKZaUoVti/ZwcKHp7SPYHJ2Zv/UwgeLkT8Hj7Xds4=
Subject key identifier:   24:5A:53:A2:B2:0E:92:90:DE:1D:8C:58:B4:68:14:72:14:E2:2F:1B
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584AD23BAF2D7D75BEC733B113B8
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     14537
IP address blocks:        198.37.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:af:2d:7d:75:be:c7:33:b1:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=2be9a942-5155-4bd3-a8ec-c016a793bcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:4e:97:11:e7:a8:1f:ea:29:98:1f:9c:fe:
                    60:db:f1:05:e9:b2:5e:41:c6:48:a1:1f:22:09:13:
                    20:ba:6d:30:bd:b8:47:08:dd:0a:38:b0:b9:08:c6:
                    29:e5:b9:c8:53:05:90:6a:ef:d3:a7:92:df:c7:44:
                    aa:13:f2:28:1b:79:08:5d:fc:d1:0d:f7:3e:37:d4:
                    d1:b2:25:9e:15:1f:3e:a2:e3:7a:ed:73:6b:fc:d3:
                    5c:f2:b4:42:0c:0b:3e:83:3f:a9:d1:d7:61:62:21:
                    92:f2:3c:a2:47:b0:50:4c:30:66:dc:7e:b4:a6:60:
                    19:48:b7:35:da:b0:6d:b8:2f:6c:93:9b:b8:b3:fd:
                    0a:95:46:8c:e8:45:1c:46:f9:9a:1d:cc:9f:c9:09:
                    32:a9:62:69:34:10:e5:ef:bb:80:04:31:03:40:23:
                    49:09:13:1e:61:e9:80:95:43:bf:1f:a3:ae:e6:2d:
                    72:32:2e:83:cb:d5:23:79:b2:25:c8:8c:9c:bd:84:
                    d5:75:22:23:9d:03:16:7e:98:49:63:fd:1c:9c:59:
                    a6:09:c5:96:1c:10:d6:30:4b:a1:05:61:8a:38:6c:
                    da:84:8a:8d:0a:4d:1a:87:d0:59:35:33:81:76:a9:
                    ef:07:df:47:8f:f7:9a:5e:c7:0c:e5:4f:3b:03:e0:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5A:53:A2:B2:0E:92:90:DE:1D:8C:58:B4:68:14:72:14:E2:2F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:81:a9:d1:e0:40:a9:c6:f4:8d:d3:ee:c6:41:8c:f2:15:40:
         71:34:f5:d4:42:fb:96:ef:e6:6e:f7:ca:a3:7c:48:9f:85:48:
         12:8f:4e:e5:fd:08:42:7f:dc:4c:78:10:32:25:33:b8:57:1c:
         70:4b:79:43:d3:bd:66:a4:04:7a:ae:a6:4f:fe:e5:b0:e0:a4:
         e1:34:08:ca:5f:1d:6f:70:df:ce:c8:b6:8b:6d:e4:65:4e:c8:
         7e:25:4b:b7:6a:77:6c:6d:72:75:2c:ea:6b:42:86:62:6a:e8:
         f0:16:2e:dd:8c:79:4c:58:07:36:28:76:9c:e1:36:39:fd:77:
         24:cd:90:97:0f:4f:c9:07:c0:b1:61:80:19:56:7e:01:76:29:
         9b:1c:e9:e6:7a:d3:6f:37:ff:a6:96:16:68:2f:66:2e:00:8c:
         eb:df:82:2b:2c:f2:66:c7:56:9e:af:f0:0f:6b:37:ab:6c:48:
         06:92:a2:61:63:fc:b0:ca:6d:98:53:ef:a7:17:8a:af:79:24:
         1c:1b:b6:d8:c4:90:16:3c:32:b8:68:71:27:03:d6:94:b7:3d:
         ac:08:d8:53:57:e4:da:ed:ff:ad:c4:33:f1:c3:21:f9:0f:5c:
         d3:cd:25:f8:bf:fa:1d:2b:63:c9:80:ae:d2:24:88:74:24:f7:
         92:55:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:47 2025 by rpki-client