Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/93405565-7458-3107-a127-035a4de55c06.roa
File:                     93405565-7458-3107-a127-035a4de55c06.roa (raw, json)
Hash identifier:          tVEWj6410PEWWpXcMHR/o26rCDQiOAYUWheMjvqQUAo=
Subject key identifier:   5A:F7:FA:6C:1F:1E:22:75:18:2C:F2:29:0E:63:D7:51:3D:A7:E5:58
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584AA9C0DA1D9A80822F996E56F0
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/93405565-7458-3107-a127-035a4de55c06.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     63293
IP address blocks:        157.240.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:da:1d:9a:80:82:2f:99:6e:56:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=90a10948-7af7-4138-b67d-b5a360a3d905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:60:68:98:b2:a8:95:b6:18:9c:54:f4:d6:
                    c5:63:59:fc:c0:d4:dc:15:83:ba:d2:96:b0:db:5b:
                    8c:ab:88:6f:75:5a:43:f4:58:24:07:7f:b5:33:2c:
                    9e:48:c7:36:0f:7c:96:ec:c4:ad:92:58:e9:87:1d:
                    0d:1e:46:ae:2a:1c:c0:62:97:c1:0f:1d:4f:3a:08:
                    76:6b:cc:80:fe:e3:b2:95:a7:4a:bd:a8:96:35:cb:
                    4c:4c:3c:40:ba:e0:a0:57:ef:88:3e:3c:62:a7:39:
                    8d:0d:c5:7f:9a:b0:fc:37:67:ae:b3:af:c0:59:d4:
                    75:3b:25:12:71:b3:55:e1:8f:fa:4a:4c:eb:e1:55:
                    8e:ca:9a:12:64:77:2f:0f:15:1c:7b:97:b8:4c:18:
                    13:a9:6c:d4:bc:66:5a:88:36:2b:7e:38:c2:41:75:
                    01:43:c0:a3:42:ae:ae:44:32:79:86:fb:d3:2c:4f:
                    0d:1e:0d:40:4f:77:14:51:0c:ab:4c:24:1c:7b:1c:
                    11:8b:74:32:ff:a0:ce:67:24:12:78:9c:c7:ee:5e:
                    a7:e0:06:1e:10:82:d8:5d:9d:03:b4:00:7b:d9:90:
                    a2:4f:3a:eb:7a:1f:82:b3:54:75:56:77:d6:16:26:
                    26:03:3c:a8:54:87:df:19:36:3d:25:ae:3a:b7:c7:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F7:FA:6C:1F:1E:22:75:18:2C:F2:29:0E:63:D7:51:3D:A7:E5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/93405565-7458-3107-a127-035a4de55c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:68:76:de:53:54:27:76:b3:ea:95:00:7a:24:51:1e:40:04:
         b0:f2:79:58:8b:5c:b1:01:72:e5:64:e0:95:43:fd:4a:fe:f0:
         aa:11:bf:22:a4:68:8d:89:85:07:98:c0:7a:fe:ba:ad:7c:1b:
         cc:89:06:54:7c:49:50:b7:1b:25:51:ad:ed:f0:44:78:37:ad:
         c3:67:9f:e7:a0:d5:bc:1a:cc:e2:a0:f4:3d:70:ef:ed:36:53:
         bd:34:60:5a:b1:15:2a:eb:6b:89:71:d1:4e:74:49:b3:fb:c3:
         a2:bf:61:f0:66:f1:b2:89:70:4e:c0:b1:4f:5b:e6:c0:9e:b6:
         55:82:f5:60:fb:84:7e:41:88:26:15:79:a0:6f:65:c4:1e:aa:
         3e:07:c6:43:ae:5e:9b:bd:a1:5a:2f:83:fc:cc:db:59:7f:b1:
         3e:f9:37:7e:43:a3:f8:2c:3a:3a:54:81:c2:93:42:0c:85:bd:
         ba:e6:8f:ca:8a:7b:6b:17:4c:d5:05:fa:08:f1:52:96:65:0b:
         f3:c9:c1:f2:d2:a9:3e:3b:3c:40:44:a4:a9:71:51:df:66:aa:
         75:5e:09:8d:7e:1e:69:ef:ed:93:80:f3:1b:0b:f4:59:11:e5:
         fb:41:c7:61:d1:bb:d4:57:da:37:61:86:a9:a5:50:42:1c:5e:
         75:8f:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:10 2025 by rpki-client