Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a5c45a78-9d42-3bb0-8a22-27ed81ccb561.roa
File:                     a5c45a78-9d42-3bb0-8a22-27ed81ccb561.roa (raw, json)
Hash identifier:          mdNNum6IgBHLAOLJKBePwhflU3Qa+Iv4xL/fpPPBvqw=
Subject key identifier:   A0:54:F4:AF:19:EC:60:12:5F:8C:F8:23:04:C4:AC:51:1F:DF:21:92
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584CA491B6086BE093B61C60D380
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a5c45a78-9d42-3bb0-8a22-27ed81ccb561.roa
Signing time:             Sun 25 Jan 2026 14:00:40 +0000
ROA not before:           Sun 25 Jan 2026 14:00:40 +0000
ROA not after:            Sat 25 Apr 2026 13:00:40 +0000
asID:                     134578
IP address blocks:        206.54.10.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a4:91:b6:08:6b:e0:93:b6:1c:60:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 25 14:00:40 2026 GMT
            Not After : Apr 25 13:00:40 2026 GMT
        Subject: CN=23f72bc9-9b56-4bde-bb89-0c4c6231eaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:66:88:5b:15:1f:e8:77:ff:27:c3:c4:4a:
                    6e:a2:26:37:65:f0:67:be:f9:bd:cd:a9:13:47:c3:
                    12:92:0e:4c:66:2e:7c:7c:f8:0f:e6:48:7f:3b:c3:
                    4e:50:ba:cc:42:2a:a2:00:c0:7c:00:0c:c3:ce:ce:
                    39:de:75:d4:d1:78:52:97:e4:32:a4:dd:ba:04:62:
                    3f:9e:51:0c:22:d1:2c:25:f5:a3:e8:4e:0f:00:bd:
                    6c:30:18:fd:93:c4:9b:ae:3e:86:79:f1:2f:44:d2:
                    4d:63:ed:44:7a:02:41:b2:ef:82:1a:59:2e:8d:f5:
                    25:9e:53:e5:b2:db:a9:42:4e:74:bc:e3:60:0b:31:
                    db:c2:6a:e8:9b:0a:05:0b:ad:3d:c7:db:ee:a3:6c:
                    78:dd:04:dc:f6:94:70:c4:03:8d:0b:1c:bf:47:7f:
                    27:29:20:82:24:ab:d4:ac:d6:c8:3b:f7:3c:f8:ea:
                    1e:e7:d8:e8:02:2a:5d:60:c1:26:1f:1d:a1:92:b7:
                    b5:95:95:a7:91:f4:3e:8d:bd:6b:cc:f0:23:88:cc:
                    c9:3c:53:d8:3d:c9:05:df:9e:5b:da:f5:2e:e2:7a:
                    dd:55:3e:d6:30:66:78:84:fb:b5:05:aa:cc:68:a1:
                    06:50:05:c0:fc:4f:23:24:dd:49:7f:aa:0e:28:c7:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:54:F4:AF:19:EC:60:12:5F:8C:F8:23:04:C4:AC:51:1F:DF:21:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a5c45a78-9d42-3bb0-8a22-27ed81ccb561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.10.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:f5:42:44:9b:1d:be:c8:e8:91:90:4e:16:d6:d0:94:f0:
         7e:a1:65:1d:d6:19:3d:ff:a7:04:0c:0e:49:56:1a:0f:bf:32:
         b0:46:96:3c:21:1f:e1:73:7a:0b:3b:9b:9d:a0:ed:e3:5b:cf:
         f3:51:c2:76:53:02:29:31:e5:46:ae:f3:1e:42:8e:fc:30:49:
         4f:83:ad:f3:d3:21:4d:32:46:46:10:6a:d5:40:f7:3b:61:27:
         6c:cf:32:99:af:1c:74:f7:ec:41:4b:8b:2f:d2:cd:61:11:00:
         93:df:a1:bf:7e:15:a7:3b:7d:f1:54:79:59:95:38:bf:7a:2d:
         fe:4f:97:20:04:89:28:df:b7:e8:cc:17:ff:fe:7d:29:ce:25:
         5a:8e:a9:16:7e:93:c0:72:08:8a:98:f9:89:8b:b6:e9:16:01:
         77:c4:40:6d:5f:85:a1:bc:6d:f3:5a:b2:12:de:91:35:6b:f9:
         78:b1:78:f5:9e:f7:15:e3:ee:39:48:a1:67:85:3d:7b:d6:c7:
         0c:97:b6:45:46:f3:5d:73:d6:2d:de:ba:bf:10:7a:0b:49:0d:
         52:f9:50:ed:d7:15:35:06:57:21:f2:be:ac:da:a6:6c:3e:84:
         05:d7:2a:aa:56:3d:e5:44:8a:fb:79:43:5b:e6:64:fc:a9:15:
         d6:e3:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 11:53:52 2026 by rpki-client