Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
File:                     4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (raw, json)
Hash identifier:          Llt2KVfYSP/9q7ZBmylkyXAJNKN59WcYgvNVo/sZmFo=
Subject key identifier:   EB:CF:05:93:90:08:AD:E7:3C:BA:A4:D1:74:13:B5:09:7F:EE:4D:F0
Certificate issuer:       /CN=af121a54-266e-447b-8176-bfcd1dc7867c
Certificate serial:       010D0C9F43285849E7BA87588F45E88C2EF4D300
Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     152117
IP address blocks:        80.73.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:87:58:8f:45:e8:8c:2e:f4:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=5186d670-9717-45aa-a14f-fceb89529b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:98:34:2b:a3:5e:7a:d1:3d:74:a7:bf:b2:
                    b8:f7:b9:99:a9:f3:a6:9a:00:30:cd:e1:c4:d5:33:
                    e2:4b:ad:72:08:5e:8b:e6:8c:24:52:f0:8a:3b:8e:
                    43:8d:15:a4:d2:b0:55:2f:54:3d:73:9c:56:ee:cf:
                    81:80:3b:73:56:70:60:21:8f:1c:ef:a8:c6:d5:60:
                    72:27:8c:fc:61:53:db:93:4b:bb:3d:f4:74:e9:76:
                    ae:ba:1d:96:5d:47:c7:97:07:b9:54:32:62:1f:57:
                    04:7c:25:38:2c:19:3b:c8:b7:ec:b2:b1:0b:b9:d9:
                    87:e5:05:74:6b:03:75:9b:89:c6:ee:1c:37:f4:e5:
                    b0:cf:ff:24:36:19:82:8e:e0:65:ae:f4:40:4e:c1:
                    14:ae:ac:ee:6a:19:45:fc:f7:fe:91:46:53:b4:e5:
                    e4:ef:7a:a3:6c:f1:ea:32:39:a1:80:1b:5e:d0:50:
                    41:bd:f5:dc:81:30:32:86:aa:60:52:79:1b:91:aa:
                    32:24:1f:f3:d7:cc:00:44:40:09:fa:03:b9:7f:eb:
                    f3:7d:60:ca:1d:5c:18:25:5d:f6:31:3e:7d:6c:49:
                    9a:17:79:eb:c2:22:3d:ea:91:e6:af:69:90:aa:e1:
                    18:24:e8:ad:ab:c4:38:8f:42:f7:0b:62:4d:61:13:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CF:05:93:90:08:AD:E7:3C:BA:A4:D1:74:13:B5:09:7F:EE:4D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl

            X509v3 Authority Key Identifier:
                keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ac:83:27:f8:11:bf:10:23:2f:0b:5f:b4:5d:9e:31:ec:85:
         44:80:a5:38:6c:3f:58:66:21:7d:c8:f3:92:07:a2:95:d4:79:
         0d:83:9a:05:d7:52:48:4a:d5:b9:3e:f0:61:8a:5b:e1:74:ce:
         2b:97:18:21:50:56:b7:54:a7:3b:44:1c:62:b7:05:d7:79:6d:
         2e:89:fa:f7:b6:52:3f:e4:e7:80:3e:f1:00:f7:e1:b2:78:15:
         6e:6d:a9:70:e2:81:8e:55:63:85:51:aa:05:bc:a4:dd:bd:92:
         4d:41:53:24:ae:c2:7e:be:e9:00:05:d1:d0:77:22:2f:ae:68:
         22:37:07:ab:78:3e:2b:83:f7:2d:07:8a:8d:71:4e:30:30:4b:
         c6:4b:ba:42:bd:43:3d:a8:7e:d9:77:5f:d9:9c:67:17:35:ac:
         f6:e0:3c:a9:9a:e3:68:fc:1d:5e:76:97:6a:8f:6c:bd:3c:77:
         41:09:4f:91:c5:84:c9:6c:fc:41:ee:5c:fe:65:0d:18:4b:e1:
         46:14:da:dd:7d:00:98:e5:e0:7e:8b:4d:17:71:2e:ec:3d:1c:
         e1:3d:d3:ef:52:4f:a5:69:8d:38:4f:c8:30:59:88:8f:c6:71:
         8c:4c:89:46:c8:0c:cc:8f:05:d6:6f:79:ad:fd:f5:92:17:52:
         7f:fe:72:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuodYj0XojC700wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4
NjdjMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
NTE4NmQ2NzAtOTcxNy00NWFhLWExNGYtZmNlYjg5NTI5YjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS2YNCujXnrRPXSnv7K497mZqfOmmgAwzeHE
1TPiS61yCF6L5owkUvCKO45DjRWk0rBVL1Q9c5xW7s+BgDtzVnBgIY8c76jG1WBy
J4z8YVPbk0u7PfR06Xauuh2WXUfHlwe5VDJiH1cEfCU4LBk7yLfssrELudmH5QV0
awN1m4nG7hw39OWwz/8kNhmCjuBlrvRATsEUrqzuahlF/Pf+kUZTtOXk73qjbPHq
MjmhgBte0FBBvfXcgTAyhqpgUnkbkaoyJB/z18wAREAJ+gO5f+vzfWDKHVwYJV32
MT59bEmaF3nrwiI96pHmr2mQquEYJOitq8Q4j0L3C2JNYRNWewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvPBZOQCK3nPLqk0XQTtQl/7k3wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy
MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvNDE2NWJmYTktYmNhZC0z
MzA2LWFkOWItM2U1MzllZGUxZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx
NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3
ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk
MWRjNzg2N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEmGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqsgyf4Eb8QIy8LX7RdnjHshUSApThsP1hmIX3I85IHopXUeQ2DmgXX
UkhK1bk+8GGKW+F0ziuXGCFQVrdUpztEHGK3Bdd5bS6J+ve2Uj/k54A+8QD34bJ4
FW5tqXDigY5VY4VRqgW8pN29kk1BUySuwn6+6QAF0dB3Ii+uaCI3B6t4PiuD9y0H
io1xTjAwS8ZLukK9Qz2oftl3X9mcZxc1rPbgPKma42j8HV52l2qPbL08d0EJT5HF
hMls/EHuXP5lDRhL4UYU2t19AJjl4H6LTRdxLuw9HOE90+9ST6VpjThPyDBZiI/G
cYxMiUbIDMyPBdZvea399ZIXUn/+ciU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:01:47 2025 by rpki-client