Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/50615970-ae04-394a-a9a8-55670e36eb10.roa
File:                     50615970-ae04-394a-a9a8-55670e36eb10.roa (raw, json)
Hash identifier:          vK4ZbVkRY6D51xYCsGZAotDQzU3kC84XP1d7TveYoy8=
Subject key identifier:   74:D8:E0:4B:18:F9:F1:F5:7D:9A:3D:7D:06:80:89:50:9E:9B:31:3C
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F432858498769BBCAF77C4E73BE7A3B20
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/50615970-ae04-394a-a9a8-55670e36eb10.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     19551
IP address blocks:        198.37.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:bb:ca:f7:7c:4e:73:be:7a:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=402918b2-df0a-4985-af5a-fd2b0b95e42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:8d:8b:6c:bb:e0:95:d6:95:54:e5:19:b4:
                    1e:43:2c:41:85:7c:f6:82:d6:25:d6:94:b0:b2:f9:
                    bd:0c:31:72:33:e5:aa:64:f0:f5:b0:6e:18:fb:b8:
                    87:ca:2e:38:96:99:ab:47:3c:f9:82:40:b2:c1:ca:
                    27:c1:54:0f:8d:8c:2a:09:ab:b5:1d:27:5e:a4:00:
                    25:47:c8:10:6d:6b:e6:5b:d7:7e:7a:03:be:94:35:
                    f6:31:30:8d:26:93:48:3d:5e:87:cb:f3:e5:76:96:
                    22:a7:8e:5e:5c:35:a1:cd:84:a8:40:ee:f6:92:b4:
                    de:43:a6:99:9e:42:d5:a3:21:5e:19:d2:d5:db:a8:
                    da:c0:f2:af:f8:76:a5:9f:e6:6b:ef:16:65:77:65:
                    7d:89:0f:2d:aa:8e:f7:08:1e:4f:b9:6b:70:e4:aa:
                    da:86:03:79:20:ed:f4:8b:74:3e:2b:53:35:6a:de:
                    d6:56:94:6d:dd:11:6f:fd:b4:f6:42:d6:98:b9:6e:
                    8e:bb:fc:7c:78:b7:bf:b7:41:52:d8:d5:22:aa:08:
                    79:d9:4d:b7:3f:1f:cc:60:72:20:57:f6:34:57:9f:
                    a0:63:fb:79:78:fd:5d:7f:1f:b2:b9:63:3c:4f:65:
                    26:46:95:6a:a9:b1:27:3e:2d:03:30:6d:2b:60:72:
                    e1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D8:E0:4B:18:F9:F1:F5:7D:9A:3D:7D:06:80:89:50:9E:9B:31:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/50615970-ae04-394a-a9a8-55670e36eb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:22:ee:4e:31:21:11:3d:11:2b:d8:a7:b9:e9:f2:7e:69:21:
         22:93:c6:dd:66:82:85:cf:f9:a9:9f:01:c6:17:ff:ec:69:96:
         d4:f8:91:2c:e6:d9:e9:37:dd:3a:c5:b6:c9:27:c0:04:44:60:
         b0:b3:4a:e7:b2:12:e7:6f:45:c3:f6:07:f4:3e:26:b7:cb:30:
         e0:6b:3a:53:67:bd:d9:26:d6:7c:ac:e7:8d:3c:b0:8c:aa:fa:
         87:36:a0:02:c0:df:e6:17:d1:0a:5d:0e:37:2b:b7:4f:70:0c:
         90:69:e4:13:03:dd:42:f6:aa:eb:5d:14:4e:98:9e:01:1a:ee:
         d4:e8:67:9f:ee:38:b0:8c:a9:7d:58:b2:ca:20:36:94:4f:90:
         6d:29:67:62:23:3e:0b:43:18:eb:e0:00:73:41:b7:03:31:7e:
         bd:03:30:03:76:03:a9:18:af:9d:51:e3:28:ea:6d:73:d7:46:
         2a:78:c3:79:fa:dc:01:f7:6b:78:7d:ea:48:a5:c7:13:41:49:
         60:77:1e:33:d0:02:22:cb:36:25:78:10:ce:52:89:bb:af:5d:
         08:d8:1a:6a:cd:13:f2:63:bc:25:e4:0e:31:c9:58:eb:06:2e:
         a5:f2:29:1a:06:d3:2c:a1:eb:94:e9:de:06:25:8d:61:65:71:
         f7:c8:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:00:42 2025 by rpki-client