Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
File:                     c5b09886-3e08-3eca-87fa-d4d7727ac383.roa (raw, json)
Hash identifier:          RGlBWYgQrbmC3FT9w7PImfsAi//MGNnHr9FLF1IqM/U=
Subject key identifier:   53:20:3F:7B:D3:75:06:17:15:A9:A4:E1:9F:E2:8F:C5:EC:33:21:2C
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F4328584E1E44560FA025471AA810B060
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     20213
IP address blocks:        134.195.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:56:0f:a0:25:47:1a:a8:10:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=0c67b192-7de8-43a6-90b9-9b2ec0985616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:16:fb:87:e4:9b:ca:51:b4:a8:b4:d2:94:
                    5b:2b:a8:f7:5c:3c:a9:4b:b6:cf:46:0c:93:b1:d8:
                    eb:1b:ca:68:43:48:38:19:0b:80:dc:2c:62:bb:f5:
                    5c:a4:81:c5:ee:8e:54:b1:a9:f6:b7:61:c3:30:f4:
                    3d:c2:84:35:2d:89:1c:d6:b0:b4:c4:8f:2b:15:69:
                    18:95:50:43:f9:d6:5f:7a:03:ea:68:d7:72:29:56:
                    8e:32:3d:4f:3e:50:50:fd:47:b0:04:e9:ba:2a:04:
                    c9:1b:f8:93:2d:a3:24:12:9c:16:a5:39:e9:86:d0:
                    80:61:c9:dc:b6:1c:50:cc:fe:0f:c3:be:7d:36:65:
                    a9:7e:e5:a5:73:4d:85:d9:80:e2:17:40:9a:f5:30:
                    c9:85:0d:af:42:5e:16:dd:fe:f3:da:b9:87:25:83:
                    3b:26:c2:c1:5a:c3:69:f9:91:df:3e:46:0a:40:d0:
                    00:b6:c8:7d:3c:7b:3b:6d:8b:dc:95:7d:fb:d0:49:
                    42:e3:b3:25:ce:28:03:d9:bf:2a:22:1e:2b:4c:47:
                    73:4d:99:bc:56:53:3b:f5:03:ba:7a:11:ee:5e:3f:
                    89:44:fa:32:00:b4:76:3d:9d:8e:c2:88:e4:2f:a3:
                    0c:a8:18:d3:79:4a:e8:79:03:04:03:c6:da:40:24:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:3F:7B:D3:75:06:17:15:A9:A4:E1:9F:E2:8F:C5:EC:33:21:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:fc:d7:99:5c:6b:6c:f2:d9:55:ac:38:ad:20:e2:e8:aa:
         d4:86:5f:d2:8d:f4:57:85:52:9b:55:32:70:d9:8b:69:b1:73:
         87:cc:3e:8e:25:f5:1c:70:5c:6b:c1:bf:e0:eb:c6:bf:2f:4f:
         e0:88:4f:23:b3:c2:67:b4:be:80:c3:15:5a:6b:50:5a:30:ac:
         34:14:c7:06:ea:64:87:a0:7d:31:d8:53:cd:94:49:b6:09:82:
         8a:25:05:ea:69:c5:a1:59:df:fb:ef:90:23:41:77:0a:54:18:
         17:e2:8f:ff:d4:9c:89:db:a6:57:ea:97:fe:c9:0a:75:dd:71:
         b0:33:72:17:eb:a5:29:ed:18:25:d1:19:cd:f1:9b:04:5f:6b:
         52:d1:e8:a3:a3:27:6f:5e:dd:a9:b3:3b:f5:39:12:a9:bb:8f:
         f2:d8:6a:da:ec:61:92:f1:9f:36:bd:99:45:e8:40:bc:bc:ce:
         62:84:e8:ff:55:14:c6:b3:f9:7d:c5:bf:c0:f6:d4:86:d8:bf:
         3c:49:68:91:0a:5d:7d:9d:50:34:2e:cd:2b:46:81:02:81:1c:
         69:89:ec:99:9a:45:80:a0:d2:fd:5a:a3:77:51:c7:4d:63:83:
         b1:6c:a9:38:c4:27:05:f8:a9:91:b1:b6:35:d1:e3:b6:fd:25:
         f7:2a:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:37 2026 by rpki-client