Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aee81cde-654f-3e4e-9c0c-e7b0d50ab185.roa
File:                     aee81cde-654f-3e4e-9c0c-e7b0d50ab185.roa (raw, json)
Hash identifier:          RV600Nl/pS5igqRTLILhSx1GzEJqmPgywHS93MJIon0=
Subject key identifier:   1C:68:B2:81:94:6E:C3:10:D3:F4:7F:CD:74:27:FF:43:95:7F:05:FC
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AE2FBC7B1B0D359026F7B7CD0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aee81cde-654f-3e4e-9c0c-e7b0d50ab185.roa
Signing time:             Sun 17 Aug 2025 13:00:41 +0000
ROA not before:           Sun 17 Aug 2025 13:00:41 +0000
ROA not after:            Sat 15 Nov 2025 14:00:41 +0000
asID:                     134578
IP address blocks:        206.54.12.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e2:fb:c7:b1:b0:d3:59:02:6f:7b:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 17 13:00:41 2025 GMT
            Not After : Nov 15 14:00:41 2025 GMT
        Subject: CN=c3d4e1a5-4d3f-44d6-84ac-c3b83251690c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:ca:ae:9f:66:c3:5c:28:7a:9e:7e:21:86:
                    8d:74:a2:0d:20:63:6d:c5:3f:87:9c:93:1a:74:50:
                    a4:0c:ea:f0:26:23:f3:fa:ad:ba:55:db:8d:a6:0a:
                    8b:e2:f1:ec:d7:da:8c:b6:46:29:61:e7:c2:87:2e:
                    f4:ac:04:9e:ee:c7:bc:b8:b3:d0:de:d5:94:5c:42:
                    75:e5:e7:0a:6a:59:5e:65:c0:d4:4f:ae:96:17:9d:
                    af:15:58:6a:e7:28:e7:57:c7:6b:47:7c:47:8b:8e:
                    15:83:1d:18:59:1f:dc:ff:0b:fa:0f:81:b0:7a:fe:
                    b3:9e:6e:72:2a:ee:4d:19:8d:5c:a5:62:44:ff:eb:
                    04:4f:2e:8d:be:3f:32:df:5d:76:0e:bf:b7:9f:f2:
                    03:57:c1:26:bd:c4:ea:fe:86:cd:4d:f3:b9:b7:ff:
                    77:14:ac:2b:dc:77:9a:ed:85:e1:5c:50:2f:58:47:
                    c8:ef:a8:ac:78:ea:0b:ca:8a:fa:af:83:5e:83:01:
                    a8:64:17:cb:fc:e6:41:f3:6e:ae:30:c9:00:e2:e1:
                    c6:0c:ae:8b:56:d3:96:c1:7e:8f:5c:3a:8d:88:10:
                    eb:14:ef:b6:44:c4:c5:dd:67:40:5d:37:fc:45:bc:
                    a2:f1:66:c6:90:75:4c:7a:a9:8b:f2:5c:01:ef:fd:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:68:B2:81:94:6E:C3:10:D3:F4:7F:CD:74:27:FF:43:95:7F:05:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aee81cde-654f-3e4e-9c0c-e7b0d50ab185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.12.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d3:b4:a8:ec:40:f4:bc:99:25:50:29:39:a1:cc:65:41:49:
         21:00:c9:5d:ef:5a:53:98:30:e7:a2:ba:25:75:92:3f:a0:86:
         a5:61:23:66:2c:47:a4:e5:d1:a3:e7:1e:99:18:aa:6c:8e:85:
         31:ed:fc:70:b8:8a:39:a0:7c:bb:7c:da:a3:2d:5d:2c:9b:ac:
         ba:30:94:61:f4:06:e8:20:b7:5a:3d:31:45:f6:e6:05:ff:ce:
         6b:b2:a4:80:bb:62:ea:3d:3f:18:7d:f4:3f:71:61:88:fd:8b:
         ab:a8:14:cb:4b:40:3c:78:db:4e:f3:24:b7:f4:29:57:d4:25:
         43:2b:ef:19:01:eb:84:e4:f9:c5:61:1f:ee:d1:02:bd:d6:2c:
         4e:6c:f4:93:fb:5b:93:48:64:40:ba:e5:d6:30:37:cc:a3:4d:
         ac:5d:5b:f7:cc:8a:a1:59:bc:b9:40:75:ae:5c:5b:25:d9:4c:
         e0:01:10:5c:5e:c6:10:9d:59:47:1b:3a:5b:07:1e:93:4e:8b:
         74:b0:cb:a6:1c:b5:10:fc:ec:31:90:8f:8d:31:65:e0:0e:a9:
         c7:12:04:a9:11:e9:62:cb:d3:31:b7:3b:1b:e4:a3:7a:2e:2c:
         2f:57:ec:03:49:01:3f:fa:1a:2d:31:f2:cc:f8:1f:02:03:71:
         08:bf:db:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:47:50 2025 by rpki-client