Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb0441f0-e696-366f-bc32-4e2fda9df275.roa
File:                     bb0441f0-e696-366f-bc32-4e2fda9df275.roa (raw, json)
Hash identifier:          YRjfmGSKxj2iMrp3Rj0iWahUwK8+BU1vCoM4yXYzrBE=
Subject key identifier:   2F:45:49:BF:E3:D2:6E:F4:4E:88:CA:A2:F2:69:76:08:81:74:18:93
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A8B0B64E4671404FD1022F9A0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb0441f0-e696-366f-bc32-4e2fda9df275.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     16462
IP address blocks:        134.87.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:64:e4:67:14:04:fd:10:22:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=cc0c4d03-2565-4da8-93c4-bba272565b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ea:4f:6f:a9:8e:cb:be:9d:49:37:94:d8:8a:
                    b8:b2:d7:c2:1a:fc:35:66:f3:05:27:d4:8d:b5:30:
                    9b:bf:81:10:b3:97:9c:e7:98:ed:3c:dd:40:66:8c:
                    9b:54:1b:eb:68:3f:c4:1d:c0:7d:b3:3c:11:a4:f6:
                    9b:30:97:19:c6:b2:84:82:43:c3:f7:3f:2a:96:f4:
                    bc:25:14:ad:7e:20:fe:90:5e:86:01:93:a0:24:a2:
                    98:e1:d2:09:9f:85:92:53:c7:4a:ee:18:53:63:43:
                    3d:b3:8a:cc:10:72:34:11:25:50:03:21:2e:e3:78:
                    65:f2:6d:79:60:b1:43:d7:4d:8c:32:09:c6:5e:40:
                    d6:42:d3:17:61:c6:8b:a8:01:83:5e:68:82:58:90:
                    8d:88:97:e9:9e:a3:22:df:de:ea:e0:9f:06:ab:cd:
                    c6:45:d6:2b:39:1f:97:dc:5f:bf:cd:45:b9:a5:4c:
                    5b:d8:4c:da:9f:ae:9b:38:64:dd:7f:d7:78:dd:16:
                    11:48:d0:99:c4:e7:88:cb:0a:de:1c:49:e8:87:3b:
                    0e:fd:12:71:65:00:07:e4:99:20:5b:ea:c1:20:0b:
                    fa:bf:55:6c:d6:0b:0e:4c:f5:c0:8c:a7:4a:cf:f6:
                    4c:e8:74:4d:ad:16:c2:28:b9:0b:af:66:36:89:21:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:45:49:BF:E3:D2:6E:F4:4E:88:CA:A2:F2:69:76:08:81:74:18:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb0441f0-e696-366f-bc32-4e2fda9df275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:06:31:88:9a:3b:88:8a:5e:f7:d8:46:bc:51:7c:4e:09:
         77:81:bc:8b:6e:e7:df:f0:b2:27:4a:f2:20:a8:77:c1:c3:f1:
         71:ca:e7:44:89:e1:eb:d0:57:73:35:1e:dc:8c:01:42:f9:d6:
         c7:09:4a:bb:e0:d8:42:d3:e8:48:d0:ac:b7:d6:a2:cd:95:8b:
         d5:5a:3d:04:10:b2:03:6c:d6:49:94:a5:42:3e:09:33:d3:24:
         21:fe:db:73:fc:f0:b0:d9:16:d7:68:32:29:f1:32:6c:03:63:
         ef:a1:fc:f7:ec:24:38:89:3d:bc:e3:f7:05:62:60:ed:db:18:
         be:46:94:57:20:70:2c:b0:cf:4e:8d:bc:08:b1:0d:f4:a9:07:
         6c:34:40:72:7f:43:25:30:bd:84:eb:16:e6:f1:3b:97:f1:a7:
         ef:bc:52:9b:33:22:09:83:d4:93:bd:0b:37:28:18:8b:e6:f6:
         6b:ad:51:6b:ec:b8:5a:e8:41:97:79:51:3c:21:73:32:6d:58:
         9d:17:d9:fe:b1:ea:28:46:7b:20:9b:e6:e5:10:33:80:79:1a:
         01:d5:b7:29:60:14:5a:3d:72:56:7c:43:07:b7:db:8e:f5:49:
         a2:45:12:b5:56:b3:da:fb:5c:75:83:9a:40:7b:6a:35:d5:b4:
         66:1f:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:27 2025 by rpki-client