Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/ebac8f01-2018-37f8-9a99-1438a7c67a84.roa
File:                     ebac8f01-2018-37f8-9a99-1438a7c67a84.roa (raw, json)
Hash identifier:          qkBKkr2QsLDQNWmx3+Sg29hLeP/+miee0cEvrdZS3LM=
Subject key identifier:   27:CA:47:23:E3:52:BF:FD:65:C0:EE:84:06:76:22:AE:CB:C1:A3:D9
Certificate issuer:       /CN=5d69368b-4714-4878-9f6c-905e98da853c
Certificate serial:       010D0C9F4328584B21CC1FCD83491BFC24E80680
Authority key identifier: 3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/ebac8f01-2018-37f8-9a99-1438a7c67a84.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        134.195.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1f:cd:83:49:1b:fc:24:e8:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69368b-4714-4878-9f6c-905e98da853c
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=b504fbdd-3bfa-435e-a226-7938ea6f650f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:00:6e:d0:6c:14:52:e0:15:d6:66:94:2b:a7:
                    30:14:50:10:03:a2:ae:c8:a9:9d:72:98:5d:04:01:
                    77:69:37:41:f0:2d:30:bb:5b:f7:c5:44:b4:31:ba:
                    a8:67:62:16:91:55:37:56:14:f2:fd:c3:2f:06:3d:
                    32:d5:16:8c:1c:70:1d:3f:6d:cc:94:fd:4d:2c:9d:
                    d2:66:ce:1e:9b:61:83:ea:51:39:6b:13:54:9a:80:
                    52:ca:44:13:eb:7a:6e:47:5f:42:f2:04:61:05:d5:
                    a6:8a:7a:e5:3e:24:dd:99:27:84:cd:97:9f:7c:80:
                    59:b8:6d:f0:a4:42:41:ae:6e:cf:8f:8d:4d:7d:1d:
                    f4:a2:63:8f:85:46:68:46:01:a6:51:0b:9d:cc:f4:
                    dc:29:8b:3a:43:34:ee:34:b3:6a:20:a7:f7:a4:6c:
                    77:cb:57:c1:f4:dd:b6:3d:da:a9:66:45:72:57:89:
                    0f:30:5f:b6:8d:ea:1b:6d:dc:66:92:04:38:3d:29:
                    6f:78:4c:fc:e7:af:d1:a0:ea:44:de:11:b6:77:4b:
                    ae:5e:69:bd:34:85:2b:be:b4:06:86:f3:e0:54:5a:
                    31:be:17:6e:94:b1:b1:5f:57:c4:5b:0f:e2:d5:76:
                    a9:e1:10:9c:9c:3a:a9:da:03:1f:4b:c7:4c:f7:39:
                    74:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:47:23:E3:52:BF:FD:65:C0:EE:84:06:76:22:AE:CB:C1:A3:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/ebac8f01-2018-37f8-9a99-1438a7c67a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl

            X509v3 Authority Key Identifier:
                keyid:3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:64:82:0e:56:10:35:22:0e:6f:c2:a5:80:80:94:71:49:91:
         06:8d:fd:71:99:d7:7f:75:16:a9:9a:c9:28:5c:08:81:a6:67:
         ad:28:84:03:44:15:14:73:b5:30:05:97:5f:31:4e:ef:52:b3:
         6b:9b:c6:59:7a:f3:a4:a4:c3:48:90:c6:ae:91:b2:48:7e:d8:
         61:14:18:23:ce:dc:2e:6c:ca:d7:8f:50:90:28:e3:9d:61:5f:
         a6:4b:a9:e6:91:70:bb:28:99:c7:3e:6f:a6:3f:2e:6f:fe:eb:
         e8:e5:84:ef:f2:a6:45:70:c2:70:65:27:d0:f6:2f:fe:80:0f:
         d1:93:4d:b7:c6:e9:b6:63:de:03:b0:81:d6:8b:5d:67:d2:0c:
         3c:7b:0d:63:7c:11:8a:61:6d:99:47:46:67:5c:3d:d8:0f:29:
         52:77:0e:03:8d:98:f4:99:be:29:cc:0b:28:f8:f7:34:4f:28:
         4a:ad:0f:21:31:ac:25:b4:f3:2d:16:af:5b:40:56:3b:d4:ed:
         0e:b4:f6:53:e2:b5:d2:93:df:4d:52:ef:f2:f8:91:74:bd:44:
         3f:b0:dc:e0:58:cc:eb:af:02:f5:ab:04:a0:f1:6d:a2:ec:1c:
         b7:09:d9:07:17:05:74:ab:7f:3b:87:a7:90:95:5e:12:8f:de:
         33:e6:87:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB/Ng0kb/CToBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ2OTM2OGItNDcxNC00ODc4LTlmNmMtOTA1ZTk4ZGE4
NTNjMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
YjUwNGZiZGQtM2JmYS00MzVlLWEyMjYtNzkzOGVhNmY2NTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigBu0GwUUuAV1maUK6cwFFAQA6KuyKmdcphd
BAF3aTdB8C0wu1v3xUS0MbqoZ2IWkVU3VhTy/cMvBj0y1RaMHHAdP23MlP1NLJ3S
Zs4em2GD6lE5axNUmoBSykQT63puR19C8gRhBdWminrlPiTdmSeEzZeffIBZuG3w
pEJBrm7Pj41NfR30omOPhUZoRgGmUQudzPTcKYs6QzTuNLNqIKf3pGx3y1fB9N22
PdqpZkVyV4kPMF+2jeobbdxmkgQ4PSlveEz856/RoOpE3hG2d0uuXmm9NIUrvrQG
hvPgVFoxvhdulLGxX1fEWw/i1Xap4RCcnDqp2gMfS8dM9zl0EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCfKRyPjUr/9ZcDuhAZ2Iq7LwaPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDY5
MzY4Yi00NzE0LTQ4NzgtOWY2Yy05MDVlOThkYTg1M2MvZWJhYzhmMDEtMjAxOC0z
N2Y4LTlhOTktMTQzOGE3YzY3YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ2OTM2OGItNDcxNC00ODc4LTlm
NmMtOTA1ZTk4ZGE4NTNjLzVkNjkzNjhiLTQ3MTQtNDg3OC05ZjZjLTkwNWU5OGRh
ODUzYy5jcmwwHwYDVR0jBBgwFoAUP1ZZ03gYZzqwB8v9v+oD7Ueps3wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDY5MzY4Yi00NzE0LTQ4NzgtOWY2Yy05MDVl
OThkYTg1M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhsMaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlkgg5WEDUiDm/CpYCAlHFJkQaN/XGZ1391FqmayShcCIGmZ60ohANE
FRRztTAFl18xTu9Ss2ubxll686Skw0iQxq6Rskh+2GEUGCPO3C5sytePUJAo451h
X6ZLqeaRcLsomcc+b6Y/Lm/+6+jlhO/ypkVwwnBlJ9D2L/6AD9GTTbfG6bZj3gOw
gdaLXWfSDDx7DWN8EYphbZlHRmdcPdgPKVJ3DgONmPSZvinMCyj49zRPKEqtDyEx
rCW08y0Wr1tAVjvU7Q609lPitdKT301S7/L4kXS9RD+w3OBYzOuvAvWrBKDxbaLs
HLcJ2QcXBXSrfzuHp5CVXhKP3jPmh6c=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:48 2025 by rpki-client