Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/083abc8a-e3de-3e6a-b232-e17d83a0d6ff.roa
File:                     083abc8a-e3de-3e6a-b232-e17d83a0d6ff.roa (raw, json)
Hash identifier:          FuRlkQ2eMmI2HDRuHG0XfyDYkmfH27UpnEUxQAwUOAI=
Subject key identifier:   4E:89:0D:8A:97:87:D2:1E:47:4E:19:D7:8B:74:3E:3E:8B:46:18:B9
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584BA7CCEF97EBCD6FBD431F2D80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/083abc8a-e3de-3e6a-b232-e17d83a0d6ff.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     271
IP address blocks:        134.87.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:ef:97:eb:cd:6f:bd:43:1f:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=6f96a222-aa51-41ee-bbc0-d60cc72458e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:bd:e9:64:ad:a6:94:65:64:12:6a:cc:4a:
                    d3:2c:85:62:91:64:9a:98:e3:77:ef:00:96:08:cf:
                    5b:8f:92:cd:64:d1:61:b7:73:93:42:9f:a4:27:26:
                    7b:ce:4b:ab:9c:b9:5d:83:56:52:da:02:d4:4b:35:
                    2b:e3:38:76:a9:cd:96:1a:ed:c8:4c:16:6d:4a:4d:
                    c7:af:1f:90:69:dc:1f:ff:b2:2e:f3:4a:bc:64:cb:
                    d3:3e:f1:c4:22:dd:90:a0:b6:f8:a5:d4:f7:05:83:
                    b7:72:73:54:ad:4d:41:bc:0e:c8:11:0c:d0:b1:71:
                    60:b7:b2:dd:9f:9e:c8:0b:0f:b5:c4:dc:8c:e6:17:
                    a3:ac:79:ee:d8:91:60:90:1f:89:5d:8b:e4:2a:39:
                    c5:75:cd:17:ec:e2:3c:e8:aa:4a:cc:09:1b:5f:63:
                    02:76:de:07:ba:15:eb:b1:0c:84:b6:41:ab:5c:67:
                    e3:eb:4f:50:b6:d5:a3:4b:5d:3e:ba:76:bc:08:36:
                    95:8c:b0:84:43:f9:44:a0:ee:80:24:7c:2c:4d:3e:
                    06:8b:69:25:b2:aa:fd:47:c4:0e:87:90:36:86:87:
                    20:40:55:f4:92:06:4a:e4:54:d9:ae:81:8a:a6:b8:
                    28:30:f8:9e:e2:bb:ef:66:3d:26:17:c7:38:a4:96:
                    74:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:0D:8A:97:87:D2:1E:47:4E:19:D7:8B:74:3E:3E:8B:46:18:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/083abc8a-e3de-3e6a-b232-e17d83a0d6ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:10:18:b9:95:b1:bb:53:78:1c:93:84:51:3e:c3:13:64:ec:
         ff:0c:43:43:e1:98:3c:f1:fa:10:04:8f:2e:87:e7:74:5c:b0:
         06:81:05:08:c3:55:36:5b:7c:f0:7b:8a:ae:87:bf:05:3c:6e:
         d8:5b:ad:b0:65:d0:30:a5:8b:55:ff:e3:d5:f8:f2:b6:af:0f:
         6b:23:4d:d6:a4:ba:81:1b:d1:a2:eb:af:b5:52:06:6d:0e:29:
         14:91:3f:04:2a:8f:ab:93:eb:64:7a:d3:3f:05:08:e9:ea:44:
         9a:1c:99:fe:10:aa:29:a2:aa:1c:07:14:66:73:50:7a:c4:6b:
         0e:03:c5:2a:61:ac:a9:45:5d:2d:2f:f4:79:0f:cd:e7:8f:08:
         3d:aa:5a:df:93:92:de:46:12:4b:6f:30:7e:dc:4d:9f:6c:16:
         79:c9:fb:1e:14:8e:c2:ba:10:12:62:81:4a:1d:68:71:4f:18:
         ba:2d:bf:63:a4:79:01:3d:dd:b9:de:2f:70:ac:d5:98:58:36:
         da:16:d6:b7:44:75:8a:c6:06:b3:48:93:4e:32:5d:e1:34:89:
         ee:f2:2d:1f:92:be:6a:fb:d6:ce:a3:cd:16:c2:31:c8:c4:69:
         e3:8b:70:a3:4e:ff:df:47:79:5c:a9:fa:d7:a9:3d:5c:2f:4e:
         39:f0:e1:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzO+X681vvUMfLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
NmY5NmEyMjItYWE1MS00MWVlLWJiYzAtZDYwY2M3MjQ1OGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw296WStppRlZBJqzErTLIVikWSamON37wCW
CM9bj5LNZNFht3OTQp+kJyZ7zkurnLldg1ZS2gLUSzUr4zh2qc2WGu3ITBZtSk3H
rx+Qadwf/7Iu80q8ZMvTPvHEIt2QoLb4pdT3BYO3cnNUrU1BvA7IEQzQsXFgt7Ld
n57ICw+1xNyM5hejrHnu2JFgkB+JXYvkKjnFdc0X7OI86KpKzAkbX2MCdt4HuhXr
sQyEtkGrXGfj609QttWjS10+una8CDaVjLCEQ/lEoO6AJHwsTT4Gi2klsqr9R8QO
h5A2hocgQFX0kgZK5FTZroGKprgoMPie4rvvZj0mF8c4pJZ0UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE6JDYqXh9IeR04Z14t0Pj6LRhi5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMDgzYWJjOGEtZTNkZS0z
ZTZhLWIyMzItZTE3ZDgzYTBkNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhlcAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcQGLmVsbtTeByThFE+wxNk7P8MQ0PhmDzx+hAEjy6H53RcsAaBBQjD
VTZbfPB7iq6HvwU8bthbrbBl0DCli1X/49X48ravD2sjTdakuoEb0aLrr7VSBm0O
KRSRPwQqj6uT62R60z8FCOnqRJocmf4QqimiqhwHFGZzUHrEaw4DxSphrKlFXS0v
9HkPzeePCD2qWt+Tkt5GEktvMH7cTZ9sFnnJ+x4UjsK6EBJigUodaHFPGLotv2Ok
eQE93bneL3Cs1ZhYNtoW1rdEdYrGBrNIk04yXeE0ie7yLR+Svmr71s6jzRbCMcjE
aeOLcKNO/99HeVyp+tepPVwvTjnw4Zg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:07:04 2025 by rpki-client