Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
File:                     4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (raw, json)
Hash identifier:          xXYjjE4JDhIGBQ45BZcanFYi4XWP3I+52JthujuC6yM=
Subject key identifier:   0A:98:5D:5A:C2:9F:CC:F9:EB:70:9E:5A:DB:A9:AE:70:F9:FA:0E:51
Certificate issuer:       /CN=af121a54-266e-447b-8176-bfcd1dc7867c
Certificate serial:       010D0C9F4328584908817A21F0134B2EA4C9E480
Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     152117
IP address blocks:        80.73.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7a:21:f0:13:4b:2e:a4:c9:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=4b63f6c8-30e1-4f34-90b6-329a8386f14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:4c:2d:fe:d1:c4:9d:6c:bd:70:4f:a1:7b:
                    9b:26:31:67:ac:4a:d5:2b:02:9b:d0:b6:93:1d:e7:
                    d3:5a:06:2f:a5:d9:0d:a6:12:15:16:cb:54:43:6c:
                    f3:d6:26:12:36:bc:cc:b9:71:9e:80:9d:12:d8:a8:
                    e7:68:ee:e5:0e:95:ed:d9:fc:8b:a2:9e:3a:51:ef:
                    29:08:7d:cb:fc:3a:ad:fe:55:e3:fc:6f:dd:f7:b6:
                    6b:7a:f0:ed:d2:2e:9a:bd:f9:4d:15:ea:b5:73:96:
                    12:18:ad:82:97:a8:0b:38:21:53:bb:08:91:ef:b8:
                    1c:eb:d4:e0:1c:c2:64:12:7a:05:7d:a5:8b:af:1e:
                    cd:85:51:a6:ed:7d:7b:0c:98:dc:a3:2e:b0:26:4c:
                    06:c0:32:4a:c5:da:5a:c7:93:4f:f8:13:9d:f0:b2:
                    2b:ae:63:63:9e:6f:11:b5:cb:b9:6a:5b:29:2a:44:
                    92:b9:a9:26:4c:1f:2c:14:35:83:bf:b9:16:12:b3:
                    99:54:81:2b:4c:7b:9d:6e:84:15:5e:76:dd:a9:e1:
                    95:e0:04:6f:e0:7a:24:f5:e0:f5:1d:db:47:c4:71:
                    b2:c1:76:4e:39:d3:9c:be:a5:5c:4f:a4:64:81:b7:
                    6d:19:7e:1f:53:31:32:65:53:c6:45:cf:4e:93:f1:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:5D:5A:C2:9F:CC:F9:EB:70:9E:5A:DB:A9:AE:70:F9:FA:0E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl

            X509v3 Authority Key Identifier:
                keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:42:e1:e3:80:b4:5c:e2:e6:27:bd:64:97:a3:6a:56:08:54:
         e2:a7:86:cd:8e:25:52:47:08:7e:f3:70:af:f8:97:64:af:4c:
         29:33:d7:ae:e9:98:03:95:1b:49:31:b4:72:23:9d:a6:db:28:
         24:8a:e7:d0:39:ba:aa:7d:b8:b9:30:40:57:c4:c8:c2:9f:27:
         5d:a9:f0:8e:64:e0:84:71:df:9c:b3:c5:1d:2c:16:91:20:cb:
         eb:c9:66:8e:f9:96:75:6c:1e:6a:ff:03:9b:a0:7e:26:7c:c5:
         c8:d0:98:19:21:b4:e9:bb:75:63:93:8d:73:01:28:63:20:a6:
         b0:58:83:91:71:53:bf:b0:6d:64:d1:5c:78:c5:1a:38:c5:c9:
         1f:61:4d:12:02:57:83:db:71:df:17:2c:56:8b:25:9e:98:5c:
         ab:ee:4c:20:e4:e6:28:47:fc:af:0a:5f:95:e6:86:9c:bc:43:
         23:e8:f9:1e:3b:76:a3:27:2d:42:40:bc:2c:43:9c:46:44:ec:
         ca:b1:f4:c8:a0:53:96:32:9d:1b:c5:85:3f:fe:64:85:64:45:
         6b:99:5b:89:52:c6:7a:3a:85:93:dd:c4:38:ba:74:a1:e6:40:
         b5:f3:22:0d:55:0c:df:9b:ca:b9:71:08:1a:61:1e:95:a2:df:
         ff:09:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:35 2025 by rpki-client