Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/70261711-c95a-3d64-9428-82d03682a232.roa
File:                     70261711-c95a-3d64-9428-82d03682a232.roa (raw, json)
Hash identifier:          +EagYjB86Mj/ABdYyZgFc3tym6Egg5FVtHY0HpYu1zU=
Subject key identifier:   56:7F:19:38:0B:F7:84:E4:B5:77:DE:47:19:06:B7:B7:D3:8A:18:4A
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DDD2086095BA46574BD3EE320
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/70261711-c95a-3d64-9428-82d03682a232.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     271
IP address blocks:        134.87.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:86:09:5b:a4:65:74:bd:3e:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=28c52976-b0c3-4543-9406-e95a9de9f333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:5d:ff:2a:ec:25:49:2d:df:41:18:b5:97:
                    90:7e:94:5c:51:f0:3c:19:53:2a:62:b9:f1:00:5a:
                    e8:65:ee:bb:f8:b3:3e:51:04:96:ba:94:10:c2:b3:
                    5c:62:74:63:92:6d:1c:15:5e:53:cb:64:b2:b4:1e:
                    1f:fb:01:75:ce:27:8b:fa:40:33:52:79:c8:d4:6d:
                    9e:a9:c9:fd:09:49:8a:3b:01:f7:1b:d7:a2:5f:6b:
                    0e:db:fc:8a:b3:9e:86:bc:4b:8c:43:df:f3:48:10:
                    3c:ca:2d:53:5f:19:c1:99:2e:f9:2e:f9:98:7e:fa:
                    60:72:57:d4:87:85:64:0b:2b:ae:6b:ff:af:74:ed:
                    d5:8e:b8:03:ab:92:98:c7:da:83:8d:36:85:35:40:
                    a6:7e:9c:b6:0d:48:a5:e6:b8:21:1b:95:8a:36:04:
                    65:ba:0f:24:d4:20:4c:57:cd:94:53:dc:66:d4:d2:
                    f4:c8:3f:ed:0d:ce:e2:b1:3d:aa:1d:f1:d5:16:5c:
                    cf:96:89:0c:e1:2d:68:ca:ef:f3:4a:c1:ed:13:97:
                    86:c6:84:36:2b:4c:43:94:51:a8:fd:c6:bc:87:80:
                    c3:39:61:35:f4:16:0e:05:77:87:de:f6:e7:e2:e1:
                    6e:66:30:3a:39:03:17:5e:a9:fa:19:08:3c:14:57:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7F:19:38:0B:F7:84:E4:B5:77:DE:47:19:06:B7:B7:D3:8A:18:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/70261711-c95a-3d64-9428-82d03682a232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6c:ed:ae:be:f1:90:ef:1c:f8:15:57:2e:1b:d8:4c:6b:9b:
         8e:f6:50:f8:b7:e3:6d:31:0d:34:b2:1f:3b:c8:8c:55:d2:02:
         f7:b3:d7:68:b7:3f:01:d0:5d:05:59:ad:14:ba:38:5b:5b:49:
         ad:be:ca:5f:3d:0c:ce:fb:3d:01:c1:70:d5:41:c1:a1:af:8d:
         f1:c3:c1:9e:a7:01:4a:99:2b:bc:6f:72:6c:01:03:23:b9:7d:
         5f:aa:e0:54:4f:7e:37:f0:02:94:79:70:85:13:a8:f0:dc:ad:
         b1:2d:f9:a0:d4:b5:e1:13:86:03:2c:6f:3e:88:20:c6:28:1f:
         c0:07:e1:59:b2:cd:5b:22:9a:40:65:74:6c:d6:cf:5c:80:e7:
         ee:8c:c6:72:99:a3:7e:cd:60:80:e8:23:cf:a5:ca:7b:2a:e7:
         36:8c:71:7e:0b:24:45:19:c6:b7:d0:65:5a:8d:86:12:e2:c5:
         83:bb:e1:0d:6a:9c:89:58:ab:6a:46:ba:0f:c5:67:b7:44:d2:
         b0:ad:88:af:ac:8e:51:c1:f8:77:dd:01:f2:db:5a:4d:bc:e7:
         fd:1f:60:03:6b:e0:27:2e:1c:5a:68:25:85:86:05:80:6d:e4:
         7d:ea:ef:c8:7b:46:2f:47:5b:09:3f:c2:3f:b3:f8:b0:71:bb:
         9e:80:c3:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIIYJW6RldL0+4yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk
MjhjNTI5NzYtYjBjMy00NTQzLTk0MDYtZTk1YTlkZTlmMzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXhd/yrsJUkt30EYtZeQfpRcUfA8GVMqYrnx
AFroZe67+LM+UQSWupQQwrNcYnRjkm0cFV5Ty2SytB4f+wF1zieL+kAzUnnI1G2e
qcn9CUmKOwH3G9eiX2sO2/yKs56GvEuMQ9/zSBA8yi1TXxnBmS75LvmYfvpgclfU
h4VkCyuua/+vdO3VjrgDq5KYx9qDjTaFNUCmfpy2DUil5rghG5WKNgRlug8k1CBM
V82UU9xm1NL0yD/tDc7isT2qHfHVFlzPlokM4S1oyu/zSsHtE5eGxoQ2K0xDlFGo
/ca8h4DDOWE19BYOBXeH3vbn4uFuZjA6OQMXXqn6GQg8FFdh1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZ/GTgL94TktXfeRxkGt7fTihhKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNzAyNjE3MTEtYzk1YS0z
ZDY0LTk0MjgtODJkMDM2ODJhMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhlcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9s7a6+8ZDvHPgVVy4b2Exrm472UPi3420xDTSyHzvIjFXSAvez12i3
PwHQXQVZrRS6OFtbSa2+yl89DM77PQHBcNVBwaGvjfHDwZ6nAUqZK7xvcmwBAyO5
fV+q4FRPfjfwApR5cIUTqPDcrbEt+aDUteEThgMsbz6IIMYoH8AH4VmyzVsimkBl
dGzWz1yA5+6MxnKZo37NYIDoI8+lynsq5zaMcX4LJEUZxrfQZVqNhhLixYO74Q1q
nIlYq2pGug/FZ7dE0rCtiK+sjlHB+HfdAfLbWk285/0fYANr4CcuHFpoJYWGBYBt
5H3q78h7Ri9HWwk/wj+z+LBxu56Aw1c=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:43 2026 by rpki-client