Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa
File:                     132e7b72-2d06-316b-afaa-74c07ae106c5.roa (raw, json)
Hash identifier:          BNU3HuT2Hi7Gcs3ZKWGvf5lkmFzQbBLMNqDF2GTbca0=
Subject key identifier:   DC:9D:51:77:C4:C4:CB:B1:99:FA:6E:0E:89:58:F9:5F:7D:CD:65:E5
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F43285849D85FEC74951F3B21572A24D4
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63293
IP address blocks:        129.134.191.0/24 maxlen: 24
                          157.240.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ec:74:95:1f:3b:21:57:2a:24:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=576b1860-f8d1-4a13-ba13-c7ef6d66c7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:de:4e:d6:7c:48:dc:4e:32:f9:d9:54:e6:4d:
                    fc:81:e9:d6:11:9c:76:b0:e5:9c:bb:96:e1:b6:73:
                    bf:81:66:6e:e9:31:14:80:f9:87:38:8a:b8:ff:b9:
                    25:99:51:5c:c7:02:47:16:0c:8b:7a:1f:9d:3c:1b:
                    77:a5:be:f4:d0:00:c6:e9:c0:03:eb:18:33:09:c9:
                    52:62:8b:69:ce:ea:ef:5a:45:ec:74:fa:df:d2:58:
                    0f:ad:9f:8c:ec:66:41:a1:8e:d4:11:f8:a3:39:bd:
                    55:3d:3a:2e:d0:f0:81:78:c8:7a:1d:83:bb:3c:2e:
                    ab:d3:68:54:97:d6:78:3d:6a:00:4a:b9:a7:b6:52:
                    3b:96:e3:fd:8d:d9:ad:db:40:0c:54:a9:05:63:e4:
                    c9:af:d1:f6:af:c8:50:b5:05:61:2b:58:56:80:64:
                    be:8e:ed:bc:b7:b1:84:ac:88:7c:49:27:c5:83:52:
                    02:05:25:46:82:d6:f0:13:7b:92:3c:85:73:2e:b7:
                    a1:15:0a:3d:21:8f:cd:b6:7b:a3:ce:0b:a6:fb:66:
                    ef:aa:bd:0e:1e:19:c3:79:8f:5c:5f:fd:30:e4:fc:
                    ae:92:a7:49:59:6b:40:1c:d9:10:92:2f:45:82:e5:
                    c5:15:2a:d6:29:b5:bf:fb:63:43:7c:4c:58:14:d9:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:51:77:C4:C4:CB:B1:99:FA:6E:0E:89:58:F9:5F:7D:CD:65:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.191.0/24
                  157.240.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:77:a1:99:f0:3c:dd:40:d1:bd:d0:c6:05:a4:37:4e:a8:e1:
         fe:f7:3e:75:4f:cb:83:e1:65:dc:24:29:46:1e:78:97:ff:ec:
         4a:45:9a:86:d5:7a:68:1a:d2:bd:31:48:e4:7f:47:58:32:16:
         b9:8e:c7:b1:ab:ef:03:0f:41:b9:d9:dc:2e:ee:0d:dd:99:8d:
         4e:df:c9:e3:f2:de:39:da:df:58:20:90:06:dc:03:e2:14:17:
         9e:5c:22:54:c6:a1:94:c7:00:be:f5:9f:21:81:6a:d1:f7:b0:
         47:2d:b0:89:ae:2a:19:0d:71:b7:42:e6:2a:cb:a5:a4:00:a5:
         83:e5:5a:3c:86:63:58:61:2e:b0:26:72:1c:c7:9a:0f:16:88:
         20:32:35:ed:50:19:11:2a:2d:ca:73:1b:ec:9b:a9:e3:ce:51:
         6f:e4:19:58:3f:5c:d0:4b:41:a6:ac:c9:4f:44:0f:a5:a1:50:
         eb:3e:ff:0b:86:df:19:96:ec:1f:e7:af:97:03:51:74:fe:4a:
         41:b6:68:7a:5e:7f:17:88:36:98:fa:d5:50:03:34:04:77:61:
         d6:43:e8:f9:21:e3:d9:f5:0a:b2:bc:02:8d:5f:f0:16:ec:20:
         13:06:db:00:ac:a9:36:e4:e5:e0:d1:3a:2a:3b:05:ab:c8:7e:
         b5:8f:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:09:46 2025 by rpki-client