Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa
File:                     af455540-fb73-3077-a6c0-7c66dd9ae018.roa (raw, json)
Hash identifier:          csIb84z5JFhQHZH0w1fbaPaHSfz/Do66aaEzNasgbhg=
Subject key identifier:   92:5C:B5:7A:11:29:74:B0:B6:01:EB:82:8F:55:41:04:64:4B:CC:B6
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E6574B3AAD7B7E0DBEAE070A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     134578
IP address blocks:        206.54.12.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:b3:aa:d7:b7:e0:db:ea:e0:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=584d3cc3-16a5-4fbd-8e66-b8b8ff0f09e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:6e:6f:42:39:5f:fd:a8:ef:7c:02:db:b4:
                    ca:13:69:58:fb:9a:58:98:f8:b3:84:34:49:f7:b1:
                    30:9a:97:95:27:19:44:6a:57:a8:73:dc:6b:62:01:
                    3d:da:2a:83:6f:b3:cf:88:7d:92:a8:b9:44:3c:27:
                    5d:43:33:a6:9a:12:3e:cb:71:c6:d8:8a:d6:9d:84:
                    1b:df:ba:24:26:a2:81:f4:52:39:78:71:b2:8e:b4:
                    f3:8e:c1:b4:74:4c:7d:42:c7:f3:f1:16:40:b4:7c:
                    19:49:bd:3f:0e:69:92:f5:a5:b6:f1:b7:eb:f7:8e:
                    df:e3:15:ed:45:54:44:dc:ce:61:6a:e5:1f:2b:11:
                    b5:a0:a6:37:28:d8:e0:c1:f2:4f:1f:d2:2e:33:e8:
                    78:ff:9b:4c:66:d9:5e:fc:cd:46:27:36:7a:b9:16:
                    97:09:53:f2:d3:12:01:22:f0:e9:9c:21:c9:80:0e:
                    17:ec:25:21:89:7c:1c:2a:6b:3b:ff:d1:75:8d:5e:
                    1c:f2:51:e8:8d:fd:65:d9:93:79:be:d1:02:c5:78:
                    d1:a6:0d:41:d1:d6:72:e3:bf:c2:d8:18:2a:34:15:
                    3a:56:45:d9:0c:27:d3:76:87:8d:5a:22:6a:f6:c7:
                    1e:08:09:5a:87:fb:32:f7:f8:a0:49:dd:bc:d0:2a:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5C:B5:7A:11:29:74:B0:B6:01:EB:82:8F:55:41:04:64:4B:CC:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.12.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:04:5b:9b:9d:ef:86:d7:3b:7c:a8:af:31:c7:68:61:98:f7:
         d4:b0:0f:5b:a0:85:a2:8c:6c:9c:1c:76:6b:95:1d:93:b5:50:
         6d:68:f5:62:a4:b7:cd:ed:a6:34:21:48:1b:c9:b1:b3:20:5b:
         73:48:4c:09:8b:4c:47:9b:d5:e1:41:1b:c5:a6:67:a9:5b:6e:
         9b:8a:a9:92:e3:c8:60:2c:61:e3:65:cf:af:1c:a5:19:c6:9b:
         2b:16:51:fd:a3:ba:b0:22:be:15:ea:5c:e6:e8:6d:8d:9c:80:
         e2:c5:66:2a:86:f5:83:61:66:3c:d1:3d:94:95:10:b0:03:66:
         0e:2d:28:74:0a:31:7f:a6:19:7d:72:8b:de:9c:f5:c7:92:cd:
         57:67:b2:52:a5:e4:89:ee:52:87:5f:8d:08:b9:ba:1e:a7:f2:
         d3:0f:4f:d7:0a:5e:6b:28:df:bd:90:5d:30:8c:49:e9:d2:d3:
         4f:0c:f9:31:ea:5f:cf:3b:b8:f5:cd:c7:99:eb:b1:21:cd:4e:
         06:9d:e3:26:98:7d:c9:b1:c7:15:08:a3:cb:8b:07:10:3c:8d:
         12:f5:46:32:52:f4:5b:cc:5f:a5:a1:27:b1:ea:7c:d8:46:39:
         9c:ce:17:a2:c4:9d:4c:ba:e5:55:7e:19:93:a6:0d:03:1b:78:
         5e:1c:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:05 2026 by rpki-client