Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/1f202cfc-b516-3550-a3cc-5f6cbe1d2dd9.roa
File:                     1f202cfc-b516-3550-a3cc-5f6cbe1d2dd9.roa (raw, json)
Hash identifier:          GAd4Rd9Bpzay/oWrrWOAFq+KgZi/FzTqfTyuHSp7zJ0=
Subject key identifier:   ED:98:D1:7C:4D:9B:FB:1C:41:53:83:A1:36:49:34:19:1F:3C:C2:B2
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584AC2E10EE22B2F273077434800
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/1f202cfc-b516-3550-a3cc-5f6cbe1d2dd9.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     35819
IP address blocks:        157.240.164.0/24 maxlen: 24
                          157.240.165.0/24 maxlen: 24
                          157.240.166.0/24 maxlen: 24
                          157.240.167.0/24 maxlen: 24
                          157.240.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0e:e2:2b:2f:27:30:77:43:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=1309b039-4d4f-4e47-9cfc-d078b1622b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:92:03:c8:31:78:0f:93:25:77:ca:13:ea:
                    c7:d8:c0:14:7a:c2:74:0d:57:34:4c:4e:2a:f5:28:
                    64:5f:f2:f7:d4:7e:ee:3c:33:e1:40:e8:c1:a7:1b:
                    06:8c:a7:58:9b:0b:ae:ce:47:30:5d:68:8c:0d:cb:
                    e3:16:a7:43:55:59:e7:b5:56:e0:dd:87:ac:69:38:
                    4e:c3:82:b9:6a:73:e0:c5:b7:26:2e:d8:ca:2a:26:
                    8e:72:2d:51:c4:67:e1:99:da:0d:db:36:b3:7f:f1:
                    c1:12:ec:83:44:6a:88:c8:23:77:d9:e4:c2:14:b3:
                    73:6e:9f:b3:a2:54:eb:f4:b8:54:30:4b:6b:e1:66:
                    b2:77:92:4d:70:36:7c:44:13:09:ce:5f:42:ee:55:
                    cc:6c:5b:8f:34:1d:98:f1:08:00:e1:3e:45:4f:7c:
                    bd:1c:59:de:13:e1:7f:57:a9:47:d5:c8:9f:a0:fe:
                    70:78:a8:71:85:b8:b4:12:73:a2:13:b7:77:41:b5:
                    5b:4d:47:05:ec:83:73:99:e7:be:a5:6f:0e:82:00:
                    64:ba:58:27:06:ba:a4:ce:b6:1d:9e:55:37:0e:40:
                    45:27:1d:cc:24:09:17:79:85:19:7e:58:4f:d3:1b:
                    fc:b8:e3:4b:8f:2f:49:45:7c:99:6f:7d:af:d8:34:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:D1:7C:4D:9B:FB:1C:41:53:83:A1:36:49:34:19:1F:3C:C2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/1f202cfc-b516-3550-a3cc-5f6cbe1d2dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.164.0-157.240.168.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:da:70:46:ee:f0:32:e7:b1:ce:0b:35:c2:2d:94:8f:a3:f3:
         f0:14:1e:30:78:7c:bd:07:7e:a6:48:a5:77:a2:55:61:fc:c5:
         76:60:9a:ae:0c:c2:4f:6a:27:fa:c6:bb:27:e1:86:1a:89:46:
         ba:dd:12:23:e6:86:1b:4f:70:32:c2:d4:c2:81:df:c7:e0:6a:
         c2:71:f0:df:4a:d1:e0:a3:ba:c5:21:92:0c:a8:75:95:39:e5:
         d0:e3:54:27:9a:96:f5:68:43:00:d6:3f:9a:ff:11:35:fc:b0:
         cb:c1:de:03:1a:f4:1e:9e:be:4c:df:58:27:89:d5:f5:9c:60:
         b4:52:05:7d:48:ee:6b:53:93:61:da:a7:0e:1e:34:4a:33:13:
         db:71:50:7a:27:a0:e5:b9:ef:ef:e6:a7:d3:0b:ae:82:94:5d:
         4a:55:2b:90:41:d0:01:e6:9d:95:10:66:76:e4:bc:9b:19:39:
         d1:43:a9:22:93:30:05:0e:70:be:32:31:3d:eb:93:9e:11:0f:
         e3:00:bf:1a:2e:c9:e8:ad:25:8f:73:0e:a6:68:4e:6f:3f:f8:
         82:00:de:c0:50:88:f3:e7:e6:f7:50:b1:e3:00:07:01:3b:ce:
         d4:1e:51:b8:e0:d3:3a:b3:ec:e0:3b:e0:17:9f:45:05:ee:90:
         4d:3c:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:10:56 2025 by rpki-client