Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa
File:                     d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa (raw, json)
Hash identifier:          2j0gnk/bAfmFuo6/ZnkS4sye5vEnxuVYBRESN5WVyPs=
Subject key identifier:   29:38:85:B6:76:CF:72:10:FA:96:99:00:B2:EA:FE:F5:13:93:43:7E
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285849ABB49AEEAD76095BAC695280
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     19691
IP address blocks:        198.37.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9a:ee:ad:76:09:5b:ac:69:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=fdd491d4-81d6-4287-9495-eb48d6d9bf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:46:eb:7e:e5:f6:75:c5:c5:98:a9:70:da:
                    5b:05:a1:3f:5a:97:61:ec:98:84:bd:4b:40:f0:56:
                    2e:be:fc:21:7e:3e:c0:b5:0b:5d:25:fd:bc:c1:56:
                    01:4e:54:37:7a:91:4b:8a:3f:e1:02:fd:ce:69:58:
                    69:1b:eb:79:40:3c:04:65:f5:90:dd:eb:01:75:68:
                    e2:f0:14:d6:55:bf:f0:b9:91:62:53:ec:4b:74:68:
                    51:52:f3:5f:c3:64:20:e2:81:a8:1b:08:5b:61:64:
                    3a:4c:46:47:a3:49:ee:6a:5f:ce:89:b7:fa:df:7e:
                    39:bd:5c:a6:0b:0a:8a:cc:d2:9e:a1:04:a2:9c:45:
                    02:9c:cc:8c:13:50:e5:da:ab:6d:09:d2:d1:e8:fb:
                    ff:53:e7:31:43:69:51:e3:fe:72:48:fa:2b:bc:da:
                    d5:f2:a7:34:3f:f6:07:b8:57:f7:35:06:10:7b:26:
                    7d:92:ea:8c:91:4f:61:70:cd:19:04:ee:94:c9:48:
                    1e:e7:17:56:f9:e3:44:01:45:30:62:5c:5c:6e:07:
                    16:e2:c7:93:26:d3:5d:4e:33:89:db:89:43:86:28:
                    dd:22:75:2d:49:2a:b3:4c:21:cc:71:bd:f5:b4:56:
                    0d:55:5f:a3:a7:fa:68:52:ab:51:5e:71:3a:cc:88:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:38:85:B6:76:CF:72:10:FA:96:99:00:B2:EA:FE:F5:13:93:43:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:ad:5e:bd:61:40:62:17:dd:89:0d:bf:97:1e:4e:cc:c7:
         85:e8:bc:c9:af:d6:17:7c:74:ba:19:fe:73:e4:65:93:dd:26:
         f6:2b:da:b3:27:75:96:86:51:29:95:60:57:7f:00:5d:df:aa:
         5f:1b:a6:c4:29:81:c0:1c:32:dd:08:52:cb:28:a1:12:3f:66:
         0c:b8:1b:e8:df:3b:59:78:b5:46:04:83:ff:e4:c0:95:d8:63:
         db:fe:e8:5f:b5:28:a2:b3:bb:86:9e:6a:57:92:b8:5f:58:a4:
         18:a1:d0:e5:d2:09:02:3f:92:ce:96:cf:ff:df:bc:f0:13:a4:
         ab:03:44:84:8b:23:f1:83:5a:a2:e4:20:06:f7:6b:84:84:41:
         cb:6b:25:63:9d:74:4b:37:77:94:f9:1c:bd:ed:80:58:11:52:
         9c:46:86:73:a0:12:7e:15:61:c9:45:f5:d0:bd:22:e0:53:c9:
         41:c0:ff:f9:a6:b3:c2:4a:6c:2c:81:24:d8:80:c5:4a:8e:d7:
         b8:63:ca:da:d5:b6:e3:7d:b0:29:f7:cf:00:29:70:01:e9:10:
         e7:25:bb:d7:64:bd:27:75:27:17:7f:98:27:e9:11:9c:da:8e:
         0a:8b:7a:e9:06:cc:04:dd:55:00:48:b3:35:e6:0f:74:30:92:
         65:b2:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:37:41 2025 by rpki-client