Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58e182c3-2693-3ca7-9ff8-401647d0a001.roa
File:                     58e182c3-2693-3ca7-9ff8-401647d0a001.roa (raw, json)
Hash identifier:          FwKFuKG5GI/MAq0V/V1QbdgX4UgCFGdx8SnpxmiK4bk=
Subject key identifier:   BD:D6:03:33:D4:35:E4:72:70:DC:F1:2C:7D:F7:3E:9A:0D:CB:94:E9
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EC1304C1488058919C80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58e182c3-2693-3ca7-9ff8-401647d0a001.roa
Signing time:             Mon 07 Apr 2025 16:33:12 +0000
ROA not before:           Mon 07 Apr 2025 16:33:12 +0000
ROA not after:            Sun 06 Jul 2025 16:33:12 +0000
asID:                     81
IP address blocks:        152.26.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ec:13:04:c1:48:80:58:91:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:12 2025 GMT
            Not After : Jul  6 16:33:12 2025 GMT
        Subject: CN=1ed6d6a4-b541-4707-9ea3-2f1bedbf055b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:72:99:ff:18:fa:07:81:7a:0f:25:01:65:
                    af:d6:9c:b6:3d:e3:77:c1:14:ac:f8:b3:83:31:af:
                    79:b9:30:ad:f5:33:f3:3c:c6:40:62:21:20:cf:3a:
                    a0:3b:0a:12:86:9a:50:f4:67:90:8c:4b:59:2c:05:
                    7e:74:cb:d6:ed:0f:d6:61:96:4e:c5:86:8b:91:ff:
                    45:35:9c:99:db:28:8f:ce:b0:97:9c:04:8c:50:24:
                    e1:a2:73:32:02:2a:d0:ac:a0:a1:57:05:7e:07:1e:
                    ea:22:c9:4c:4d:0b:db:30:dc:e1:ed:cf:f2:23:b8:
                    d8:fd:54:09:b3:98:d1:0b:44:cd:34:7b:c2:9b:55:
                    dd:d0:93:10:74:a8:df:b1:ae:4f:c2:13:fa:c1:17:
                    a4:95:f6:bc:2a:0c:3d:74:8f:69:30:8a:e0:25:e7:
                    27:8d:77:0d:bf:75:f6:11:45:b3:19:60:10:9b:ba:
                    e8:f6:0c:48:8d:6f:73:14:80:62:80:0a:d3:45:0d:
                    c2:9d:27:6e:15:9c:2d:d9:0b:56:66:7a:bb:fc:04:
                    ab:33:65:24:1d:4e:a4:66:9e:b2:f0:26:cd:10:71:
                    39:b6:95:cd:73:e4:d4:33:bd:a0:5b:38:92:f9:aa:
                    2b:c6:47:88:a3:91:b9:50:c7:ae:26:c4:5d:e8:5e:
                    ab:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D6:03:33:D4:35:E4:72:70:DC:F1:2C:7D:F7:3E:9A:0D:CB:94:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58e182c3-2693-3ca7-9ff8-401647d0a001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c4:59:37:d9:30:1b:a1:37:50:93:6b:80:56:43:57:41:c1:
         eb:53:dc:a4:86:95:fe:20:14:e5:b9:79:bf:c3:14:92:39:5c:
         be:28:08:59:42:51:a3:55:2a:ac:58:f0:7c:e1:bd:65:77:e7:
         d8:b2:cd:4d:74:e9:ec:15:6f:12:e0:a4:d0:82:33:9b:1d:51:
         2b:58:d7:77:c1:d5:52:a0:0f:b0:c5:8d:3b:25:3d:db:a3:8c:
         28:d9:7e:53:ff:34:87:f4:91:f1:36:f4:c2:ad:eb:b6:0a:fe:
         84:12:25:a2:26:08:03:4d:09:0a:9d:d6:6a:30:b5:f9:02:ba:
         9c:f7:86:a4:87:2e:e3:1a:04:02:7e:af:3e:c5:c0:bf:c5:72:
         6c:a8:6f:c0:00:14:d7:20:38:90:6f:9c:72:21:c0:14:fe:a0:
         99:ee:c3:e2:8a:2f:b7:fa:84:73:04:59:2d:3a:08:19:b5:6e:
         04:7c:aa:1f:8c:81:79:2a:c0:c2:03:d4:8c:7c:7b:c1:aa:97:
         8e:4a:f5:15:ac:61:a4:22:b2:56:d1:81:4f:95:4f:e8:b7:12:
         71:26:b1:c4:60:1d:19:83:5b:2a:81:e1:c0:d8:22:49:dc:ec:
         60:d8:1e:33:f9:bc:8f:35:c7:5f:a1:3b:71:8b:3a:e2:49:7f:
         65:8e:7e:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4uwTBMFIgFiRnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDQwNzE2MzMxMloXDTI1MDcwNjE2MzMxMlowLzEtMCsGA1UEAxMk
MWVkNmQ2YTQtYjU0MS00NzA3LTllYTMtMmYxYmVkYmYwNTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mlymf8Y+geBeg8lAWWv1py2PeN3wRSs+LOD
Ma95uTCt9TPzPMZAYiEgzzqgOwoShppQ9GeQjEtZLAV+dMvW7Q/WYZZOxYaLkf9F
NZyZ2yiPzrCXnASMUCThonMyAirQrKChVwV+Bx7qIslMTQvbMNzh7c/yI7jY/VQJ
s5jRC0TNNHvCm1Xd0JMQdKjfsa5PwhP6wReklfa8Kgw9dI9pMIrgJecnjXcNv3X2
EUWzGWAQm7ro9gxIjW9zFIBigArTRQ3CnSduFZwt2QtWZnq7/ASrM2UkHU6kZp6y
8CbNEHE5tpXNc+TUM72gWziS+aorxkeIo5G5UMeuJsRd6F6ruwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3WAzPUNeRycNzxLH33PpoNy5TpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNThlMTgyYzMtMjY5My0z
Y2E3LTlmZjgtNDAxNjQ3ZDBhMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBrGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbEWTfZMBuhN1CTa4BWQ1dBwetT3KSGlf4gFOW5eb/DFJI5XL4oCFlC
UaNVKqxY8HzhvWV359iyzU106ewVbxLgpNCCM5sdUStY13fB1VKgD7DFjTslPduj
jCjZflP/NIf0kfE29MKt67YK/oQSJaImCANNCQqd1mowtfkCupz3hqSHLuMaBAJ+
rz7FwL/Fcmyob8AAFNcgOJBvnHIhwBT+oJnuw+KKL7f6hHMEWS06CBm1bgR8qh+M
gXkqwMID1Ix8e8Gql45K9RWsYaQislbRgU+VT+i3EnEmscRgHRmDWyqB4cDYIknc
7GDYHjP5vI81x1+hO3GLOuJJf2WOfrE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:40:02 2025 by rpki-client