Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
File:                     c5b09886-3e08-3eca-87fa-d4d7727ac383.roa (raw, json)
Hash identifier:          PhMrsIjBxFX9lxe2dhNH5y7/wKccC4i4AuxV7QbVXDo=
Subject key identifier:   62:C6:42:50:DC:1C:4B:94:C6:A1:9D:FC:00:CE:85:D3:24:D2:7F:C2
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F4328584D3DFFB44BC0C4FF9CB0AC88A0
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     20213
IP address blocks:        134.195.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b4:4b:c0:c4:ff:9c:b0:ac:88:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=0d971f1c-7cc0-4bd0-9083-867b9d7e4116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a5:10:3e:82:6e:ab:77:bc:2a:e2:d3:e9:a7:
                    2e:7d:0c:55:ec:26:f7:55:e6:98:57:67:4c:29:e9:
                    3f:08:1b:e5:cc:c6:d5:78:4b:f1:55:6d:f4:6b:1f:
                    7d:9e:07:ef:ee:81:aa:1d:2a:8e:75:c4:35:49:c7:
                    00:21:09:09:75:4a:4e:a0:ed:40:67:94:fc:81:f8:
                    84:f0:f5:fe:9b:43:17:af:80:a8:fb:6b:93:29:3c:
                    b3:ba:b2:f7:b5:0e:92:a9:fd:19:f7:c9:4f:68:e5:
                    b6:c0:f5:df:99:29:81:9f:b5:f0:d2:58:10:ce:7b:
                    7d:57:0e:24:96:26:a9:ba:52:57:69:d2:05:9c:89:
                    40:d3:de:0f:a2:32:bb:68:95:bb:31:f2:42:8a:88:
                    e7:bb:c3:d2:89:65:94:e7:10:c5:bd:d7:17:59:d6:
                    e2:0e:8a:12:50:00:37:22:a2:a3:7d:4b:11:52:a9:
                    a0:36:03:13:31:d8:17:2e:4f:74:a5:4c:96:5f:81:
                    0b:b9:ad:5a:8f:20:b9:ea:f5:51:6b:ef:12:46:d6:
                    19:f1:32:b8:75:56:70:cf:90:44:1a:c4:55:2c:b1:
                    8a:26:e2:dd:11:5f:3f:b0:43:f2:63:b6:69:66:9b:
                    be:3d:10:ee:e2:e1:b9:37:9c:ab:4f:18:7e:ca:19:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:42:50:DC:1C:4B:94:C6:A1:9D:FC:00:CE:85:D3:24:D2:7F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:96:52:c9:52:11:d9:e7:85:6f:d7:4b:ad:3c:27:c7:fc:c8:
         7d:6e:78:32:90:c0:ee:87:62:2b:24:fa:e9:5f:e2:a3:ea:1b:
         53:58:0d:60:15:20:13:96:15:0b:9b:7c:04:e1:2d:3e:e8:55:
         0f:3e:50:85:15:d1:1b:f0:77:94:ef:8c:b2:ef:f8:bd:6d:2b:
         cb:d7:36:44:42:82:b5:a7:e0:52:d4:ed:1e:cc:52:38:91:16:
         26:7d:b4:95:b6:89:d6:51:a6:93:f6:b9:f7:b3:3e:24:5c:bd:
         d6:51:3c:48:f2:21:5d:37:f0:80:58:c8:16:80:a4:0a:cb:ee:
         db:66:83:39:b1:9f:e7:d6:91:93:25:2e:5b:db:f3:cf:a1:84:
         8e:21:02:b9:eb:a1:8a:ed:41:5a:e5:a1:78:aa:cb:c8:6e:4e:
         a6:ef:9d:79:32:8a:eb:4d:c4:2e:eb:5c:b8:de:98:7c:51:65:
         a3:8c:5d:26:d3:a1:ca:78:e8:de:18:d1:05:4a:02:17:ef:d8:
         4c:06:95:74:1e:1c:a9:e0:d0:06:60:0b:a4:01:01:cd:ba:1f:
         c6:5a:e5:f8:aa:af:48:a4:57:f5:9c:fa:6f:8e:6a:9f:0e:6b:
         09:6d:d4:d9:7d:a4:ba:11:04:a0:76:6b:38:5c:8c:72:b9:02:
         4c:43:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:22 2026 by rpki-client