Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/13f94f60-2c64-39fc-a547-9f9152aac3be.roa
File:                     13f94f60-2c64-39fc-a547-9f9152aac3be.roa (raw, json)
Hash identifier:          UJEUsFvef/wxWNHtF+omFq09LER+sQHfpMK96KqHp5Y=
Subject key identifier:   54:80:B7:99:D7:BE:4C:CE:8E:CB:DA:6D:20:69:04:67:46:02:5F:90
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584CA75C6D5A6692345DA7191800
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/13f94f60-2c64-39fc-a547-9f9152aac3be.roa
Signing time:             Mon 26 Jan 2026 14:00:41 +0000
ROA not before:           Mon 26 Jan 2026 14:00:41 +0000
ROA not after:            Sun 26 Apr 2026 13:00:41 +0000
asID:                     134578
IP address blocks:        206.54.13.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a7:5c:6d:5a:66:92:34:5d:a7:19:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 26 14:00:41 2026 GMT
            Not After : Apr 26 13:00:41 2026 GMT
        Subject: CN=d7b25c27-5a0d-4515-9825-c44ece4b3ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:27:21:fe:83:d7:70:4f:35:d3:6b:23:89:
                    a9:03:40:aa:85:96:65:95:eb:e9:de:73:c5:71:08:
                    2c:0f:d2:26:fa:b9:86:f9:3c:dc:df:11:00:54:65:
                    5a:78:ff:9d:85:ba:00:72:02:b4:79:53:f3:d2:e9:
                    32:ec:aa:9d:69:54:98:82:e1:c5:9f:de:57:fc:c8:
                    a4:fc:07:f5:d4:81:e2:e2:75:e5:95:3e:b3:b0:7c:
                    6a:77:44:1f:9c:a9:48:cd:d5:e7:44:c9:09:20:e3:
                    47:03:d5:75:55:06:be:69:80:39:96:81:d4:5a:12:
                    66:85:73:3d:84:06:99:fd:8b:17:35:79:cd:a7:d1:
                    7f:47:e5:cd:76:04:c6:5f:d8:9e:79:46:d3:c0:6e:
                    ab:73:2d:bc:db:3f:9d:7d:6d:f8:0a:c4:8b:0a:d8:
                    8a:8a:4d:dc:65:b0:66:a4:5b:b8:e1:7e:f1:b8:62:
                    7a:f4:f5:89:57:b1:38:81:d3:8d:17:6e:c9:39:36:
                    8a:cc:88:55:e9:44:91:3d:c3:27:2d:6f:07:9b:75:
                    34:3b:69:71:c2:0d:d0:f6:2b:5d:c7:79:ef:3c:80:
                    f6:21:f9:7a:1b:c5:cb:d1:b5:1c:8f:93:17:00:8d:
                    ae:41:14:96:b7:38:ee:9b:76:4e:15:9b:42:8c:b3:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:80:B7:99:D7:BE:4C:CE:8E:CB:DA:6D:20:69:04:67:46:02:5F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/13f94f60-2c64-39fc-a547-9f9152aac3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.13.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ab:c4:f5:2e:17:08:72:ea:bd:05:74:4d:ca:56:da:1d:1b:
         f6:a7:33:e6:ea:0b:da:41:80:cb:c0:7d:0f:9e:fa:d2:9d:41:
         ca:d1:46:90:1e:ed:99:5a:10:1a:93:0f:5f:64:81:bf:4a:3e:
         d3:a9:23:4c:62:de:18:6a:79:1b:6e:b3:9e:88:6f:0e:8d:74:
         15:7d:15:7e:6e:94:ac:74:3c:7e:b4:c6:fc:f8:a3:62:13:46:
         88:ab:38:d4:1e:e3:84:8d:dd:67:54:77:bb:bf:59:5c:0c:a4:
         ae:5b:ab:ca:7c:e6:cd:12:df:ea:6d:52:cc:0b:d5:70:80:c1:
         5f:98:e1:7e:0a:e9:90:32:21:2a:75:2c:57:c2:0b:23:cc:66:
         8f:c2:72:c1:e7:3d:9d:4a:e1:c4:02:d3:27:b3:3a:8b:f8:5f:
         52:34:73:9e:f0:67:35:37:79:83:9f:d1:70:53:64:57:27:70:
         b0:b2:c3:64:97:e7:e9:67:e0:fb:3e:5f:e8:74:0b:8c:e7:8b:
         dd:d8:90:5a:65:eb:7b:ac:87:ef:4a:94:bc:3a:31:cb:08:6b:
         e0:8f:78:8e:33:e5:6b:10:c9:94:42:ab:10:d2:3b:63:94:56:
         5d:07:58:58:f3:90:f5:6e:23:b8:2c:2d:2c:43:67:29:b0:cc:
         a0:f1:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 11:53:29 2026 by rpki-client