Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/93405565-7458-3107-a127-035a4de55c06.roa
File:                     93405565-7458-3107-a127-035a4de55c06.roa (raw, json)
Hash identifier:          G97WO5XzJvZLE7aawmy8+akC7BrjnkMVlDkrmuTuEfs=
Subject key identifier:   7F:F9:98:8F:D1:51:B4:C5:2A:D5:01:5E:D3:64:C2:8A:BA:DE:29:71
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584E296EFD3A1313A5882371E300
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/93405565-7458-3107-a127-035a4de55c06.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     63293
IP address blocks:        157.240.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:fd:3a:13:13:a5:88:23:71:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=7a5f8314-251c-4580-b1df-eabb1223f605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:71:a8:d4:1f:b8:9b:8d:2a:22:e0:d0:a6:
                    ad:55:b7:90:a6:2d:b3:c8:20:1f:25:a7:db:62:61:
                    44:c4:f0:6d:9c:1d:6a:9a:5c:dc:a2:e0:c9:18:26:
                    8a:cd:6e:f2:eb:1f:76:7b:15:87:d4:96:f2:8a:9b:
                    32:68:5b:57:18:8e:1c:b2:06:ee:db:74:d7:78:c3:
                    12:5c:50:40:34:c6:e4:9a:d8:85:39:b5:38:46:86:
                    cb:3f:b8:ab:5d:4c:65:4b:33:d1:a1:99:d8:91:33:
                    92:94:ec:d1:37:51:63:65:87:d1:f5:31:0f:1d:78:
                    7c:10:45:7d:ab:46:51:06:5e:37:ad:01:43:6c:a3:
                    2f:11:b8:70:ad:a7:1a:3c:d4:10:cd:0c:76:34:b9:
                    6d:e4:05:7a:7c:06:28:cb:82:c5:e7:5d:74:72:16:
                    2b:ae:64:d3:66:0d:28:5b:4d:e8:9f:32:a8:25:d9:
                    f2:4a:6a:61:96:b1:29:d4:8c:68:bd:fc:82:0c:fa:
                    97:59:b8:97:df:ee:f9:f2:b8:7e:c3:77:ef:c4:ca:
                    07:73:23:22:c2:51:38:95:2b:68:79:f1:28:fe:6e:
                    e5:d0:a3:5a:61:40:a9:70:06:fb:ea:2e:d5:bd:7a:
                    fb:8d:a3:88:a9:05:03:ba:03:91:f2:65:f3:e3:11:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F9:98:8F:D1:51:B4:C5:2A:D5:01:5E:D3:64:C2:8A:BA:DE:29:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/93405565-7458-3107-a127-035a4de55c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:e3:a3:c9:29:85:d3:d7:88:22:32:a3:ce:3c:fd:55:a7:
         47:43:55:b2:b1:69:ec:cf:6b:d8:9d:65:af:c2:e2:c4:97:1c:
         f2:2d:25:bc:9d:6d:bd:de:c6:62:80:61:17:a7:9c:c0:f6:5c:
         44:91:51:67:8a:38:60:0c:b1:50:0d:32:8e:ad:17:31:57:3d:
         2d:8e:68:9c:ef:6d:4d:8d:fb:0d:be:55:39:41:9c:6f:7f:45:
         03:5c:ce:35:72:f8:f0:64:6f:7c:dc:e8:eb:28:4a:d3:6c:0d:
         be:27:b9:da:56:ba:ad:42:5c:5c:b1:1b:3f:f4:ca:4a:76:6b:
         64:ce:87:88:40:67:c3:4b:86:5e:db:67:d3:a9:47:8a:9b:ea:
         a4:2a:55:d5:71:00:6c:d3:ff:8d:84:f1:80:43:29:15:19:b7:
         15:fa:d0:bb:52:d8:e8:52:5a:f6:7c:4c:83:d5:d1:4d:fb:c4:
         f8:3c:66:09:5b:9e:62:a2:db:d4:dc:15:1f:72:a0:24:11:b4:
         9e:cf:89:7a:ba:34:39:d2:17:eb:e4:f4:a8:b0:98:34:99:d5:
         89:28:98:01:5e:da:a9:32:c5:91:99:18:13:de:85:94:2a:41:
         48:e4:78:ff:3b:69:00:2e:52:9e:7a:7c:8f:12:97:bb:54:30:
         dc:49:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:17:26 2026 by rpki-client