Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/51339229-2481-3714-9d1c-6fb1b945fa14.roa
File:                     51339229-2481-3714-9d1c-6fb1b945fa14.roa (raw, json)
Hash identifier:          hYsLThv/MiZrCgjBEgzfRU/Ld1HTSiTefodFo4Q4FV4=
Subject key identifier:   26:41:49:E8:98:93:70:27:B1:11:CB:8B:A4:3C:F1:DC:DC:7B:44:7B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584EA792785A79AF1815DA796E80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/51339229-2481-3714-9d1c-6fb1b945fa14.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     271
IP address blocks:        134.87.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:78:5a:79:af:18:15:da:79:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=080080f2-f0a6-4f54-b78b-be0eab3940c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1b:77:61:87:bf:12:88:3e:99:b1:00:92:0b:
                    85:3a:d5:0a:50:cb:07:cc:d7:28:03:1f:a3:84:6c:
                    ff:90:cf:23:df:05:d9:b1:74:7f:41:a7:ff:b5:8d:
                    89:0b:cf:ff:85:1f:ae:f7:4a:e5:96:1c:b2:67:3b:
                    53:43:a6:03:db:df:9f:56:1e:05:ec:50:45:c5:27:
                    b5:c5:e4:59:25:e2:3b:9d:30:f7:f0:e6:54:04:e6:
                    6d:6e:2c:56:a1:2e:5f:1b:99:a8:19:24:4c:e4:96:
                    22:0e:3d:81:d0:d8:02:11:cc:a3:12:e4:b7:19:af:
                    70:d4:c8:7d:14:46:a0:f5:1a:1b:ef:f4:64:04:92:
                    66:ca:26:44:d0:bd:5b:24:db:57:b8:44:e5:23:60:
                    9f:23:41:64:63:ae:7a:8f:0f:36:b0:28:ae:94:81:
                    a4:4f:0e:ac:80:b7:aa:5a:36:95:bd:40:72:eb:1a:
                    62:d3:ea:da:df:09:40:f9:ff:40:72:a4:ff:ad:c9:
                    7a:f2:8a:db:ad:25:03:50:c5:19:c9:bb:66:b2:86:
                    46:e4:e2:fa:fa:a8:16:d9:fc:6e:af:2e:50:c3:e5:
                    79:80:d7:2e:82:57:23:32:35:87:4a:aa:cf:74:60:
                    bd:bb:8c:c9:7f:4a:17:21:ab:15:e9:97:e7:43:47:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:41:49:E8:98:93:70:27:B1:11:CB:8B:A4:3C:F1:DC:DC:7B:44:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/51339229-2481-3714-9d1c-6fb1b945fa14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:20:b1:ca:e2:cf:75:9f:f9:ca:9e:33:1c:4f:7b:41:b4:25:
         9c:8c:ec:6d:32:15:13:a8:18:dc:af:6c:6d:45:0e:da:63:3b:
         32:4b:9b:a2:0d:5e:68:42:6a:a4:58:89:e2:e6:cc:41:3d:9e:
         36:82:86:67:eb:0b:27:98:96:ea:e4:09:d9:cb:0e:f9:06:77:
         a2:1b:7a:c7:82:a7:d1:10:f2:b2:21:0f:e1:12:c7:da:a5:fa:
         c9:58:70:b3:3c:85:57:34:4f:04:e6:ea:1c:f4:78:2a:a0:16:
         3d:7f:84:ac:ab:9e:1d:a3:6a:f1:6f:e9:0f:29:ca:0f:2e:f3:
         14:79:9c:4d:7d:72:8a:13:b3:68:35:8b:b5:e2:86:ad:f7:d7:
         9a:12:3e:62:00:31:3f:52:90:24:bb:e6:d4:27:65:76:3c:03:
         ed:85:a5:70:b1:5f:95:63:ce:3e:05:67:bb:2f:1d:11:c1:87:
         1b:b1:8f:d2:13:1a:e3:da:32:47:2a:70:74:35:8c:84:96:6c:
         f6:86:63:64:7e:dc:4d:73:b5:d5:dd:35:a8:9d:56:a7:f3:a4:
         46:1c:58:27:f3:01:6c:57:25:2b:18:3c:f3:f6:79:94:ae:6f:
         d5:c1:40:5c:c7:79:9a:a8:e8:2d:c0:80:4c:c3:a1:37:c2:48:
         6b:e9:87:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nknhaea8YFdp5boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDgwMDgwZjItZjBhNi00ZjU0LWI3OGItYmUwZWFiMzk0MGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxt3YYe/Eog+mbEAkguFOtUKUMsHzNcoAx+j
hGz/kM8j3wXZsXR/Qaf/tY2JC8//hR+u90rllhyyZztTQ6YD29+fVh4F7FBFxSe1
xeRZJeI7nTD38OZUBOZtbixWoS5fG5moGSRM5JYiDj2B0NgCEcyjEuS3Ga9w1Mh9
FEag9Rob7/RkBJJmyiZE0L1bJNtXuETlI2CfI0FkY656jw82sCiulIGkTw6sgLeq
WjaVvUBy6xpi0+ra3wlA+f9AcqT/rcl68orbrSUDUMUZybtmsoZG5OL6+qgW2fxu
ry5Qw+V5gNcuglcjMjWHSqrPdGC9u4zJf0oXIasV6ZfnQ0ewDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZBSeiYk3AnsRHLi6Q88dzce0R7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTEzMzkyMjktMjQ4MS0z
NzE0LTlkMWMtNmZiMWI5NDVmYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChlcYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwgscriz3Wf+cqeMxxPe0G0JZyM7G0yFROoGNyvbG1FDtpjOzJLm6IN
XmhCaqRYieLmzEE9njaChmfrCyeYlurkCdnLDvkGd6IbeseCp9EQ8rIhD+ESx9ql
+slYcLM8hVc0TwTm6hz0eCqgFj1/hKyrnh2javFv6Q8pyg8u8xR5nE19cooTs2g1
i7Xihq3315oSPmIAMT9SkCS75tQnZXY8A+2FpXCxX5Vjzj4FZ7svHRHBhxuxj9IT
GuPaMkcqcHQ1jISWbPaGY2R+3E1ztdXdNaidVqfzpEYcWCfzAWxXJSsYPPP2eZSu
b9XBQFzHeZqo6C3AgEzDoTfCSGvph5c=
-----END CERTIFICATE-----
Generated at Thu Jul 30 04:46:57 2026 by rpki-client