Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa
File:                     af455540-fb73-3077-a6c0-7c66dd9ae018.roa (raw, json)
Hash identifier:          dxwSWOrmu1y6Kzri+JKGYl8SiMW1HXxotuxAJts1rSg=
Subject key identifier:   64:3D:7E:8A:26:1D:10:E5:01:22:9C:4E:AA:E7:06:82:50:A6:D9:A0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D852FD8ECA8FBCE59E7272D60
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa
Signing time:             Thu 16 Apr 2026 01:00:23 +0000
ROA not before:           Thu 16 Apr 2026 01:00:23 +0000
ROA not after:            Wed 15 Jul 2026 01:00:23 +0000
asID:                     134578
IP address blocks:        206.54.12.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:85:2f:d8:ec:a8:fb:ce:59:e7:27:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 16 01:00:23 2026 GMT
            Not After : Jul 15 01:00:23 2026 GMT
        Subject: CN=566e7e04-3ef8-42b0-9a61-158c87adf3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:25:10:91:83:08:89:c5:8a:ab:fe:4c:b9:
                    0e:69:9c:90:6c:02:c4:50:e7:a4:af:6e:a8:ba:48:
                    07:82:d1:1d:c0:0e:a7:22:14:8a:4d:4c:3b:82:2a:
                    5d:7d:a2:ee:94:a7:b8:04:8b:9e:3b:fb:05:a1:59:
                    b4:e1:1f:2a:ef:ae:89:83:f6:2d:c1:db:2e:22:9c:
                    99:b5:5d:dc:be:7a:57:38:4c:3d:95:42:3f:69:f5:
                    e7:94:74:c0:38:95:47:e5:7e:08:f6:76:ec:43:7b:
                    ea:7a:08:5e:2b:48:c0:30:93:00:48:fb:97:5b:97:
                    e4:c1:4a:9e:7a:4d:b5:ab:df:62:31:c6:35:ee:72:
                    fb:83:39:c5:cc:bf:18:44:4f:23:a9:50:fa:ce:20:
                    ae:90:c0:57:9f:ee:25:a9:f9:59:e9:19:3f:65:b6:
                    4e:5f:dc:35:75:67:60:81:39:93:0e:6b:a1:4c:9d:
                    6f:22:7d:f9:ac:ab:1a:e7:92:a9:d1:86:cc:0f:16:
                    c7:53:5e:02:2c:68:df:18:39:40:b8:e5:e3:18:a9:
                    75:d3:be:07:8f:17:d7:ff:cc:23:5b:44:e0:08:05:
                    2f:66:65:b1:b6:f3:69:0c:83:c1:06:3e:d6:36:ff:
                    4e:95:c3:94:80:a6:ed:ee:e2:1a:f6:46:41:cd:ee:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3D:7E:8A:26:1D:10:E5:01:22:9C:4E:AA:E7:06:82:50:A6:D9:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.12.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:68:64:aa:9d:61:cf:05:47:90:3d:f7:a0:5c:ce:c3:b2:43:
         2b:c3:8d:8b:f4:72:92:0d:ac:2b:b8:dc:0b:77:bc:d8:c5:09:
         07:25:c0:b8:e8:dd:c8:fe:43:b4:6f:03:62:0f:67:3e:2e:0d:
         24:a9:a8:74:78:14:13:b2:38:db:6f:83:9b:ed:e8:b7:df:d0:
         47:28:b3:8d:eb:ff:cd:5a:62:c9:bb:22:95:b7:79:66:7a:f6:
         0f:bd:e0:0f:9e:a3:f2:e0:f1:af:7b:72:5c:34:37:33:4d:e5:
         a4:4e:a1:a1:65:46:81:fa:9a:3c:c6:ff:ca:1f:c5:9b:f1:56:
         03:c0:2e:3c:21:36:de:42:fa:7e:f6:5d:82:23:de:ca:53:ab:
         b9:e6:b3:30:5b:f9:43:e6:7c:35:68:8e:fb:3a:3f:fb:09:83:
         61:c2:97:3e:d3:5f:9b:ca:d9:07:17:53:a1:a7:61:7f:76:02:
         3b:f9:19:6e:5c:46:b1:75:71:dc:45:7d:bb:8a:34:cb:ed:5b:
         10:b5:56:71:cd:6b:c1:c2:12:ac:a0:32:5c:48:0b:51:6d:9e:
         fd:10:be:1c:c1:99:92:68:7a:af:c1:d4:19:74:49:64:7c:a5:
         55:b4:6e:d7:b3:e5:ef:92:29:5e:f1:41:60:44:0a:0f:ec:dc:
         bd:fb:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:33 2026 by rpki-client