Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa
File:                     af455540-fb73-3077-a6c0-7c66dd9ae018.roa (raw, json)
Hash identifier:          /HaKW1kHNdk5B6pkQn6NZrikrytJUOjX8A7cbIN2BQo=
Subject key identifier:   E4:1C:CB:D9:DE:88:F4:E3:D8:76:A9:A8:89:B8:4A:83:74:D6:79:56
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AE2FBC79FCE61462B6D1EBB30
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa
Signing time:             Sun 17 Aug 2025 13:00:41 +0000
ROA not before:           Sun 17 Aug 2025 13:00:41 +0000
ROA not after:            Sat 15 Nov 2025 14:00:41 +0000
asID:                     134578
IP address blocks:        206.54.12.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e2:fb:c7:9f:ce:61:46:2b:6d:1e:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 17 13:00:41 2025 GMT
            Not After : Nov 15 14:00:41 2025 GMT
        Subject: CN=431b3a49-f78f-48b1-bfdd-a15b85574260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:e9:e9:c9:b0:9e:e6:0a:e9:40:8f:98:d8:
                    a5:38:6b:07:e9:06:26:a9:65:63:db:f7:65:65:7b:
                    f4:94:c4:9c:72:aa:80:9b:5d:8d:68:1d:80:f7:64:
                    7a:9d:ef:df:39:bd:5c:63:03:46:36:4f:bf:cb:d2:
                    96:75:8a:22:09:78:30:35:3a:67:ea:50:a9:dd:af:
                    1f:75:29:2d:5b:a1:fc:93:f3:fd:ed:cd:d7:d5:05:
                    a2:11:28:42:92:ba:24:1c:28:27:71:12:16:06:99:
                    e0:aa:95:b9:a1:c9:84:b7:57:b2:44:70:54:dc:f4:
                    58:c3:41:3d:8c:6c:93:cb:49:88:5c:f5:fa:11:be:
                    fc:e2:ea:81:1b:b8:98:f2:7e:31:b4:04:30:89:d8:
                    10:59:f3:21:75:f4:35:4f:b2:55:30:4d:31:ab:d6:
                    9b:76:76:38:9c:99:1a:3d:46:ea:e6:ac:51:4d:06:
                    d4:57:03:a9:25:0a:39:b2:d2:2b:77:87:53:de:e3:
                    0c:40:6e:67:f7:52:79:89:a4:e5:1e:e2:bc:1d:59:
                    22:d5:f8:41:ff:f7:6d:39:70:d5:04:c2:f8:ff:5f:
                    91:af:d4:69:03:6b:9f:58:61:3e:4d:42:66:f4:68:
                    ff:3a:28:40:51:63:c6:44:05:28:ac:24:b2:25:83:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1C:CB:D9:DE:88:F4:E3:D8:76:A9:A8:89:B8:4A:83:74:D6:79:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.12.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:59:2e:f8:64:41:36:ca:8c:c5:fd:13:2e:63:0f:c4:5b:
         55:52:de:c0:2f:fe:44:a5:61:a3:2c:e3:12:64:55:7a:82:4f:
         80:32:53:67:6c:b4:4c:24:0e:9c:5b:86:fa:bf:e7:f9:72:9a:
         ff:41:35:f0:22:20:da:f2:e0:f6:e9:dc:b1:7e:be:8a:a9:71:
         c9:05:1b:d5:74:49:1e:b8:6b:9c:18:2e:44:c5:86:c9:b2:5d:
         d0:4c:d7:a8:6c:0c:3a:74:dd:42:da:77:bc:78:78:37:b3:9a:
         25:9e:d1:c7:07:5b:00:25:28:10:c0:1a:a6:41:4a:76:67:a2:
         cd:13:06:46:05:70:fb:26:72:a7:46:06:06:7f:45:41:1e:d1:
         20:64:a6:bf:42:7d:29:85:d4:cb:e7:38:30:e3:3b:7d:05:07:
         84:a6:d5:92:97:82:a7:c6:8f:ac:79:3a:8b:bf:97:30:ba:b6:
         e3:17:94:68:d5:be:3c:5c:a8:64:b1:f1:41:78:fc:b7:80:8c:
         72:b1:44:1b:9d:4b:21:a4:08:1e:08:24:7f:da:5b:62:2c:65:
         a1:8b:79:3b:0e:7d:ea:0b:5f:97:05:97:0c:d8:0e:1a:53:f1:
         15:20:58:ef:97:ed:cc:97:26:dc:a6:65:2a:fd:fc:4d:03:51:
         80:a8:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:23 2025 by rpki-client