Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7729696d-72cb-395d-b042-f0ab1ad6ddad.roa
File:                     7729696d-72cb-395d-b042-f0ab1ad6ddad.roa (raw, json)
Hash identifier:          Lz9tvuwAVMzfc4OdhCzFJAaNugKwXWxKGgLuuhbi9gs=
Subject key identifier:   0B:03:A0:9B:D1:E6:FC:5D:09:89:F0:04:1D:8B:9B:32:8E:1D:F3:7D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8C635878041315F68500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7729696d-72cb-395d-b042-f0ab1ad6ddad.roa
Signing time:             Thu 25 Apr 2024 22:43:55 +0000
ROA not before:           Thu 25 Apr 2024 22:43:55 +0000
ROA not after:            Wed 24 Jul 2024 22:43:55 +0000
asID:                     204957
IP address blocks:        172.120.184.0/24 maxlen: 24
                          172.120.185.0/24 maxlen: 24
                          172.120.189.0/24 maxlen: 24
                          172.120.190.0/24 maxlen: 24
                          172.120.194.0/24 maxlen: 24
                          172.120.195.0/24 maxlen: 24
                          172.120.196.0/24 maxlen: 24
                          172.120.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8c:63:58:78:04:13:15:f6:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:55 2024 GMT
            Not After : Jul 24 22:43:55 2024 GMT
        Subject: CN=09da6da7-59c4-4ac2-aba8-11a9f08baeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:8b:fe:a3:8f:ca:f8:7f:0e:7c:4b:f5:f1:
                    32:8f:72:8d:a9:6a:a6:82:eb:b0:b8:91:69:b3:cf:
                    7d:4a:8e:67:bd:58:f7:55:98:0d:5d:28:e3:89:9e:
                    62:f4:b7:ec:8a:75:ad:a1:ef:91:69:19:34:e4:bd:
                    a3:83:5f:8e:20:e0:85:8d:13:d1:a4:22:c6:89:90:
                    fb:c7:ba:e6:00:94:40:0c:c3:4e:8d:53:70:26:fd:
                    fe:33:cd:15:21:5e:fa:92:d1:b1:ea:76:75:5d:a2:
                    a6:ed:9f:02:3f:a3:f0:53:9b:a1:6e:79:d3:93:57:
                    e5:bf:b6:8f:51:1b:0a:6d:12:60:08:a2:0f:64:5a:
                    8d:ca:5e:6e:23:e8:bf:4e:4e:a9:18:c4:e6:80:25:
                    94:49:9a:b5:02:4d:fc:18:ce:b1:9b:09:b2:3d:9e:
                    77:20:38:9f:f7:15:c7:10:2a:99:f0:79:dc:26:ca:
                    21:65:a6:ad:47:44:34:68:ad:1f:b4:29:fd:5f:65:
                    cb:fc:f2:46:ea:a0:36:04:d1:92:e0:6e:91:3a:62:
                    d8:4a:6a:d6:8f:88:94:92:45:ea:be:c1:f1:0e:7e:
                    be:be:90:83:ac:4e:77:27:9a:c2:b5:a2:05:cf:34:
                    7b:8e:60:a9:39:24:a1:84:9b:90:cf:cf:68:52:7e:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:03:A0:9B:D1:E6:FC:5D:09:89:F0:04:1D:8B:9B:32:8E:1D:F3:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7729696d-72cb-395d-b042-f0ab1ad6ddad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.184.0/23
                  172.120.189.0-172.120.190.255
                  172.120.194.0-172.120.196.255
                  172.120.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:aa:3f:9c:ec:44:14:85:27:be:4b:a0:c2:9a:60:06:db:
         e4:19:43:99:da:8c:47:2c:c9:22:c1:5e:10:c2:6b:b9:51:db:
         e1:cd:67:b2:4c:a0:34:7f:6e:a8:7e:81:6f:bc:be:ec:06:fe:
         0f:7c:93:ef:71:ea:56:13:65:01:0a:c5:55:57:3a:d8:80:4d:
         76:c0:cb:a4:9f:60:21:53:3c:c9:e2:16:bb:93:e6:29:4c:d1:
         60:fe:a5:cc:d8:c4:cd:b0:8c:6b:46:1a:9e:a9:0b:cf:c1:0a:
         04:0b:7f:9a:cc:d0:75:ba:18:99:63:13:23:7e:e2:18:77:ba:
         4d:f9:87:0e:86:73:01:2a:c7:96:c6:cc:c3:b7:9c:9c:a9:f8:
         77:4e:7d:85:0d:a1:ef:f0:e8:3e:6d:8e:df:35:2a:74:b3:2b:
         60:61:bc:6c:93:a3:86:11:19:60:be:d0:19:bd:36:4a:39:c3:
         4f:eb:82:b3:ff:59:bd:7a:74:58:07:2a:d6:35:a5:74:19:90:
         40:14:a2:0d:c0:1c:41:36:95:2a:33:6e:18:44:ee:c5:71:1e:
         a6:9c:e4:91:d8:e2:0c:e8:67:15:45:ca:5b:71:af:56:cb:ba:
         c7:ac:33:05:ca:87:1c:d9:2f:f1:38:29:0c:28:13:80:91:38:
         f3:a4:d4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:56:34 2024 by rpki-client on console-fra.rpki-client.org