Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/135303db-7826-33d3-aa16-4c35f1788821.roa
File:                     135303db-7826-33d3-aa16-4c35f1788821.roa (raw, json)
Hash identifier:          fKNuOoEfEeBjeidyMlME70H0g5OkvHWKh0Fyj/extzo=
Subject key identifier:   AD:BE:07:DC:A3:97:09:71:DD:41:E2:76:5F:10:40:EC:27:E2:29:6D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A936B5A689DDE7BC65A3F3340
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/135303db-7826-33d3-aa16-4c35f1788821.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     271
IP address blocks:        134.87.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5a:68:9d:de:7b:c6:5a:3f:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=d7ed7412-87b7-4f1c-bfef-524802b21082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:45:38:e0:7f:c0:6c:70:40:bb:03:6d:17:
                    ea:50:1c:96:76:18:18:c8:40:6f:16:44:2c:45:60:
                    b1:69:66:05:47:6a:aa:55:df:36:ec:ae:06:0f:f7:
                    10:8e:ca:86:b1:14:c1:64:7d:f6:96:fa:80:d2:67:
                    ec:92:e9:1e:c1:ba:d0:95:59:37:d0:c5:41:49:6c:
                    74:09:e6:3f:3b:34:f6:14:3c:b5:9e:5d:a0:79:da:
                    95:73:93:a6:02:4e:d0:21:f8:13:76:3a:f9:cd:91:
                    37:4d:76:6f:0c:05:7a:90:3d:bc:d4:8c:29:60:b2:
                    70:16:0b:e9:fc:d5:a5:93:1f:b2:58:75:47:c4:b2:
                    03:3a:e2:b4:38:5f:b2:82:d3:db:cc:3c:5c:2e:4c:
                    47:80:0e:d2:fe:7f:ae:86:9f:de:b1:b6:a9:1e:cf:
                    97:56:c3:91:89:87:ab:ed:cd:be:5f:d4:b3:79:aa:
                    73:ba:33:8d:43:65:5b:69:4f:6c:09:1a:6b:92:04:
                    7c:3b:d6:94:cc:eb:91:4a:10:3f:76:fa:44:f2:2e:
                    68:79:1f:8a:af:75:1d:aa:93:a0:9a:f5:4b:30:a4:
                    ec:f7:3c:f0:7e:3f:1f:e7:c7:02:5b:6c:7d:14:ef:
                    45:49:2e:29:90:50:d1:44:ff:23:5b:9a:8e:d6:de:
                    48:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BE:07:DC:A3:97:09:71:DD:41:E2:76:5F:10:40:EC:27:E2:29:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/135303db-7826-33d3-aa16-4c35f1788821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:60:83:6c:ff:19:0b:72:86:fe:01:6d:80:68:ef:11:02:b1:
         a0:a9:a6:87:43:cc:89:b6:fb:70:f9:de:46:06:7b:91:7e:f5:
         b9:d8:ba:b6:db:3b:09:8c:b2:d3:f2:8a:df:97:78:aa:c9:59:
         56:f4:13:40:41:4a:0f:4e:8f:de:6f:9e:26:76:cb:20:e2:d9:
         79:30:99:e2:6a:35:76:0d:92:d8:de:82:e2:38:44:25:51:70:
         14:9e:ee:e7:45:ae:f4:cc:ce:3f:d0:88:46:ea:28:62:02:e5:
         06:06:cf:24:53:cd:66:1f:1b:2f:19:04:9a:7d:23:f8:c4:ba:
         f4:b1:7b:41:a4:1c:2e:e8:6d:eb:82:aa:21:66:ec:96:fb:fb:
         f7:8d:01:ee:57:94:c7:a9:f8:c1:62:34:88:44:e7:cf:99:f4:
         e4:aa:58:4f:5d:ca:0a:05:51:29:c1:20:1b:d1:8d:80:55:dc:
         e0:4f:c5:01:33:32:24:44:04:b7:f4:de:81:a4:45:53:88:9a:
         be:0b:f8:ea:8e:ea:69:58:d7:26:45:08:52:a3:d2:b6:c0:65:
         37:96:a9:1f:ac:54:aa:34:76:bf:65:14:39:1a:26:ce:ba:7b:
         30:7a:af:77:2a:ad:f4:42:be:2b:8a:95:2d:04:8c:09:b6:a4:
         c9:a9:f5:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa1pond57xlo/M0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk
ZDdlZDc0MTItODdiNy00ZjFjLWJmZWYtNTI0ODAyYjIxMDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj5FOOB/wGxwQLsDbRfqUByWdhgYyEBvFkQs
RWCxaWYFR2qqVd827K4GD/cQjsqGsRTBZH32lvqA0mfskukewbrQlVk30MVBSWx0
CeY/OzT2FDy1nl2gedqVc5OmAk7QIfgTdjr5zZE3TXZvDAV6kD281IwpYLJwFgvp
/NWlkx+yWHVHxLIDOuK0OF+ygtPbzDxcLkxHgA7S/n+uhp/esbapHs+XVsORiYer
7c2+X9SzeapzujONQ2VbaU9sCRprkgR8O9aUzOuRShA/dvpE8i5oeR+Kr3UdqpOg
mvVLMKTs9zzwfj8f58cCW2x9FO9FSS4pkFDRRP8jW5qO1t5I9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK2+B9yjlwlx3UHidl8QQOwn4iltMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMTM1MzAzZGItNzgyNi0z
M2QzLWFhMTYtNGMzNWYxNzg4ODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhlcGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMRgg2z/GQtyhv4BbYBo7xECsaCppodDzIm2+3D53kYGe5F+9bnYurbb
OwmMstPyit+XeKrJWVb0E0BBSg9Oj95vniZ2yyDi2XkwmeJqNXYNktjeguI4RCVR
cBSe7udFrvTMzj/QiEbqKGIC5QYGzyRTzWYfGy8ZBJp9I/jEuvSxe0GkHC7obeuC
qiFm7Jb7+/eNAe5XlMep+MFiNIhE58+Z9OSqWE9dygoFUSnBIBvRjYBV3OBPxQEz
MiREBLf03oGkRVOImr4L+OqO6mlY1yZFCFKj0rbAZTeWqR+sVKo0dr9lFDkaJs66
ezB6r3cqrfRCviuKlS0EjAm2pMmp9bE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:14 2025 by rpki-client