Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d/183e0332-3c24-3bb9-9fd1-44b055245046.roa
File:                     183e0332-3c24-3bb9-9fd1-44b055245046.roa (raw, json)
Hash identifier:          XFUmisChkSW13fc6HWRkRpyJe+UeQcPbtB/5tsdQQFM=
Subject key identifier:   4D:DA:C6:BE:EF:6B:F8:6E:F4:50:4C:84:0F:AE:E2:31:DE:84:36:08
Certificate issuer:       /CN=38742512-628c-4ac1-8070-9a66a544cd1d
Certificate serial:       010D0C9F43285849731F29124AA64556453C5C00
Authority key identifier: 58:8B:DB:74:47:AD:53:00:C2:D4:6C:87:0D:E5:7A:91:46:15:C4:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d/183e0332-3c24-3bb9-9fd1-44b055245046.roa
Signing time:             Mon 07 Apr 2025 18:34:34 +0000
ROA not before:           Mon 07 Apr 2025 18:34:34 +0000
ROA not after:            Sun 06 Jul 2025 18:34:34 +0000
asID:                     12088
IP address blocks:        198.252.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d/38742512-628c-4ac1-8070-9a66a544cd1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d/38742512-628c-4ac1-8070-9a66a544cd1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:1f:29:12:4a:a6:45:56:45:3c:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38742512-628c-4ac1-8070-9a66a544cd1d
        Validity
            Not Before: Apr  7 18:34:34 2025 GMT
            Not After : Jul  6 18:34:34 2025 GMT
        Subject: CN=52565f6b-8e7b-4412-9e5f-a0802f7c9946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d3:e1:61:d8:ff:bd:b5:2b:ef:20:0d:c8:a2:
                    58:eb:9a:df:98:13:93:ed:a8:87:3d:b6:77:10:f9:
                    f8:c9:39:3e:52:bd:c3:06:76:84:5d:8b:1c:37:28:
                    74:36:c1:b9:ca:14:f2:5a:9f:c1:62:ad:d9:cd:5d:
                    d9:b3:56:6b:90:c5:6b:91:5a:cd:35:83:6d:e1:37:
                    41:05:25:f9:3b:7e:b5:f5:19:4f:7d:55:14:05:64:
                    24:bf:3c:52:55:01:e4:de:57:c9:02:5d:7d:11:c7:
                    ca:be:a9:d9:2a:95:78:4c:cc:08:ad:f3:e3:d5:33:
                    ad:7c:d1:68:e7:b5:e4:90:49:62:52:b2:dd:4a:98:
                    cc:90:7b:3c:39:b4:ce:0f:7c:22:d7:b0:04:de:21:
                    a1:99:f4:84:cb:c4:72:9f:83:a5:85:a4:72:84:20:
                    88:de:a6:ba:8f:8d:54:90:3e:bd:38:b9:1c:42:f7:
                    b1:cd:95:58:58:00:93:92:19:4c:cb:89:a0:ba:e6:
                    db:9c:ba:ad:27:1a:18:c8:25:27:a2:40:9c:bc:4d:
                    4e:2c:e3:4c:74:90:20:f4:06:48:e5:02:8e:41:58:
                    0f:82:88:d2:8d:b1:d0:71:6d:fe:0d:4f:99:5e:44:
                    20:79:eb:fc:ab:9b:08:b3:95:65:39:24:0c:0b:66:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DA:C6:BE:EF:6B:F8:6E:F4:50:4C:84:0F:AE:E2:31:DE:84:36:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d/183e0332-3c24-3bb9-9fd1-44b055245046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d/38742512-628c-4ac1-8070-9a66a544cd1d.crl

            X509v3 Authority Key Identifier:
                keyid:58:8B:DB:74:47:AD:53:00:C2:D4:6C:87:0D:E5:7A:91:46:15:C4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/38742512-628c-4ac1-8070-9a66a544cd1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:aa:64:bb:d3:d3:31:92:05:c5:9e:36:bb:7b:05:e5:2c:23:
         1f:a7:b5:d8:ec:0e:92:b3:52:ad:56:59:24:f0:fd:68:57:c1:
         7a:9b:ac:01:96:f3:6c:0f:79:ef:49:e6:ee:39:4d:71:33:00:
         85:e1:3d:25:20:9b:b1:42:98:91:64:88:aa:4c:e1:a6:13:36:
         db:2c:e8:7c:a1:4a:d7:f8:95:1f:cd:91:43:3c:35:df:58:85:
         eb:70:e7:a9:c2:ad:41:99:71:47:55:a1:3d:1e:f3:80:c6:ae:
         9c:64:56:50:7f:55:35:6f:6a:04:6f:a6:55:7e:6a:4b:fe:12:
         5d:48:d2:85:80:6f:ad:3c:04:97:11:71:b3:66:3c:7d:0f:de:
         27:1a:12:4c:74:74:a8:92:ed:af:5b:55:8e:6f:03:68:7a:28:
         1f:84:65:d4:f2:71:0b:e1:ef:c7:33:43:12:14:38:e0:12:f3:
         91:f3:88:d1:a4:f8:cf:55:20:11:bd:a0:a4:d7:51:36:a7:5b:
         27:d1:48:c0:e8:62:14:0d:d4:ab:69:c7:ae:91:6d:7c:5d:a2:
         d5:ae:30:de:b1:2a:aa:30:75:67:4b:e1:fc:c0:ae:3e:63:cd:
         27:68:9b:97:87:fa:28:72:ba:02:a2:81:a2:49:84:1a:11:f1:
         d6:05:55:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElzHykSSqZFVkU8XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg3NDI1MTItNjI4Yy00YWMxLTgwNzAtOWE2NmE1NDRj
ZDFkMB4XDTI1MDQwNzE4MzQzNFoXDTI1MDcwNjE4MzQzNFowLzEtMCsGA1UEAxMk
NTI1NjVmNmItOGU3Yi00NDEyLTllNWYtYTA4MDJmN2M5OTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dPhYdj/vbUr7yANyKJY65rfmBOT7aiHPbZ3
EPn4yTk+Ur3DBnaEXYscNyh0NsG5yhTyWp/BYq3ZzV3Zs1ZrkMVrkVrNNYNt4TdB
BSX5O3619RlPfVUUBWQkvzxSVQHk3lfJAl19EcfKvqnZKpV4TMwIrfPj1TOtfNFo
57XkkEliUrLdSpjMkHs8ObTOD3wi17AE3iGhmfSEy8Ryn4OlhaRyhCCI3qa6j41U
kD69OLkcQvexzZVYWACTkhlMy4mguubbnLqtJxoYyCUnokCcvE1OLONMdJAg9AZI
5QKOQVgPgojSjbHQcW3+DU+ZXkQgeev8q5sIs5VlOSQMC2ZIZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3axr7va/hu9FBMhA+u4jHehDYIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODc0
MjUxMi02MjhjLTRhYzEtODA3MC05YTY2YTU0NGNkMWQvMTgzZTAzMzItM2MyNC0z
YmI5LTlmZDEtNDRiMDU1MjQ1MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzg3NDI1MTItNjI4Yy00YWMxLTgw
NzAtOWE2NmE1NDRjZDFkLzM4NzQyNTEyLTYyOGMtNGFjMS04MDcwLTlhNjZhNTQ0
Y2QxZC5jcmwwHwYDVR0jBBgwFoAUWIvbdEetUwDC1GyHDeV6kUYVxGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zODc0MjUxMi02MjhjLTRhYzEtODA3MC05YTY2
YTU0NGNkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvzmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiqZLvT0zGSBcWeNrt7BeUsIx+ntdjsDpKzUq1WWSTw/WhXwXqbrAGW
82wPee9J5u45TXEzAIXhPSUgm7FCmJFkiKpM4aYTNtss6HyhStf4lR/NkUM8Nd9Y
hetw56nCrUGZcUdVoT0e84DGrpxkVlB/VTVvagRvplV+akv+El1I0oWAb608BJcR
cbNmPH0P3icaEkx0dKiS7a9bVY5vA2h6KB+EZdTycQvh78czQxIUOOAS85HziNGk
+M9VIBG9oKTXUTanWyfRSMDoYhQN1Ktpx66RbXxdotWuMN6xKqowdWdL4fzArj5j
zSdom5eH+ihyugKigaJJhBoR8dYFVfc=
-----END CERTIFICATE-----
Generated at Thu May 1 03:09:14 2025 by rpki-client