Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
File:                     c5b09886-3e08-3eca-87fa-d4d7727ac383.roa (raw, json)
Hash identifier:          lTJkquyuQP29OfB4RA454698e0GfYvvhXpvOj8R6X8s=
Subject key identifier:   98:56:E0:B5:CB:8D:C3:5D:A9:E2:76:3D:68:0C:3B:94:D7:14:AB:C1
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F43285849BF3F65D390DBE6EC65AEC100
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     20213
IP address blocks:        134.195.142.0/23 maxlen: 23
                          134.195.142.0/24 maxlen: 24
                          134.195.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:65:d3:90:db:e6:ec:65:ae:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=4ded21b3-22fa-4dbe-a749-65a4370d7c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:68:4d:48:9f:1f:b1:6b:b4:e3:09:82:3f:
                    47:01:a8:9c:38:73:54:79:c0:b5:b9:52:d0:20:1f:
                    ad:83:5c:8f:c7:7e:f4:06:64:ed:cf:48:30:17:07:
                    ec:42:5e:da:6c:19:52:b5:85:91:58:ed:01:44:32:
                    42:ce:b8:f2:e6:97:50:c6:4a:bf:33:e4:ab:39:1e:
                    b2:2f:e6:79:ef:61:27:47:1c:7d:f3:f8:59:90:9a:
                    7e:f2:8d:9f:56:25:55:0b:aa:15:b4:d5:a9:cd:a2:
                    8d:cc:4f:fa:fa:83:e9:18:72:7e:6f:64:a1:7e:a2:
                    ff:bc:4e:dc:1a:e9:07:24:bf:c7:5a:4e:44:bf:2e:
                    e5:42:e3:6a:1f:37:0a:13:90:d5:b2:bf:a1:f4:0e:
                    e1:ce:ee:e6:b5:ef:bc:b2:f8:f0:58:9b:e9:65:85:
                    2c:c1:c9:03:19:11:7a:59:89:69:2f:fa:35:55:00:
                    73:a2:87:df:a1:d0:ff:e7:54:b3:24:6b:39:37:e2:
                    58:ef:0d:df:8c:03:71:01:2c:ab:ac:a6:03:38:1b:
                    6f:17:bc:c6:46:c9:82:ed:b7:cf:fe:52:ef:b1:24:
                    a0:ad:ac:7e:4b:8c:20:e7:9a:bf:c8:2e:31:cb:7e:
                    29:c7:f4:10:0e:62:13:22:a0:36:5e:f0:2b:72:9d:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:56:E0:B5:CB:8D:C3:5D:A9:E2:76:3D:68:0C:3B:94:D7:14:AB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:87:c0:dc:ff:d6:b9:fb:09:28:44:c5:c7:18:6f:39:de:b0:
         d5:f2:43:bd:21:c8:9f:02:a0:25:1f:39:4d:2a:cc:e4:34:f4:
         79:fe:7f:81:ad:1b:a9:3a:db:4b:15:2e:fe:12:e4:25:76:7f:
         e7:af:80:81:db:bc:59:57:78:60:86:39:2b:77:92:71:3c:24:
         17:e1:10:4a:86:2b:cc:bc:65:3c:ab:a2:e6:b9:85:e4:2f:cf:
         51:95:c6:12:21:9e:78:3c:39:7b:0b:52:28:9d:aa:04:17:6e:
         9b:44:c2:2f:79:1c:b6:a4:bb:81:63:67:1c:0f:c0:82:fa:4f:
         07:96:78:67:ec:57:51:00:87:1d:68:a2:68:85:14:5c:de:56:
         ee:d4:de:40:1b:9c:c3:48:16:3f:df:fe:33:53:cb:56:8a:de:
         6b:c1:e2:ee:5c:36:2d:18:23:79:be:a5:e1:2a:7f:8d:a9:ec:
         8a:a1:b7:0d:c1:29:bf:18:fa:04:8d:78:12:84:6c:c8:9c:4c:
         7b:fb:36:c0:10:bb:e1:97:57:2d:50:5f:36:1c:ad:f9:07:63:
         a0:18:fb:24:b6:8f:ea:13:a5:80:0a:42:26:7c:fe:d4:7c:8b:
         bf:64:17:fa:ea:d4:22:f5:75:02:29:18:42:97:3b:31:9d:10:
         02:fe:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:47:15 2025 by rpki-client