Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/6bbdb867-c21e-3465-9c77-dc305086c09f.roa
File:                     6bbdb867-c21e-3465-9c77-dc305086c09f.roa (raw, json)
Hash identifier:          wXps3nwoMdE+I3x1JnuoN+NB0FgvM72ACmRK38qySKo=
Subject key identifier:   35:BD:AE:97:11:96:6B:FA:55:7A:5A:5F:C9:7F:A9:C4:7E:F4:B5:86
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DC6CB054F1082373005163318
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/6bbdb867-c21e-3465-9c77-dc305086c09f.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     271
IP address blocks:        134.87.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:05:4f:10:82:37:30:05:16:33:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=3a217539-db90-43d4-990e-43790d15e0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:3d:83:f6:60:be:f8:31:31:ff:2e:9a:8e:
                    57:16:56:59:39:89:6a:58:56:87:fe:ba:08:f2:f7:
                    c0:ed:37:19:e1:a9:92:33:aa:76:da:5e:ef:59:ac:
                    0b:68:87:c0:33:67:f0:de:0b:03:57:0f:2e:b5:7c:
                    b2:a8:cd:2b:ab:61:6c:07:5d:11:35:ec:a2:aa:73:
                    16:6e:ed:da:b5:9d:86:99:3a:d4:b6:a9:21:f6:24:
                    fb:f3:54:05:f1:bd:fe:5e:c7:0a:c0:d0:bf:65:a6:
                    3c:61:4b:d6:12:b0:31:d4:e3:c7:2c:4f:6b:41:ef:
                    a1:06:ba:47:a5:86:d0:23:c5:3d:1e:69:d3:8d:c4:
                    09:4b:1e:39:bc:fc:d9:0c:5a:7a:46:c2:47:8b:00:
                    5c:1b:c1:ca:f2:2f:fd:8f:ae:4d:12:7a:0d:d2:7b:
                    21:aa:30:ad:65:db:a5:d8:23:83:68:54:1d:e7:a3:
                    ca:5d:23:c2:7a:0c:86:a0:b2:bf:32:38:50:09:c5:
                    91:db:10:49:18:f5:f8:16:d7:04:d5:e5:cc:93:13:
                    4a:5c:b5:e6:49:5f:f6:b9:8f:c9:c0:80:53:97:c5:
                    11:ce:1f:b7:19:c8:d0:35:39:0d:d4:ee:8e:04:0e:
                    6b:0f:7d:8a:d2:00:3d:ba:0d:65:97:1b:9d:d2:22:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BD:AE:97:11:96:6B:FA:55:7A:5A:5F:C9:7F:A9:C4:7E:F4:B5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/6bbdb867-c21e-3465-9c77-dc305086c09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:7e:e5:a8:08:23:2d:39:3f:05:f0:3c:41:20:99:7f:f2:
         a9:de:15:de:e5:9b:8b:36:ca:83:35:f5:cc:05:61:e7:09:9a:
         92:fc:bb:8b:80:92:59:d8:42:7d:5e:ac:9c:0e:92:af:43:8f:
         4f:3b:d2:68:64:af:f8:61:21:cf:27:68:ff:65:db:ed:c0:6a:
         b7:1c:4d:7e:d2:f6:b1:15:f6:79:6d:43:b7:1d:c9:a9:d1:b5:
         6b:2e:c5:4e:4d:d9:5c:45:da:78:15:02:0a:58:cd:e4:d8:6f:
         05:cf:74:09:4e:d8:6b:82:be:4a:79:84:b7:f1:c1:4b:d2:10:
         fe:c7:bc:49:bb:7d:01:f9:fe:69:31:3e:3c:cc:03:98:a3:54:
         ae:78:5e:41:52:54:30:b7:2a:78:73:20:7f:a4:d9:c3:95:d0:
         93:32:8f:c0:c3:f4:cd:57:f3:23:76:e6:1e:83:c3:33:30:d7:
         e5:8b:aa:ee:37:d8:85:5d:69:ca:51:c3:7d:14:3d:80:da:b1:
         32:97:30:a5:3e:37:8d:4a:c5:10:bc:82:14:22:ef:a8:a2:90:
         8f:5e:34:23:e7:91:7e:bc:47:7f:d9:bd:6c:6e:44:35:fe:5b:
         e4:53:a1:a5:7d:95:f1:f0:22:76:8c:64:ad:ef:64:2f:99:63:
         bb:d8:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:56:29 2026 by rpki-client