Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
File:                     c5b09886-3e08-3eca-87fa-d4d7727ac383.roa (raw, json)
Hash identifier:          uSQlgzJA1Fl/0OcLzeeaf9GkiQKinOJIfOKgpUFqgnY=
Subject key identifier:   00:CB:E0:FC:5D:B7:3E:66:B3:DB:35:E3:CF:0B:7B:55:05:6E:7C:18
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F4328584A9E961F52748B6717DB32D7F8
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     20213
IP address blocks:        134.195.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1f:52:74:8b:67:17:db:32:d7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=03fe2506-4c37-41f4-ab74-6dfd90db47c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a1:02:92:0c:1e:f2:95:a8:d8:e3:89:f4:6c:
                    9a:73:ba:e6:53:23:d4:e0:63:eb:e3:a5:8a:b2:9e:
                    72:b9:c0:9c:93:c4:61:b5:24:2f:d3:f1:45:38:59:
                    34:34:48:db:2e:af:2e:74:dd:c8:6c:54:2d:ba:1e:
                    6d:10:e7:23:1f:a4:80:c5:04:67:22:8e:d1:9c:9d:
                    88:e4:91:ca:ea:04:0e:ed:f4:6c:e9:4c:fe:a7:f6:
                    34:f1:92:76:21:b8:6b:b9:f5:0b:ac:b5:3e:9d:02:
                    d7:ca:b8:25:45:51:3f:37:b9:cb:58:6e:9e:02:c3:
                    17:1e:e5:62:39:b8:73:3e:ed:d4:5d:04:0b:24:b9:
                    a8:56:3d:0e:cb:03:00:fb:4e:36:6b:ce:2c:7d:93:
                    8c:a3:43:1f:24:ca:00:8b:1b:02:70:a7:6c:fe:e1:
                    02:92:bf:61:e4:f1:cf:db:ec:9a:88:22:3d:cb:7a:
                    65:d3:e4:0c:02:85:e1:0f:39:09:c1:5e:e2:8c:57:
                    ea:9a:a6:90:1d:0c:f5:d1:43:b5:4a:b3:91:04:86:
                    10:52:a1:d0:86:ee:d5:a8:7b:18:9c:59:fc:58:ef:
                    89:a4:4c:6e:3d:13:00:7a:02:db:d9:62:35:31:ad:
                    6c:8f:d9:81:7f:55:b6:42:c8:08:36:61:be:12:82:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CB:E0:FC:5D:B7:3E:66:B3:DB:35:E3:CF:0B:7B:55:05:6E:7C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f8:46:20:cc:e2:1c:ff:2e:52:cb:bc:27:80:ab:f5:7f:b8:
         be:ac:ac:ba:24:a9:79:d1:29:38:6d:9b:59:3e:04:45:4a:87:
         a8:db:a3:89:dd:e6:9a:ad:f7:c7:16:f7:1d:f4:de:38:37:da:
         97:cf:b8:bd:77:80:80:35:3d:c1:52:88:3a:0d:92:38:34:f0:
         66:b7:0d:06:3d:8d:89:1e:ff:4b:1e:f5:27:29:2d:cb:cf:e9:
         e0:5e:94:fd:1c:9b:30:65:87:18:81:2d:b1:64:ba:cb:34:e0:
         e3:bf:8d:3e:b9:69:04:5a:1d:69:b3:ce:21:a5:31:54:05:4f:
         c2:b9:5d:ff:88:f8:52:4b:84:a0:63:e2:73:af:79:40:32:0b:
         d0:83:a8:0d:1b:7b:42:e8:9f:27:fd:0d:b2:d6:ac:4a:3c:18:
         ce:3a:aa:6f:fb:1f:df:6e:cc:aa:54:bc:a2:cd:99:d2:09:05:
         01:de:59:e3:4f:82:bf:3a:25:e8:1c:dc:51:d0:fb:92:84:68:
         be:dd:99:0f:87:b2:f7:7b:35:4f:04:e5:9f:96:0b:80:87:44:
         fa:13:ba:ca:84:b6:09:c3:a0:03:ca:0a:45:92:e1:df:5a:ed:
         ee:9f:6f:83:e4:70:ca:1f:d4:4c:e5:75:bd:63:d2:10:ac:10:
         09:0a:fa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:03:32 2025 by rpki-client