Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3450e557-c8fa-3876-bcde-2281dab61dcf.roa
File:                     3450e557-c8fa-3876-bcde-2281dab61dcf.roa (raw, json)
Hash identifier:          Z2i90CIXGNVgFpeC3rgjjy1Hayg1o4RbYyNWZ4NJb6s=
Subject key identifier:   DB:25:DA:64:1E:35:7D:D4:CA:F6:EB:B8:5D:0A:68:5C:45:59:A0:51
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A280B7D085A3ED8B96280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3450e557-c8fa-3876-bcde-2281dab61dcf.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     204957
IP address blocks:        172.120.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:28:0b:7d:08:5a:3e:d8:b9:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=895aadec-d09c-48c5-b6da-316771253072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:a3:e7:13:aa:34:30:55:bb:cc:ce:27:c2:
                    a1:fd:94:b4:3d:d1:71:cd:82:b4:b6:e8:fd:07:50:
                    45:a8:bc:56:62:4e:57:90:14:c9:d7:70:6a:1f:a1:
                    89:e1:38:0e:08:75:61:0e:bb:d6:56:83:7c:77:ad:
                    ae:7b:ea:ee:e7:dc:17:30:f4:5a:5c:2a:5e:c6:93:
                    3e:76:b2:58:64:48:bf:df:6a:fe:0a:a0:e0:2b:45:
                    ae:8a:0b:93:6a:d5:5c:90:91:71:68:37:22:ee:e3:
                    a0:f7:f7:d0:04:ae:b7:14:fe:3e:d2:5a:25:87:97:
                    87:6e:3e:af:92:9c:d0:53:91:27:88:68:7c:70:82:
                    1d:18:c9:0b:32:99:f5:28:f9:c0:fd:3a:f9:a6:4c:
                    4a:21:33:17:0a:a1:18:d4:67:fe:bd:e4:0c:13:f4:
                    20:08:89:05:31:e1:4f:11:6f:51:1a:ed:4d:37:9b:
                    a4:33:0f:5d:40:f7:37:22:29:1c:2a:d6:c9:90:41:
                    46:d9:80:a2:b2:46:b1:bb:b5:c0:20:b6:77:ae:a1:
                    24:01:07:c7:06:1b:f3:0f:b8:dd:55:69:32:15:ef:
                    62:3b:49:55:f4:3c:2f:d3:0f:62:bb:e5:47:2e:7f:
                    e9:13:8f:b4:f9:67:b1:12:39:b2:ee:78:01:5f:d6:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:25:DA:64:1E:35:7D:D4:CA:F6:EB:B8:5D:0A:68:5C:45:59:A0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3450e557-c8fa-3876-bcde-2281dab61dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:64:f7:d3:c4:5f:42:33:31:50:19:4e:ee:7a:69:88:05:
         4c:0a:18:bf:f5:68:ef:6c:40:f5:3a:f3:bf:67:82:61:04:47:
         62:26:25:be:9e:cf:4b:ce:b5:ab:68:53:99:01:34:6c:4a:9f:
         86:bf:4d:f7:d2:51:3b:fa:a1:e6:64:66:9c:b0:d8:c8:9c:89:
         0a:d3:fa:fa:86:24:43:e7:b4:08:de:a8:89:ca:f2:d7:0d:fe:
         fe:20:0e:c6:6f:d5:9f:91:87:40:40:05:e9:b1:d6:57:5b:70:
         0e:83:28:d2:94:57:90:d0:07:9e:f5:1b:d5:35:25:3b:f2:90:
         c9:3c:0a:84:33:85:e9:6f:a6:f0:b3:43:41:7f:9f:29:7d:8c:
         59:31:83:9e:d6:f7:a4:c1:47:38:1e:4f:e8:24:49:a1:1e:d5:
         aa:1d:d5:b2:a0:a3:a7:9f:96:e4:5e:97:5f:e5:1a:25:ec:80:
         1e:cd:af:a2:1b:73:73:d1:a1:23:4c:39:59:5b:ec:ab:13:d8:
         ac:51:ad:51:39:80:a0:e5:d4:01:2d:61:e1:31:59:16:e1:fb:
         d1:9f:39:2a:6a:a9:02:92:f0:de:96:6a:ac:1d:c0:71:b5:d9:
         9b:0b:39:d7:1d:79:2b:ef:dc:bd:eb:20:b3:f3:87:c1:fa:a4:
         73:2c:1b:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eigLfQhaPti5YoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
ODk1YWFkZWMtZDA5Yy00OGM1LWI2ZGEtMzE2NzcxMjUzMDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhOj5xOqNDBVu8zOJ8Kh/ZS0PdFxzYK0tuj9
B1BFqLxWYk5XkBTJ13BqH6GJ4TgOCHVhDrvWVoN8d62ue+ru59wXMPRaXCpexpM+
drJYZEi/32r+CqDgK0WuiguTatVckJFxaDci7uOg9/fQBK63FP4+0lolh5eHbj6v
kpzQU5EniGh8cIIdGMkLMpn1KPnA/Tr5pkxKITMXCqEY1Gf+veQME/QgCIkFMeFP
EW9RGu1NN5ukMw9dQPc3IikcKtbJkEFG2YCiskaxu7XAILZ3rqEkAQfHBhvzD7jd
VWkyFe9iO0lV9Dwv0w9iu+VHLn/pE4+0+WexEjmy7ngBX9aPQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsl2mQeNX3UyvbruF0KaFxFWaBRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzQ1MGU1NTctYzhmYS0z
ODc2LWJjZGUtMjI4MWRhYjYxZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHihMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFblZPfTxF9CMzFQGU7uemmIBUwKGL/1aO9sQPU6879ngmEER2ImJb6e
z0vOtatoU5kBNGxKn4a/TffSUTv6oeZkZpyw2MiciQrT+vqGJEPntAjeqInK8tcN
/v4gDsZv1Z+Rh0BABemx1ldbcA6DKNKUV5DQB571G9U1JTvykMk8CoQzhelvpvCz
Q0F/nyl9jFkxg57W96TBRzgeT+gkSaEe1aod1bKgo6efluRel1/lGiXsgB7Nr6Ib
c3PRoSNMOVlb7KsT2KxRrVE5gKDl1AEtYeExWRbh+9GfOSpqqQKS8N6WaqwdwHG1
2ZsLOdcdeSvv3L3rILPzh8H6pHMsGyc=
-----END CERTIFICATE-----
Generated at Sun May 11 09:11:03 2025 by rpki-client