Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bdb657ce-7bc3-3b41-a9b6-efec7e6119d9.roa
File:                     bdb657ce-7bc3-3b41-a9b6-efec7e6119d9.roa (raw, json)
Hash identifier:          uKwdPqRLnzcy2cj+GoaxjZJrz49QCs1PS1FyNCm9PpE=
Subject key identifier:   1C:29:D5:4E:50:29:2B:31:9B:BE:73:4D:2A:99:99:3D:5B:85:79:91
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584B477C7D7490927175BD242DC0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bdb657ce-7bc3-3b41-a9b6-efec7e6119d9.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     14537
IP address blocks:        198.37.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:7d:74:90:92:71:75:bd:24:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=fe085ad2-9a2f-4f9a-9813-beae0926056d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:21:6f:94:e1:e7:5d:d8:fb:19:60:3a:16:77:
                    37:86:20:aa:8b:c3:13:a4:64:94:1c:a0:68:cf:ca:
                    9b:83:ca:60:ae:ce:af:55:38:cb:2e:37:37:e2:9e:
                    b9:bc:51:58:02:d9:2a:bf:f8:0c:49:35:90:20:35:
                    2e:dc:10:95:6f:6f:eb:27:f3:44:d8:3c:66:2a:5a:
                    aa:cc:eb:5c:1c:5e:d9:ab:d3:23:8d:d9:0a:5b:07:
                    5b:b3:b8:b6:e1:95:c3:ef:4f:2f:c1:ce:6d:c6:be:
                    c4:4b:0a:3c:93:92:6b:c3:f7:44:ff:40:93:89:25:
                    0c:b9:8e:00:bf:77:38:18:44:3b:94:bc:ac:d6:35:
                    1f:ef:26:6a:3f:57:c3:45:be:ed:8d:87:a4:7a:f6:
                    aa:56:f6:50:3e:9d:2b:03:70:46:b5:7c:b3:1f:72:
                    0d:67:db:03:74:40:e8:bb:95:2e:58:a1:b2:67:4a:
                    88:c4:85:a0:92:1a:87:5e:1e:49:df:84:69:48:78:
                    c6:73:d5:bb:e8:44:dc:e6:23:70:2f:9d:d4:d8:be:
                    d8:71:c2:ab:e1:cd:5b:21:b2:89:2c:a2:6d:58:96:
                    63:41:aa:a2:7b:97:74:28:d5:15:79:05:31:57:6d:
                    77:c9:02:a2:04:0f:24:7e:db:43:af:38:c6:f6:29:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:D5:4E:50:29:2B:31:9B:BE:73:4D:2A:99:99:3D:5B:85:79:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bdb657ce-7bc3-3b41-a9b6-efec7e6119d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:24:c0:31:9c:75:94:04:5f:f7:f8:26:38:0e:09:79:86:d8:
         b9:00:7a:6e:c7:01:32:c8:4c:22:80:9b:8b:85:f8:f9:c6:82:
         37:15:f9:3b:9a:17:a1:47:25:be:e5:f1:de:a9:b1:33:2b:02:
         24:06:54:fc:4b:78:5a:5d:6a:e5:8c:b2:89:d7:26:98:cc:e5:
         55:50:27:24:cd:fd:2d:f9:7b:ac:e7:bf:83:a1:64:48:70:e5:
         39:6e:f3:5f:01:36:ea:1d:b1:10:e0:e3:d8:c4:ca:42:7e:38:
         cd:3d:37:78:18:3f:41:a3:64:da:2f:77:e0:a4:95:cc:5b:03:
         06:79:99:27:1c:98:b3:2e:83:e3:11:27:f5:e0:48:2d:35:e8:
         37:7f:92:08:61:a2:9f:ef:db:19:d6:d5:01:28:fa:75:ee:6a:
         8e:bf:e5:8b:ab:8f:99:a4:33:3a:8b:88:de:a7:4a:a4:2b:14:
         c4:e3:ae:aa:b9:09:37:35:89:3f:40:1e:ae:79:2e:f2:e7:dd:
         8d:9d:1e:4a:23:2f:5e:1c:90:8e:89:05:7a:63:de:eb:dc:98:
         77:65:80:5d:82:12:a9:22:73:5c:c5:c3:48:f9:6c:b1:b2:62:
         5e:e1:3c:13:40:0c:6a:54:7c:50:08:8d:80:fd:fa:ab:68:13:
         01:d3:5c:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfH10kJJxdb0kLcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZmUwODVhZDItOWEyZi00ZjlhLTk4MTMtYmVhZTA5MjYwNTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCFvlOHnXdj7GWA6Fnc3hiCqi8MTpGSUHKBo
z8qbg8pgrs6vVTjLLjc34p65vFFYAtkqv/gMSTWQIDUu3BCVb2/rJ/NE2DxmKlqq
zOtcHF7Zq9MjjdkKWwdbs7i24ZXD708vwc5txr7ESwo8k5Jrw/dE/0CTiSUMuY4A
v3c4GEQ7lLys1jUf7yZqP1fDRb7tjYekevaqVvZQPp0rA3BGtXyzH3INZ9sDdEDo
u5UuWKGyZ0qIxIWgkhqHXh5J34RpSHjGc9W76ETc5iNwL53U2L7YccKr4c1bIbKJ
LKJtWJZjQaqie5d0KNUVeQUxV213yQKiBA8kfttDrzjG9inFzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwp1U5QKSsxm75zTSqZmT1bhXmRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvYmRiNjU3Y2UtN2JjMy0z
YjQxLWE5YjYtZWZlYzdlNjExOWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgkwDGcdZQEX/f4JjgOCXmG2LkAem7HATLITCKAm4uF+PnGgjcV+Tua
F6FHJb7l8d6psTMrAiQGVPxLeFpdauWMsonXJpjM5VVQJyTN/S35e6znv4OhZEhw
5Tlu818BNuodsRDg49jEykJ+OM09N3gYP0GjZNovd+CklcxbAwZ5mSccmLMug+MR
J/XgSC016Dd/kghhop/v2xnW1QEo+nXuao6/5Yurj5mkMzqLiN6nSqQrFMTjrqq5
CTc1iT9AHq55LvLn3Y2dHkojL14ckI6JBXpj3uvcmHdlgF2CEqkic1zFw0j5bLGy
Yl7hPBNADGpUfFAIjYD9+qtoEwHTXP8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:41 2025 by rpki-client