Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa
File:                     0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa (raw, json)
Hash identifier:          4xQqbk/w4ZuQLMBeFGXXT0NW8cJl/iSKoFosyQSyflI=
Subject key identifier:   E4:48:C8:E8:E5:03:68:A2:DE:DC:03:31:DC:5B:36:C1:EF:29:9B:43
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584A7350BE8CB18CF8EE9518AC00
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     63293
IP address blocks:        129.134.128.0/24 maxlen: 24
                          129.134.130.0/24 maxlen: 24
                          129.134.131.0/24 maxlen: 24
                          129.134.132.0/24 maxlen: 24
                          129.134.135.0/24 maxlen: 24
                          129.134.136.0/24 maxlen: 24
                          129.134.137.0/24 maxlen: 24
                          129.134.138.0/24 maxlen: 24
                          129.134.139.0/24 maxlen: 24
                          129.134.140.0/24 maxlen: 24
                          129.134.143.0/24 maxlen: 24
                          129.134.144.0/24 maxlen: 24
                          129.134.147.0/24 maxlen: 24
                          129.134.148.0/24 maxlen: 24
                          129.134.149.0/24 maxlen: 24
                          129.134.150.0/24 maxlen: 24
                          129.134.154.0/24 maxlen: 24
                          129.134.155.0/24 maxlen: 24
                          129.134.156.0/24 maxlen: 24
                          129.134.157.0/24 maxlen: 24
                          129.134.158.0/24 maxlen: 24
                          129.134.159.0/24 maxlen: 24
                          129.134.160.0/26 maxlen: 26
                          129.134.161.0/24 maxlen: 24
                          129.134.163.0/24 maxlen: 24
                          129.134.164.0/24 maxlen: 24
                          129.134.165.0/24 maxlen: 24
                          129.134.168.0/24 maxlen: 24
                          129.134.169.0/24 maxlen: 24
                          129.134.170.0/24 maxlen: 24
                          129.134.171.0/24 maxlen: 24
                          129.134.172.0/24 maxlen: 24
                          129.134.173.0/24 maxlen: 24
                          129.134.174.0/24 maxlen: 24
                          129.134.175.0/24 maxlen: 24
                          129.134.176.0/24 maxlen: 24
                          129.134.177.0/24 maxlen: 24
                          129.134.178.0/24 maxlen: 24
                          129.134.179.0/24 maxlen: 24
                          129.134.181.0/24 maxlen: 24
                          129.134.182.0/24 maxlen: 24
                          129.134.183.0/24 maxlen: 24
                          129.134.184.0/24 maxlen: 24
                          129.134.185.0/24 maxlen: 24
                          129.134.186.0/24 maxlen: 24
                          129.134.187.0/24 maxlen: 24
                          157.240.128.0/24 maxlen: 24
                          157.240.157.0/24 maxlen: 24
                          157.240.158.0/24 maxlen: 24
                          157.240.169.0/24 maxlen: 24
                          157.240.170.0/24 maxlen: 24
                          157.240.175.0/24 maxlen: 24
                          157.240.176.0/24 maxlen: 24
                          157.240.177.0/24 maxlen: 24
                          157.240.179.0/24 maxlen: 24
                          157.240.181.0/24 maxlen: 24
                          157.240.182.0/24 maxlen: 24
                          157.240.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:be:8c:b1:8c:f8:ee:95:18:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=ab1be70d-bca8-4479-a9a4-0dcca02a4e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:86:36:27:30:fb:66:3c:41:fa:59:73:b9:
                    06:13:b6:14:54:44:ec:27:c9:4f:bc:8e:cd:b3:33:
                    d0:65:b2:87:59:e5:70:28:fb:f3:f4:55:0d:2d:68:
                    e4:56:54:6a:06:d8:68:9e:49:35:f4:66:f3:79:18:
                    93:be:c5:f5:df:05:c6:1f:04:aa:ba:d9:fd:16:e5:
                    f6:61:84:27:3e:28:60:3d:2e:96:bd:1c:0e:47:ae:
                    24:e0:25:c1:91:b7:bd:1c:c8:25:f4:2a:e9:39:c2:
                    3a:dd:94:74:c4:17:47:d4:79:91:ca:e8:0b:3b:dd:
                    28:ab:fa:d9:c8:34:26:65:6f:df:47:52:c2:75:16:
                    d4:5c:46:58:dc:a4:8f:15:ad:38:3c:28:61:66:0c:
                    ca:cb:26:00:02:48:e2:c2:8d:ba:b1:cd:50:ee:9d:
                    ac:6f:94:e4:75:57:4b:7d:60:68:cd:28:c8:21:55:
                    46:37:65:c0:85:cb:d7:56:76:12:8f:b6:f7:38:c7:
                    64:9b:34:1b:15:2d:8f:42:7f:9f:60:6d:97:d1:c4:
                    a7:0b:76:2b:26:3e:7c:f2:1d:90:5a:db:45:3c:1a:
                    59:cc:7b:2b:db:7a:63:19:10:16:0a:6d:56:8a:bc:
                    e2:3b:d2:d3:3e:ad:87:69:dc:ca:f3:da:b7:46:c1:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:C8:E8:E5:03:68:A2:DE:DC:03:31:DC:5B:36:C1:EF:29:9B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.128.0/24
                  129.134.130.0-129.134.132.255
                  129.134.135.0-129.134.140.255
                  129.134.143.0-129.134.144.255
                  129.134.147.0-129.134.150.255
                  129.134.154.0-129.134.160.63
                  129.134.161.0/24
                  129.134.163.0-129.134.165.255
                  129.134.168.0-129.134.179.255
                  129.134.181.0-129.134.187.255
                  157.240.128.0/24
                  157.240.157.0-157.240.158.255
                  157.240.169.0-157.240.170.255
                  157.240.175.0-157.240.177.255
                  157.240.179.0/24
                  157.240.181.0-157.240.183.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:09:5f:ee:37:2c:7e:8d:1f:12:68:5e:be:27:a4:96:6e:
         f9:04:fd:b0:ca:33:cd:6a:27:f7:c2:02:09:75:1f:7a:7e:ab:
         01:16:22:41:2c:0e:5e:b2:90:18:82:93:3a:a2:71:a0:fe:7e:
         a9:2b:f2:4b:fc:e3:70:a4:8c:6b:5f:0d:a1:b8:95:51:cf:7d:
         84:08:22:72:3f:b1:f8:7a:c4:38:3d:f7:2b:dd:f1:a8:53:01:
         ac:76:85:eb:56:5d:a4:a1:82:f6:a9:e2:13:b3:84:1f:78:ab:
         11:24:a6:28:22:4e:de:e4:67:76:e6:01:f7:ad:f2:36:d4:ea:
         c3:17:f7:00:6f:18:b0:92:d4:29:24:9d:d4:6a:d5:5c:6f:9f:
         95:8f:ea:66:12:da:d3:6e:b2:41:24:21:12:f2:7f:2e:70:cc:
         75:07:8f:03:5d:87:d7:6c:0f:69:02:86:b3:95:04:1c:bd:7e:
         b1:b8:dd:80:7b:08:31:6b:ab:53:98:e7:22:c1:ec:eb:a4:a2:
         24:be:14:19:4a:72:64:4a:82:3b:30:77:55:65:03:27:bb:b5:
         a8:7f:17:4a:4c:20:63:cb:90:7f:98:31:b7:c4:73:23:bc:4c:
         af:b2:3a:a5:0e:e0:aa:9b:f2:6d:01:5d:93:90:1b:f7:05:f4:
         69:95:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 11:27:38 2025 by rpki-client