Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c158daa0-7034-3275-ab4e-edde62db1b7b.roa
File:                     c158daa0-7034-3275-ab4e-edde62db1b7b.roa (raw, json)
Hash identifier:          LM5xmyxcAzDL7CjvDiWj4v0D/8FmmLde7irYGWUMyx4=
Subject key identifier:   84:81:35:7F:65:F6:5F:3D:9E:D5:EE:26:CF:2F:05:1E:43:A7:43:88
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B742754D2529552A2407C62AA
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c158daa0-7034-3275-ab4e-edde62db1b7b.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     271
IP address blocks:        134.87.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:54:d2:52:95:52:a2:40:7c:62:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=c35bb5f0-f12e-44d0-8832-0ec3dc5d8fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5c:bd:08:40:44:2a:5d:94:27:cb:8a:d5:1e:
                    4f:b0:c1:7f:63:a9:07:85:e4:33:23:ab:58:14:7f:
                    69:cd:8a:5c:23:1b:c8:82:0e:1a:e0:b0:6d:c2:51:
                    4f:68:b5:d4:a6:b7:e0:9f:54:ff:11:a4:5d:15:28:
                    86:b7:17:bf:be:c0:85:f6:2b:80:4a:48:d0:04:66:
                    e0:38:c5:12:25:3a:7c:12:86:73:5e:c2:47:5d:fb:
                    2f:6c:d9:ac:55:68:6c:93:e1:84:5a:db:5a:4d:b5:
                    09:8a:6d:ca:8c:18:8d:62:e3:46:60:8d:96:a4:03:
                    98:cf:4e:58:ec:fe:13:2d:4e:3e:e4:59:93:63:d6:
                    f0:ae:04:a7:60:07:64:56:da:97:4d:f1:3a:f8:55:
                    6e:2f:24:c2:47:2f:b3:7e:e4:6e:c1:75:2e:29:ff:
                    b6:66:d4:2e:7e:62:5d:04:53:f9:58:ac:20:2b:12:
                    3d:84:46:f3:44:e1:24:00:53:31:5e:6b:51:59:ba:
                    f5:be:5f:ba:d3:6e:7e:a0:48:93:72:5c:80:2b:5f:
                    e6:eb:0c:5e:30:c1:7b:86:d3:a8:95:ee:da:aa:cd:
                    79:01:c4:6e:ed:50:44:62:62:f9:db:f4:f1:7e:91:
                    f6:aa:36:10:50:d8:7f:f5:1d:9a:ba:a3:4a:5c:ea:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:81:35:7F:65:F6:5F:3D:9E:D5:EE:26:CF:2F:05:1E:43:A7:43:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c158daa0-7034-3275-ab4e-edde62db1b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:67:3a:30:4c:9f:91:16:3e:06:31:bc:70:e7:09:22:3d:4a:
         65:7c:86:19:26:83:91:8c:ee:c2:57:d0:60:19:12:a7:67:2a:
         27:17:c9:d9:0f:ea:df:3d:10:2e:d1:a3:cb:bc:4e:90:94:46:
         b7:a5:2b:a8:08:8c:99:a2:7c:ad:8d:1d:b7:c7:b6:00:e9:50:
         fd:a3:9e:98:9d:b7:d6:3f:df:ac:69:b6:2c:43:11:12:5e:60:
         ae:86:a6:a9:92:24:c5:76:65:d3:4e:ed:2d:bd:38:fc:84:b3:
         2b:26:3f:d1:b2:c7:4f:5d:5f:01:60:82:66:ec:84:94:01:04:
         c8:20:c9:87:6e:a8:0c:f2:59:a7:eb:34:c0:e5:96:eb:e5:d2:
         c3:da:92:fd:a2:d5:17:67:8d:fd:e2:b2:80:be:d5:67:0d:75:
         1c:d6:f8:6b:2d:05:06:17:71:e8:1d:22:71:89:2e:df:2f:4e:
         ff:b3:a3:25:60:37:3a:8c:46:46:a2:3f:a5:e6:ca:f6:10:0d:
         91:75:32:e9:d2:b0:4a:5c:58:38:b6:69:79:bf:5b:da:ca:cf:
         4c:0b:f2:be:78:5a:6e:1a:2d:2b:87:65:58:06:85:56:88:a9:
         6b:aa:68:f9:b7:56:0e:d5:df:4d:19:c6:89:37:c9:01:89:fe:
         f4:06:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:00 2025 by rpki-client