Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3b8bb5d-7763-3441-9eed-c65cae7061f1.roa
File:                     b3b8bb5d-7763-3441-9eed-c65cae7061f1.roa (raw, json)
Hash identifier:          hM+C/xH+9fMBm3MG82X8VqPsnjAkLk6JtKlT0nGqLWQ=
Subject key identifier:   EF:CA:A6:C3:8C:7C:CA:14:28:11:D4:10:77:90:E2:6E:49:5F:B6:54
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584EEA875DA43486CB6D6BFAA180
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3b8bb5d-7763-3441-9eed-c65cae7061f1.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     271
IP address blocks:        134.87.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5d:a4:34:86:cb:6d:6b:fa:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=2a99b82c-f461-4673-a2a9-ced588b923ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:91:ac:ce:52:f7:e6:f2:07:ff:f5:00:99:
                    18:d5:13:45:65:2a:82:84:3f:89:fc:54:f3:bd:f6:
                    b6:50:34:52:ea:7a:3c:9f:c6:40:8a:3f:2d:45:5a:
                    c4:08:75:05:20:91:bf:ee:05:3b:2b:d2:4e:c6:9b:
                    06:01:63:1e:ca:ee:53:b9:52:e9:94:ca:cf:0d:15:
                    4f:22:9a:15:b7:6c:c1:fb:a6:eb:22:12:fb:c2:8c:
                    6b:a1:b6:8b:67:5a:85:76:fb:83:1c:3c:4e:73:ba:
                    a5:ce:80:50:30:15:ee:95:de:bd:69:53:e6:dc:77:
                    9f:f0:17:12:3d:79:ed:53:8f:d2:28:fe:4f:cb:37:
                    73:5f:b2:6a:82:73:fa:f9:36:d5:26:1e:5c:0d:c1:
                    62:16:7b:08:7b:a1:c9:00:ae:81:5d:94:b0:36:e1:
                    91:48:d8:c1:44:a2:18:59:6a:8a:3f:f0:1f:77:47:
                    b8:48:4a:cc:9d:21:86:7d:0d:2a:b2:45:25:f1:25:
                    6e:2c:c7:24:58:fb:91:08:b6:55:8f:d3:eb:57:29:
                    91:66:01:e7:ce:df:c9:da:dd:b0:b1:80:a6:7b:5b:
                    f2:7e:93:2a:76:9c:8f:83:06:07:00:c7:8e:91:8f:
                    e4:4b:c0:e2:0c:14:2e:46:89:0f:56:0f:85:d1:68:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:A6:C3:8C:7C:CA:14:28:11:D4:10:77:90:E2:6E:49:5F:B6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3b8bb5d-7763-3441-9eed-c65cae7061f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4f:bf:e4:d2:56:19:6d:f7:4b:1e:a4:60:b4:0d:5e:20:6f:
         f4:99:f5:73:a4:d2:99:7b:37:6b:7d:de:cb:34:7a:2e:14:bf:
         c3:a8:28:a9:61:11:54:ac:0b:f8:ce:d3:b8:48:6e:de:74:f4:
         ce:ce:0f:f2:ee:ba:7a:a2:1e:fe:3b:68:47:37:7f:ec:a1:f7:
         5e:7b:3f:88:aa:3a:bd:d1:1b:89:a3:1d:06:28:c5:51:71:f2:
         d6:a9:74:96:a1:50:4d:99:21:e2:23:c4:cb:5e:dd:04:b6:79:
         02:48:d0:6b:27:09:89:05:11:8c:f0:d2:94:59:5d:ef:8f:5e:
         98:e9:54:b0:35:aa:5c:da:13:70:d9:9d:cd:d8:06:17:09:62:
         66:65:44:7f:15:ab:75:7c:3d:7f:a4:50:f4:86:da:aa:61:1f:
         41:19:de:83:4d:86:99:95:4a:39:a6:fe:93:63:9f:94:65:51:
         2f:b5:19:66:ec:d2:8e:2d:03:ab:10:85:11:c9:5d:92:42:c3:
         2c:a2:34:46:6f:7b:1b:aa:bc:a3:0e:28:68:d8:50:8c:08:81:
         87:2a:6f:b0:f2:47:34:60:0d:22:3b:ef:9f:2c:1c:e4:93:48:
         b5:ee:05:7a:fd:95:6b:a6:1e:d3:da:cb:2e:5a:e9:16:96:31:
         02:0e:59:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh12kNIbLbWv6oYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
MmE5OWI4MmMtZjQ2MS00NjczLWEyYTktY2VkNTg4YjkyM2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziyRrM5S9+byB//1AJkY1RNFZSqChD+J/FTz
vfa2UDRS6no8n8ZAij8tRVrECHUFIJG/7gU7K9JOxpsGAWMeyu5TuVLplMrPDRVP
IpoVt2zB+6brIhL7woxrobaLZ1qFdvuDHDxOc7qlzoBQMBXuld69aVPm3Hef8BcS
PXntU4/SKP5PyzdzX7JqgnP6+TbVJh5cDcFiFnsIe6HJAK6BXZSwNuGRSNjBRKIY
WWqKP/Afd0e4SErMnSGGfQ0qskUl8SVuLMckWPuRCLZVj9PrVymRZgHnzt/J2t2w
sYCme1vyfpMqdpyPgwYHAMeOkY/kS8DiDBQuRokPVg+F0Wi8hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/KpsOMfMoUKBHUEHeQ4m5JX7ZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYjNiOGJiNWQtNzc2My0z
NDQxLTllZWQtYzY1Y2FlNzA2MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhldwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNPv+TSVhlt90sepGC0DV4gb/SZ9XOk0pl7N2t93ss0ei4Uv8OoKKlh
EVSsC/jO07hIbt509M7OD/LuunqiHv47aEc3f+yh9157P4iqOr3RG4mjHQYoxVFx
8tapdJahUE2ZIeIjxMte3QS2eQJI0GsnCYkFEYzw0pRZXe+PXpjpVLA1qlzaE3DZ
nc3YBhcJYmZlRH8Vq3V8PX+kUPSG2qphH0EZ3oNNhpmVSjmm/pNjn5RlUS+1GWbs
0o4tA6sQhRHJXZJCwyyiNEZvexuqvKMOKGjYUIwIgYcqb7DyRzRgDSI7758sHOST
SLXuBXr9lWumHtPayy5a6RaWMQIOWb4=
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:49:00 2026 by rpki-client