Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa
File:                     6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa (raw, json)
Hash identifier:          +6XxYO6ZKf4awt0ooJ/aCguzUthiP4pELFxsf7w09q4=
Subject key identifier:   DB:7E:04:2F:02:EB:42:B9:DC:0C:8A:88:2C:3E:92:BD:7D:B2:40:8C
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F43285848F22C26A37718BA3AD661FA80
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     63293
IP address blocks:        129.134.162.0/24 maxlen: 24
                          157.240.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:26:a3:77:18:ba:3a:d6:61:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=28ec7254-22aa-40bb-aaa3-89f5c2ed7ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:17:46:23:de:28:ba:c8:25:08:7f:78:01:
                    d8:91:eb:08:3a:3a:d4:ca:86:ec:e0:4c:bf:82:04:
                    35:15:09:2c:60:3f:43:32:84:15:58:45:88:98:39:
                    5c:e6:1c:ca:a0:f1:81:ca:16:f6:f0:5c:c9:e8:0a:
                    2e:4c:da:f5:df:8e:1d:05:21:32:cd:3b:10:03:03:
                    0b:3c:a0:96:b3:ed:15:c4:86:3b:a6:56:8b:b3:29:
                    14:e0:3d:41:ba:85:3a:d5:2b:f2:6b:dd:4a:1d:e5:
                    a2:24:b2:30:db:91:cb:86:e6:4b:68:c8:e3:1a:d8:
                    c5:c2:fb:3c:22:6b:49:59:50:c2:e6:eb:11:af:89:
                    3d:83:4d:ab:4e:80:d5:98:0d:a8:8e:c1:78:bf:67:
                    e6:5c:3e:53:66:24:ae:32:8b:23:cc:05:c6:10:b4:
                    e6:6b:e2:88:de:c8:72:6b:6c:81:df:80:6b:b5:4e:
                    b6:c1:47:a1:0d:62:4f:b9:84:12:9d:ad:5f:f0:a2:
                    54:f3:58:23:85:81:41:a2:d2:70:d1:57:a4:10:70:
                    dd:f3:fc:33:2b:04:f7:7f:84:96:55:c7:9c:7e:54:
                    eb:73:4c:1d:3c:11:2c:4a:6c:bb:da:c0:c5:f2:af:
                    78:58:d1:c2:6f:ce:c4:64:e7:d8:f1:df:62:71:76:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7E:04:2F:02:EB:42:B9:DC:0C:8A:88:2C:3E:92:BD:7D:B2:40:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.162.0/24
                  157.240.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:fa:cf:46:19:22:c4:1f:96:17:07:14:48:93:bf:44:aa:
         c2:71:60:34:12:1e:3a:27:1c:b4:d8:8f:77:bc:e1:f6:38:af:
         b6:c2:ef:45:c8:3d:f8:e3:b3:2c:a4:42:a3:e9:fc:6c:cc:17:
         88:c0:1d:2d:01:6a:46:4d:23:6c:1e:99:38:5e:c7:2f:a7:55:
         1e:f0:ee:1d:9f:d9:2a:55:0d:2f:b1:25:e9:6f:ad:53:0a:6b:
         f5:76:9c:b8:ce:6a:bc:26:23:04:f0:1e:d9:aa:33:18:4c:73:
         54:98:3f:97:37:6c:77:5a:a7:ff:f7:da:f9:48:55:be:18:3c:
         c5:cc:5b:b6:d9:78:17:3f:3f:92:f6:68:3a:5e:24:12:4a:77:
         d6:42:3f:05:72:94:22:e6:45:5f:e6:ac:61:25:f4:f3:83:9a:
         47:7a:73:15:16:0c:76:03:78:df:af:e0:81:31:08:27:1b:2d:
         04:68:a1:e0:bc:20:7f:7c:42:40:73:dc:8b:ef:e7:1b:8d:69:
         dc:f9:d5:e7:21:4f:db:af:78:7a:8e:4b:00:9b:4f:03:fc:9b:
         2d:f7:a5:56:21:5a:e6:7b:37:d7:a3:bb:5c:57:03:04:0e:0b:
         16:85:a8:77:6b:6a:c1:57:3e:b6:fe:c2:a0:d5:e4:c0:7d:3a:
         23:91:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:37 2025 by rpki-client