Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/45e0746a-a793-3136-80ee-486df7e652fc.roa
File:                     45e0746a-a793-3136-80ee-486df7e652fc.roa (raw, json)
Hash identifier:          KlNEcGaP3JHl+Ntgvgq+E+iYyMh+68HO2Ty/4AKslng=
Subject key identifier:   86:1D:8E:F4:36:89:F9:7E:1D:35:36:E7:A1:5B:E3:C9:AD:7A:9B:0D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B08ABF2229F9C9A934E549FC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/45e0746a-a793-3136-80ee-486df7e652fc.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     16462
IP address blocks:        134.87.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:f2:22:9f:9c:9a:93:4e:54:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=214b73d9-e9e5-4fed-9f6d-c9f040e4c352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:5a:a9:e5:74:74:07:19:2b:e8:43:18:4e:
                    9b:36:4e:a1:b6:ae:4f:1d:a3:2b:7e:ea:49:51:28:
                    39:15:ae:da:1e:58:b4:f5:4d:b2:1a:81:48:e8:c9:
                    52:f2:e3:92:78:97:f0:2f:6a:26:98:87:6f:ac:73:
                    d5:f4:fe:f6:fb:17:c9:85:f5:b3:fa:29:86:48:bd:
                    89:dd:42:5c:ac:65:10:02:ce:5e:98:32:dc:8a:bb:
                    cf:55:90:29:55:a2:e0:be:36:da:79:b4:3a:c9:e2:
                    29:44:c4:8f:f5:20:2b:46:a3:60:51:48:ff:a6:27:
                    76:c1:e8:eb:e6:c4:8b:9a:09:d1:28:c5:2e:d7:75:
                    0c:74:0f:fa:2c:b7:2e:41:0f:0a:9d:96:a7:ed:90:
                    67:d9:d5:46:72:ac:59:ee:5a:8d:a4:0f:40:d4:2b:
                    51:c0:3d:b0:bb:99:c3:6d:17:ea:c6:a6:42:6d:08:
                    0e:96:1b:d6:70:4f:f6:72:81:b3:1f:67:03:4c:91:
                    82:8a:3b:1b:6d:3a:3a:3c:f8:b0:b7:1c:cb:53:3a:
                    a9:6c:51:6c:be:cd:b9:d7:5a:1c:40:3d:23:4b:0b:
                    ac:fc:04:77:ba:55:13:a7:ad:3a:af:54:ea:0d:83:
                    ac:91:df:8d:5e:26:90:d3:fc:71:ed:d0:b8:66:93:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1D:8E:F4:36:89:F9:7E:1D:35:36:E7:A1:5B:E3:C9:AD:7A:9B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/45e0746a-a793-3136-80ee-486df7e652fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:09:44:70:3c:d0:b9:cd:d1:30:a9:0f:c2:df:c0:5d:41:47:
         22:ca:e1:6a:83:c5:69:f6:03:6f:b8:22:b6:12:51:21:76:d9:
         17:29:15:e2:d6:91:86:4c:b5:49:0c:7d:0e:1e:8b:2e:52:7e:
         1a:9c:eb:b0:1b:13:e5:b6:af:0a:0f:ae:a3:ef:12:6f:11:e4:
         0f:09:71:ae:43:69:65:fd:16:16:b9:37:27:76:18:79:b5:f5:
         ad:3a:df:f6:b9:49:48:74:a1:a5:a6:6c:2f:dc:ac:45:c1:f4:
         40:83:7d:a1:3b:01:d9:d8:8e:8e:e0:bc:38:b7:e2:5d:02:6c:
         3f:3a:20:82:c6:ca:cc:51:3c:40:0c:dc:dd:b6:56:09:a0:8f:
         6d:c3:97:f0:47:0c:f0:7b:90:da:3b:6c:c5:1e:77:ba:51:f7:
         cd:89:66:07:ff:ca:5e:2d:a9:a9:c0:fd:99:37:b5:2c:be:9a:
         38:23:57:ab:19:26:ad:f9:b2:57:43:03:b0:cb:03:2e:56:2a:
         63:6f:74:36:2c:68:b0:8a:53:08:1b:e6:dc:d2:bf:a7:8e:3b:
         bb:1a:06:9b:ae:ee:ca:85:81:4f:3b:da:ef:9c:89:c7:26:1a:
         3a:7b:9e:70:34:05:9c:39:51:69:8e:31:50:25:2c:69:50:57:
         34:54:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:05:31 2025 by rpki-client