Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/161e6543-bf38-3c32-ad77-69abe4fd5d39.roa
File:                     161e6543-bf38-3c32-ad77-69abe4fd5d39.roa (raw, json)
Hash identifier:          mvXot1dozHM0v1AoVsGjJsV4y5D2+CC2k1kYU2xb6W0=
Subject key identifier:   D4:A0:37:73:72:A8:C1:CD:2E:CF:48:CF:F8:94:4C:7A:D7:99:52:54
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584A2C2026DEDD8D81813EACB600
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/161e6543-bf38-3c32-ad77-69abe4fd5d39.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     63293
IP address blocks:        129.134.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:26:de:dd:8d:81:81:3e:ac:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=cfdcc06f-f74d-4bec-9983-84132626b3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:17:99:06:91:5c:cf:be:14:04:ed:8a:2b:
                    a5:c4:1d:83:74:df:61:89:02:df:2d:fa:75:34:b3:
                    8a:60:68:68:a4:1d:c3:0e:da:d7:e1:3b:47:e7:70:
                    ab:b6:be:1a:ec:3e:5a:91:e9:77:fa:31:3b:73:b2:
                    21:38:c5:31:01:ac:c8:e4:d2:48:17:ef:2e:78:5c:
                    1a:b6:a5:ad:36:e9:9c:48:14:04:7e:f0:d9:ec:6a:
                    0a:dc:6c:4b:7b:e8:4e:a3:53:f7:3a:bf:ae:48:25:
                    d3:d7:b4:0b:be:eb:6a:5a:09:27:58:b3:14:b9:90:
                    2d:40:65:c7:89:53:f7:4e:71:6b:8a:60:2d:a3:07:
                    8e:15:61:a8:d0:7c:ca:a3:26:b5:c5:68:f8:f2:c7:
                    87:76:6c:7a:63:82:07:1b:eb:e3:23:ea:e0:7d:50:
                    65:da:3e:9d:2c:ca:a1:e0:a3:f1:ef:de:c8:01:05:
                    2c:86:9b:53:2a:15:c0:df:8d:3b:5f:f1:7f:ad:03:
                    1a:58:f6:05:76:ab:10:57:d9:0a:52:bf:00:2a:5e:
                    a7:e0:d9:33:01:d7:26:d2:f9:a1:f5:70:db:32:71:
                    51:cb:1c:29:c2:34:eb:fe:87:c6:5e:2e:c5:36:13:
                    f6:2a:7f:d7:92:66:77:10:d2:e3:fc:14:00:fc:c1:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A0:37:73:72:A8:C1:CD:2E:CF:48:CF:F8:94:4C:7A:D7:99:52:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/161e6543-bf38-3c32-ad77-69abe4fd5d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:13:68:d0:09:26:c6:87:4d:c8:d9:9b:46:c7:96:98:10:36:
         17:b3:da:f8:b0:da:47:cf:f2:25:e6:fc:eb:c4:17:76:14:a1:
         b6:16:2f:d9:14:f8:7e:88:21:f0:11:f6:6a:54:6b:6d:18:ba:
         fc:e1:1d:02:dd:78:a0:4d:c7:e6:67:3d:71:19:3b:00:a2:7a:
         88:2a:42:70:65:4e:eb:08:8b:ce:f2:80:64:bc:fe:8a:99:2c:
         9f:88:30:27:46:cc:0f:a0:8c:2a:fe:31:39:d7:9d:b8:41:da:
         f1:ea:6c:49:c8:6b:d5:8b:dc:88:be:f4:ff:cd:dc:3b:51:b8:
         39:87:e5:f2:e0:3a:e0:c3:4b:b4:21:b7:51:b0:68:46:71:c4:
         a4:a8:6b:8c:c1:17:4b:55:1c:19:87:92:92:17:fa:6c:68:b5:
         02:0f:6e:c1:8b:1c:45:45:67:af:a4:16:70:b4:94:8b:29:84:
         28:8c:a0:d8:54:77:19:cf:db:b2:06:7c:3c:58:cf:d6:d2:96:
         a5:1c:e0:e0:67:5a:d1:a1:9d:eb:92:5f:8f:7a:22:91:ff:a6:
         f6:b9:8e:b8:ef:a8:7c:58:81:e4:3b:ae:fc:c5:3e:c7:df:5b:
         7a:e1:bc:fa:c0:3c:c5:6a:ab:9d:3b:5f:27:5b:03:d3:67:ac:
         ce:12:35:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:11:32 2025 by rpki-client