Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4bfc0d6e-df24-3fa2-9edd-7e0ac726eeef.roa
File:                     4bfc0d6e-df24-3fa2-9edd-7e0ac726eeef.roa (raw, json)
Hash identifier:          wz78b5iPShH0ZulTiXbz/UiuJkrduaotYsY3JC5XPD8=
Subject key identifier:   0E:66:4C:49:67:51:89:4D:08:EF:F9:6A:8E:7F:C7:5D:6D:1B:E2:8C
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584973DEE4B04F5BD1A8F6F8423A
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4bfc0d6e-df24-3fa2-9edd-7e0ac726eeef.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     396253
IP address blocks:        136.228.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e4:b0:4f:5b:d1:a8:f6:f8:42:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=e33ac06b-b351-4315-8c54-b9a3a38e9bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:a1:5e:7b:51:c3:95:7b:9c:59:8f:98:2d:
                    22:e2:a3:15:15:2f:73:d6:25:e8:de:97:2c:07:23:
                    cd:3e:63:43:77:36:7c:7c:50:e0:75:df:62:80:b8:
                    33:f6:c6:b7:69:53:7b:87:08:21:44:6e:a0:a0:01:
                    ad:cc:c5:bc:f9:31:02:b8:03:08:5e:3b:4c:58:f4:
                    f7:8a:09:04:06:1d:14:8f:5c:fc:a4:81:37:12:b6:
                    32:28:f6:ef:b4:e3:7a:ad:a4:fe:7f:51:48:1c:22:
                    c6:a9:7a:c0:d3:e5:61:b7:91:2a:b0:90:01:af:d0:
                    a0:51:5f:5d:a6:4f:c1:c2:89:ce:cb:76:59:3e:1b:
                    16:a7:23:bd:1d:06:f6:97:02:6b:d4:1b:f9:e0:57:
                    d0:c3:f0:2c:97:63:a9:cd:93:38:9c:28:5a:6e:04:
                    c3:0e:12:8f:f2:c7:72:7a:b8:0f:ce:bc:a2:b2:b4:
                    89:b1:f5:6b:d6:e5:76:25:7b:a4:ee:ab:51:1b:e7:
                    63:94:df:69:f1:92:39:79:3e:58:f5:51:eb:ba:a8:
                    e4:1b:77:04:df:67:c9:8c:2d:3c:53:73:8e:4a:f3:
                    ce:9f:0f:18:d8:92:0c:9d:f1:6e:ba:50:09:99:92:
                    f2:c6:a9:25:ae:e5:83:35:cf:f1:89:08:25:d7:4e:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:66:4C:49:67:51:89:4D:08:EF:F9:6A:8E:7F:C7:5D:6D:1B:E2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4bfc0d6e-df24-3fa2-9edd-7e0ac726eeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:e3:e5:79:ae:6b:85:3f:74:89:6b:c5:17:6b:b1:15:ba:
         77:4c:94:dd:e6:c0:7d:60:4a:3c:cd:f7:eb:0b:06:ce:e3:c0:
         d5:62:06:9e:32:67:9a:db:0b:34:30:43:8f:b6:23:1b:c2:2e:
         16:a8:df:e4:3e:93:f3:f7:a0:9b:bc:b1:ce:c0:ff:fd:81:87:
         9a:8d:6e:2e:f1:8c:12:fb:00:14:00:df:c8:b2:af:97:b4:bc:
         30:70:79:47:aa:29:46:7b:c0:e1:fd:a8:a6:99:f6:78:f0:95:
         90:64:19:a4:c6:35:a9:69:62:50:78:1d:b6:66:5e:6a:f3:4d:
         23:ab:3c:6e:7f:61:ac:de:78:2b:fe:34:b1:75:0d:ab:ee:c2:
         9a:a4:3e:a2:57:69:9c:aa:15:bc:78:cc:0c:f0:69:02:7a:0f:
         28:eb:a5:29:47:92:de:e4:e2:70:e5:74:43:42:0c:be:be:32:
         88:49:a5:a1:2f:5d:47:81:0d:02:c1:6d:e8:a1:43:a6:23:11:
         4c:8c:0c:31:cb:a5:a8:f1:b5:ac:ca:d7:4a:2f:de:44:9f:64:
         04:c7:7e:21:b8:a8:ca:e9:5e:af:7e:a9:7c:86:ae:58:37:43:
         a5:2f:a2:9d:80:32:a1:c7:6a:d5:fa:f7:d5:9e:65:a9:b3:06:
         b8:b0:86:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uSwT1vRqPb4QjowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
ZTMzYWMwNmItYjM1MS00MzE1LThjNTQtYjlhM2EzOGU5YmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8+hXntRw5V7nFmPmC0i4qMVFS9z1iXo3pcs
ByPNPmNDdzZ8fFDgdd9igLgz9sa3aVN7hwghRG6goAGtzMW8+TECuAMIXjtMWPT3
igkEBh0Uj1z8pIE3ErYyKPbvtON6raT+f1FIHCLGqXrA0+Vht5EqsJABr9CgUV9d
pk/BwonOy3ZZPhsWpyO9HQb2lwJr1Bv54FfQw/Asl2OpzZM4nChabgTDDhKP8sdy
ergPzryisrSJsfVr1uV2JXuk7qtRG+djlN9p8ZI5eT5Y9VHruqjkG3cE32fJjC08
U3OOSvPOnw8Y2JIMnfFuulAJmZLyxqklruWDNc/xiQgl104FgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5mTElnUYlNCO/5ao5/x11tG+KMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNGJmYzBkNmUtZGYyNC0z
ZmEyLTllZGQtN2UwYWM3MjZlZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOT6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgM4+V5rmuFP3SJa8UXa7EVundMlN3mwH1gSjzN9+sLBs7jwNViBp4y
Z5rbCzQwQ4+2IxvCLhao3+Q+k/P3oJu8sc7A//2Bh5qNbi7xjBL7ABQA38iyr5e0
vDBweUeqKUZ7wOH9qKaZ9njwlZBkGaTGNalpYlB4HbZmXmrzTSOrPG5/YazeeCv+
NLF1DavuwpqkPqJXaZyqFbx4zAzwaQJ6DyjrpSlHkt7k4nDldENCDL6+MohJpaEv
XUeBDQLBbeihQ6YjEUyMDDHLpajxtazK10ov3kSfZATHfiG4qMrpXq9+qXyGrlg3
Q6Uvop2AMqHHatX699WeZamzBriwhlA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:22 2025 by rpki-client