Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
File:                     98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa (raw, json)
Hash identifier:          xs3srywVQJSHkwwOaN7ApbaUi/MX2vxsHNKG5OJk58w=
Subject key identifier:   1C:82:CB:75:D6:97:12:F7:9F:B2:AB:06:95:4A:D5:27:49:B4:28:0E
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584A305035054514ED0F4716CF80
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     7922
IP address blocks:        198.37.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:35:05:45:14:ed:0f:47:16:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=68bbc6bf-cb61-4bc2-a65f-18237053a545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:ac:11:5c:bf:ad:70:89:7c:3f:2a:70:2a:
                    2e:8d:b7:06:75:81:2b:a3:cf:a0:54:7b:a3:33:b2:
                    fc:52:f4:b0:24:24:c0:93:a5:1d:39:29:a9:fc:6d:
                    b1:02:f6:91:4b:c5:d7:81:48:cb:09:de:fd:f2:99:
                    2f:07:46:7d:05:2c:6a:d4:08:49:b9:ca:9a:c3:a5:
                    5d:40:f0:bd:50:ca:50:78:75:d7:f0:38:84:e4:6c:
                    ce:16:a3:ab:0a:e4:40:e0:21:01:8e:22:9a:93:b1:
                    3c:0c:7c:59:9d:ba:14:37:f6:4b:b4:7d:68:3d:e7:
                    22:d6:13:3e:34:ee:0e:50:f0:32:a5:4f:ec:62:59:
                    f2:66:f9:3c:2f:ad:02:2e:18:e6:3e:bf:98:25:04:
                    c9:32:d6:ab:93:44:0c:d1:d1:41:0a:41:d7:5b:d7:
                    78:12:07:48:a0:03:82:79:10:b8:e9:03:19:b6:75:
                    5a:1d:86:7e:73:56:7f:0d:46:7a:e1:7f:9b:4b:7e:
                    99:9d:9e:43:a6:bb:6a:f9:11:cf:65:11:9c:56:ce:
                    0b:6b:36:02:29:c4:2e:81:e2:60:f5:01:e1:c8:34:
                    1a:d7:7d:70:5d:ad:99:ce:1f:1c:ba:bd:35:35:53:
                    de:bf:61:d1:99:f0:0d:d9:a3:a2:b2:1d:d2:81:a0:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:82:CB:75:D6:97:12:F7:9F:B2:AB:06:95:4A:D5:27:49:B4:28:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ec:a5:98:7c:67:d1:46:5d:25:5b:11:47:30:b5:02:68:43:
         a8:fc:b2:78:3c:72:f1:d3:ab:be:53:10:7b:71:32:93:f8:d7:
         93:90:59:58:d0:ae:5e:55:a8:bc:12:3a:12:e9:76:b8:b3:3a:
         a2:59:a4:2c:e2:b9:5c:0a:c8:8e:74:26:54:2a:86:2e:10:70:
         74:2f:45:82:16:b6:b2:2d:14:43:18:25:52:25:fa:14:be:1e:
         b9:f9:05:7f:be:1b:aa:e6:dc:53:e3:05:f1:93:8b:3b:e9:e3:
         a2:2d:0d:76:71:6a:a1:bb:94:af:45:6f:28:e8:c1:88:c4:24:
         a4:dd:8a:71:5c:8a:60:2a:cd:01:09:70:1e:fb:5d:ad:55:e4:
         66:c0:16:fd:df:3e:12:a4:e9:3a:41:60:2d:2c:1a:a2:9b:43:
         35:43:92:d8:4d:16:9c:c9:2e:13:46:8a:37:e7:84:1a:f2:2f:
         90:39:24:d9:e3:90:ba:85:53:47:f4:a5:89:05:58:51:c2:45:
         1f:67:dc:e2:cd:0d:6b:37:10:6b:4f:43:2a:29:cd:d0:93:f2:
         b1:59:a1:18:b9:33:c6:e0:f2:24:38:e6:f1:f6:9d:38:58:41:
         97:2b:a0:ad:2b:d8:fd:9b:da:42:78:bb:b3:31:0d:ed:41:c0:
         d1:1d:ba:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDUFRRTtD0cWz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NjhiYmM2YmYtY2I2MS00YmMyLWE2NWYtMTgyMzcwNTNhNTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh+sEVy/rXCJfD8qcCoujbcGdYEro8+gVHuj
M7L8UvSwJCTAk6UdOSmp/G2xAvaRS8XXgUjLCd798pkvB0Z9BSxq1AhJucqaw6Vd
QPC9UMpQeHXX8DiE5GzOFqOrCuRA4CEBjiKak7E8DHxZnboUN/ZLtH1oPeci1hM+
NO4OUPAypU/sYlnyZvk8L60CLhjmPr+YJQTJMtark0QM0dFBCkHXW9d4EgdIoAOC
eRC46QMZtnVaHYZ+c1Z/DUZ64X+bS36ZnZ5Dprtq+RHPZRGcVs4LazYCKcQugeJg
9QHhyDQa131wXa2Zzh8cur01NVPev2HRmfAN2aOish3SgaCJnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFByCy3XWlxL3n7KrBpVK1SdJtCgOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvOThmM2FiMmQtZTU5Yi0z
ZTM5LTk4MTItMGUwNTFmOWQ2ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/spZh8Z9FGXSVbEUcwtQJoQ6j8sng8cvHTq75TEHtxMpP415OQWVjQ
rl5VqLwSOhLpdrizOqJZpCziuVwKyI50JlQqhi4QcHQvRYIWtrItFEMYJVIl+hS+
Hrn5BX++G6rm3FPjBfGTizvp46ItDXZxaqG7lK9FbyjowYjEJKTdinFcimAqzQEJ
cB77Xa1V5GbAFv3fPhKk6TpBYC0sGqKbQzVDkthNFpzJLhNGijfnhBryL5A5JNnj
kLqFU0f0pYkFWFHCRR9n3OLNDWs3EGtPQyopzdCT8rFZoRi5M8bg8iQ45vH2nThY
QZcroK0r2P2b2kJ4u7MxDe1BwNEduto=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:05:34 2025 by rpki-client