Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa
File:                     0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa (raw, json)
Hash identifier:          hcGyzOsQO8xwyVh8kw6ei3lPb7g93P8LQNc1y2aixdE=
Subject key identifier:   A0:24:BF:47:16:AF:16:9E:5F:0B:74:7E:C6:AF:F0:FE:77:99:53:17
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F43285847D56A15191F54564631C4A5E0
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     63293
IP address blocks:        129.134.128.0/24 maxlen: 24
                          129.134.130.0/24 maxlen: 24
                          129.134.131.0/24 maxlen: 24
                          129.134.132.0/24 maxlen: 24
                          129.134.135.0/24 maxlen: 24
                          129.134.136.0/24 maxlen: 24
                          129.134.137.0/24 maxlen: 24
                          129.134.138.0/24 maxlen: 24
                          129.134.139.0/24 maxlen: 24
                          129.134.140.0/24 maxlen: 24
                          129.134.143.0/24 maxlen: 24
                          129.134.144.0/24 maxlen: 24
                          129.134.147.0/24 maxlen: 24
                          129.134.148.0/24 maxlen: 24
                          129.134.149.0/24 maxlen: 24
                          129.134.150.0/24 maxlen: 24
                          129.134.154.0/24 maxlen: 24
                          129.134.155.0/24 maxlen: 24
                          129.134.156.0/24 maxlen: 24
                          129.134.157.0/24 maxlen: 24
                          129.134.158.0/24 maxlen: 24
                          129.134.159.0/24 maxlen: 24
                          129.134.160.0/26 maxlen: 26
                          129.134.161.0/24 maxlen: 24
                          129.134.163.0/24 maxlen: 24
                          129.134.164.0/24 maxlen: 24
                          129.134.165.0/24 maxlen: 24
                          129.134.168.0/24 maxlen: 24
                          129.134.169.0/24 maxlen: 24
                          129.134.170.0/24 maxlen: 24
                          129.134.171.0/24 maxlen: 24
                          129.134.172.0/24 maxlen: 24
                          129.134.173.0/24 maxlen: 24
                          129.134.174.0/24 maxlen: 24
                          129.134.175.0/24 maxlen: 24
                          129.134.176.0/24 maxlen: 24
                          129.134.177.0/24 maxlen: 24
                          129.134.178.0/24 maxlen: 24
                          129.134.179.0/24 maxlen: 24
                          129.134.181.0/24 maxlen: 24
                          129.134.182.0/24 maxlen: 24
                          129.134.183.0/24 maxlen: 24
                          129.134.184.0/24 maxlen: 24
                          129.134.185.0/24 maxlen: 24
                          129.134.186.0/24 maxlen: 24
                          129.134.187.0/24 maxlen: 24
                          157.240.128.0/24 maxlen: 24
                          157.240.157.0/24 maxlen: 24
                          157.240.158.0/24 maxlen: 24
                          157.240.169.0/24 maxlen: 24
                          157.240.170.0/24 maxlen: 24
                          157.240.175.0/24 maxlen: 24
                          157.240.176.0/24 maxlen: 24
                          157.240.177.0/24 maxlen: 24
                          157.240.179.0/24 maxlen: 24
                          157.240.181.0/24 maxlen: 24
                          157.240.182.0/24 maxlen: 24
                          157.240.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:15:19:1f:54:56:46:31:c4:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=a6a67f47-caeb-4088-a7c7-8757692958f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:fd:02:37:d4:dd:29:39:51:d1:62:cf:28:
                    e5:e3:5c:90:f2:12:6a:e9:87:56:a0:ce:f0:45:75:
                    88:81:1c:8a:c1:a1:dd:ae:f0:89:57:4a:1b:d2:89:
                    99:16:8a:b0:5a:20:2a:f1:72:ad:ab:72:57:af:a5:
                    4e:4f:48:99:94:8b:78:85:5a:89:f1:18:33:3d:f5:
                    8c:70:2d:ca:5e:4f:9a:10:27:be:18:b5:5c:12:6b:
                    6d:cc:91:69:f0:fd:cc:f3:44:70:3d:c1:37:88:d2:
                    1c:a0:a0:81:55:21:ff:28:70:63:5a:f6:2d:86:07:
                    c4:78:80:d4:76:95:c4:1e:e9:dc:89:e7:b0:d7:b2:
                    26:5c:69:47:ba:f3:84:d4:b5:20:da:a1:77:44:c2:
                    57:99:e6:00:d4:07:95:f7:e5:23:90:53:cd:1e:6f:
                    5a:a4:8f:64:13:54:48:c4:8f:42:54:b6:3b:0a:78:
                    b2:3a:7d:23:41:d2:24:e1:f4:50:20:6e:a5:73:a1:
                    b5:7e:ed:d5:b9:f7:c1:08:c7:2a:a0:c2:fe:0d:3f:
                    7d:cb:59:58:82:83:50:91:2e:df:ee:7b:ac:7f:d3:
                    e6:a1:62:d5:43:c8:64:58:8c:3b:fe:62:eb:56:db:
                    0e:6e:38:de:e7:4a:65:bd:fd:4e:6d:25:a6:75:08:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:24:BF:47:16:AF:16:9E:5F:0B:74:7E:C6:AF:F0:FE:77:99:53:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.128.0/24
                  129.134.130.0-129.134.132.255
                  129.134.135.0-129.134.140.255
                  129.134.143.0-129.134.144.255
                  129.134.147.0-129.134.150.255
                  129.134.154.0-129.134.160.63
                  129.134.161.0/24
                  129.134.163.0-129.134.165.255
                  129.134.168.0-129.134.179.255
                  129.134.181.0-129.134.187.255
                  157.240.128.0/24
                  157.240.157.0-157.240.158.255
                  157.240.169.0-157.240.170.255
                  157.240.175.0-157.240.177.255
                  157.240.179.0/24
                  157.240.181.0-157.240.183.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:22:a3:ce:5e:04:5b:e0:bf:bb:26:b5:13:90:78:70:90:3f:
         c3:78:52:4d:3d:e1:7a:a0:c2:1a:9f:70:6d:65:a5:22:49:e8:
         01:8f:f0:12:d6:a6:97:b0:7a:e5:da:a9:01:52:f4:29:49:03:
         8a:3f:51:58:86:3d:ca:84:81:fe:db:08:6b:d3:24:42:7d:cf:
         5b:b9:a4:8d:dd:ca:fe:26:bb:72:2a:5b:d9:f0:a6:30:2f:73:
         e9:03:41:d5:fc:16:76:b0:a3:b1:02:3b:09:5d:1c:fb:e4:a3:
         54:55:45:21:3f:bd:da:14:67:f0:9a:4f:9b:33:a4:fa:6d:4c:
         31:32:88:97:1b:d9:01:1f:4e:9b:3b:1a:be:a1:3e:e3:99:de:
         1e:38:2d:67:30:33:c6:75:80:2d:16:a0:ee:39:e1:ca:b7:cf:
         68:38:18:35:64:28:73:a0:80:fd:ab:7e:c5:31:0e:03:e5:8e:
         2e:99:1b:fa:dd:e1:0d:0f:1b:5c:20:13:c5:9a:dc:f4:93:d1:
         ad:ca:0b:02:38:b1:2e:e3:e5:6f:b4:64:87:e3:e1:e9:83:66:
         58:57:bf:b5:c1:53:41:43:2a:0e:4f:3e:49:e6:88:42:42:0f:
         b4:32:f1:3a:15:90:fb:51:87:26:11:58:ff:7a:79:1c:2b:20:
         1b:63:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:08 2024 by rpki-client on console-fra.rpki-client.org