Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7372082b-5d25-33f5-9c1a-2fb6c9006970.roa
File:                     7372082b-5d25-33f5-9c1a-2fb6c9006970.roa (raw, json)
Hash identifier:          XO2B3obTL84IQr5WA0fUbZ0ReSrmx3rpVQ1ipw675Bw=
Subject key identifier:   AD:79:D7:A5:87:A7:FF:2D:D8:94:C1:9A:EB:3C:19:FA:8A:0B:BF:D8
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A68B01962E70045E1FA6CAE60
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7372082b-5d25-33f5-9c1a-2fb6c9006970.roa
Signing time:             Fri 04 Jul 2025 17:39:39 +0000
ROA not before:           Fri 04 Jul 2025 17:39:39 +0000
ROA not after:            Thu 02 Oct 2025 17:39:39 +0000
asID:                     271
IP address blocks:        134.87.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:b0:19:62:e7:00:45:e1:fa:6c:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul  4 17:39:39 2025 GMT
            Not After : Oct  2 17:39:39 2025 GMT
        Subject: CN=dbd8a85b-637c-40b7-9726-21e04902b182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:3f:80:ba:a8:9d:cb:9f:90:92:4d:e1:54:
                    4c:1e:c8:43:23:03:50:ee:42:a1:58:03:79:a1:32:
                    27:9c:d0:03:d9:64:d7:aa:94:55:69:44:9f:73:7a:
                    1d:e9:a7:45:fa:2d:41:f6:a9:62:f4:1c:61:4c:15:
                    dd:4b:27:8a:40:7a:6b:a2:fd:76:72:da:9f:2e:89:
                    5d:af:3f:7c:22:74:0c:09:32:1b:7c:d1:fc:42:b5:
                    c5:c4:60:b4:25:4f:03:e1:a6:10:0d:1f:9d:ce:0a:
                    6e:6a:84:6b:0c:37:a0:7a:d2:56:5b:0b:e2:22:f3:
                    57:04:61:a5:10:b4:84:05:d8:d9:a5:f6:1a:56:d0:
                    1e:d5:db:0d:58:a0:53:65:83:58:a8:ee:35:29:dc:
                    84:be:e7:04:f1:7d:04:dc:95:18:88:4f:6e:59:66:
                    b2:97:b8:30:c1:75:f8:44:19:18:d7:a7:ae:a1:ce:
                    4a:a6:e6:25:5c:69:1e:59:47:93:10:d5:4f:52:5b:
                    44:78:3c:34:d6:83:38:b8:27:1c:a5:8b:b0:58:81:
                    a2:c2:de:ab:8e:28:31:00:ac:98:65:f7:64:23:94:
                    40:71:79:76:94:3a:ff:93:fc:4a:32:c5:f3:a7:7a:
                    95:bf:f6:87:d4:ba:3c:cc:c6:01:58:98:ca:da:61:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:79:D7:A5:87:A7:FF:2D:D8:94:C1:9A:EB:3C:19:FA:8A:0B:BF:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7372082b-5d25-33f5-9c1a-2fb6c9006970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:88:d3:f1:86:ed:72:30:7b:96:eb:da:17:f4:99:16:07:
         59:29:3e:9c:70:6d:d8:8e:76:6a:5d:bf:15:7e:0c:af:ec:d3:
         3e:fd:b1:9f:80:32:74:16:5b:d0:33:02:4f:34:8b:b9:1b:e1:
         0f:79:8d:1b:c5:a0:60:c2:f4:82:58:26:e9:ab:6e:64:6d:e2:
         39:0a:c0:26:35:72:9e:95:bd:97:78:09:cb:12:66:e8:75:8a:
         b9:6c:30:3f:af:dd:89:9b:21:70:b5:58:6b:23:e9:c1:a9:00:
         51:b2:dd:f3:98:8b:b6:f6:a9:d0:a2:b7:55:72:0e:25:e5:c6:
         8d:05:1a:8b:82:bd:a4:a4:f6:08:95:f3:31:7a:da:8d:cc:47:
         8f:13:cd:02:53:a6:76:bc:d2:72:e1:fe:a9:07:75:f2:f9:52:
         29:d1:11:44:6c:6c:d1:da:49:b7:bf:16:2d:59:bb:61:af:9b:
         47:a4:89:e2:ea:2f:1a:a2:af:63:f1:5b:5f:54:89:e8:ea:cd:
         2e:e4:6d:f9:cc:37:ef:d9:06:79:4c:76:9f:bb:75:22:d1:2c:
         51:1e:de:d3:24:29:e4:af:cd:f6:1a:38:94:67:40:4e:a2:81:
         4e:48:90:98:d4:a7:f1:1e:89:d1:07:1d:8b:c5:ae:59:53:30:
         ac:05:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 02:27:08 2025 by rpki-client