Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
File:                     a87435cf-a6f2-3201-8a93-631966f582c4.roa (raw, json)
Hash identifier:          X/VuYTX8wjXtUWiTz9hDHSKwHK1pnOO94O2E7+IfvYM=
Subject key identifier:   D0:78:4A:32:48:9E:A0:4F:5F:11:5F:0B:72:C1:89:FE:39:85:69:A6
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F7E7DA9869BE5CADB1F045B60
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        134.224.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:a9:86:9b:e5:ca:db:1f:04:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=8100cbab-5be2-4940-9769-3fa71710d7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:4a:54:f1:aa:e7:d2:3f:02:a2:e7:22:5a:
                    e9:aa:15:f6:3e:85:76:41:79:d6:e4:cf:69:dd:2e:
                    91:57:28:6b:ee:3c:b3:a8:38:67:4a:38:48:76:4a:
                    be:98:a8:c9:72:21:36:d4:f6:f7:0c:bd:67:ec:19:
                    ba:3f:fb:14:a6:a8:ab:1e:a3:fa:d3:ea:46:72:fe:
                    05:f7:c1:3e:ac:b8:60:cc:8d:79:72:e0:b3:61:15:
                    ab:c8:09:fe:09:52:c3:a5:50:db:4b:1f:b5:db:59:
                    d1:75:a0:07:64:56:a3:3d:59:58:11:d0:6c:44:51:
                    03:dd:e1:cb:2d:7e:5a:5b:6d:49:28:e4:64:4e:d0:
                    7b:fa:15:36:39:96:b8:21:14:c3:eb:0e:a1:35:64:
                    e8:95:19:2d:a0:c1:07:87:1c:8f:c4:de:d2:50:6e:
                    52:97:89:cd:0a:64:9d:ae:0c:f7:cc:0c:2d:57:34:
                    33:96:ec:e7:6c:3e:0c:07:1b:84:c2:13:cd:d8:d0:
                    46:78:1a:f1:ba:b8:df:1a:71:fc:9e:fe:5a:fa:b3:
                    61:c7:cc:2d:2a:9f:c6:dc:a0:88:5f:c6:57:88:79:
                    a0:47:1b:28:3a:11:b0:38:47:67:c7:50:87:88:af:
                    b2:f4:48:9b:df:e4:8f:d8:ad:79:88:ba:57:f3:1c:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:78:4A:32:48:9E:A0:4F:5F:11:5F:0B:72:C1:89:FE:39:85:69:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ea:b3:b6:18:39:e9:59:b4:71:bb:d7:31:d5:22:3b:25:bb:
         b9:55:07:8f:ef:08:e6:f7:d3:ab:06:57:8b:b2:73:05:0f:61:
         4c:bd:88:05:fb:cc:28:91:64:03:ca:68:1b:8e:15:cd:37:9b:
         93:b3:1c:bb:ec:4e:50:4d:0c:d9:7c:64:b3:56:93:6f:a5:c8:
         8f:88:78:f0:55:d9:79:7b:bc:20:90:ce:92:fb:6c:c3:4b:84:
         f7:35:b7:04:8a:74:59:25:28:34:d5:97:82:3e:8a:04:bb:1e:
         0e:d4:ff:53:5b:fc:e0:78:9b:d5:4c:28:bd:7a:1e:e1:5e:25:
         ef:70:b9:a0:32:3c:9f:c8:d1:51:41:8d:ff:f6:6d:fb:f7:4e:
         63:46:7d:27:37:6a:fd:77:ab:a3:97:3d:28:c0:da:50:81:6a:
         b9:4f:6f:2f:66:25:93:4a:61:50:f4:0c:c6:75:31:c1:d3:36:
         71:bf:96:35:1b:5f:57:44:ae:84:68:3a:85:d3:d3:25:92:74:
         a1:67:74:b9:2a:ea:30:76:ba:d7:b6:d1:10:10:d2:d2:80:2d:
         69:ab:08:09:9b:25:84:c1:f9:7b:16:83:6f:ac:cf:3a:f2:bb:
         db:bd:d0:c8:23:1f:68:31:ca:2d:b0:c4:e1:bd:67:d3:09:33:
         4c:89:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:16:31 2026 by rpki-client