Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aee81cde-654f-3e4e-9c0c-e7b0d50ab185.roa
File:                     aee81cde-654f-3e4e-9c0c-e7b0d50ab185.roa (raw, json)
Hash identifier:          JYRWcEICqCcZUNmQTl0pV807NT18nSDKwx3xFBd7Fcs=
Subject key identifier:   3B:21:A6:CD:93:FA:AB:8E:B5:A1:8E:E3:4A:35:5D:F4:36:1C:82:B4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A03125B926071EE508C396280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aee81cde-654f-3e4e-9c0c-e7b0d50ab185.roa
Signing time:             Thu 29 May 2025 08:05:11 +0000
ROA not before:           Thu 29 May 2025 08:05:11 +0000
ROA not after:            Wed 27 Aug 2025 08:05:11 +0000
asID:                     134578
IP address blocks:        206.54.12.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:12:5b:92:60:71:ee:50:8c:39:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 29 08:05:11 2025 GMT
            Not After : Aug 27 08:05:11 2025 GMT
        Subject: CN=f183dc99-97f4-46c3-9365-629dbea766ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:9e:b6:1c:b3:84:e2:04:b2:94:89:3b:60:
                    ae:6a:7b:4d:60:81:5a:28:50:7c:b2:99:79:37:85:
                    87:91:08:f1:29:13:e4:cd:9c:48:0b:9f:30:73:80:
                    1d:65:18:a3:cc:64:25:69:91:e2:cd:f5:cd:58:14:
                    10:19:40:22:54:e4:92:d9:a5:6e:2d:dd:5c:2d:be:
                    e6:ea:89:82:57:5d:cd:66:67:03:a6:0d:7a:87:ab:
                    b1:10:a6:4e:4e:ee:ed:23:19:cb:36:e7:ad:2a:28:
                    d8:1c:d1:0b:c6:68:34:b5:9c:01:6f:e6:67:03:f5:
                    38:bf:c9:0e:8b:06:f1:c2:b9:4a:f9:37:f5:d6:dd:
                    53:44:bc:5a:65:7d:5f:15:d7:0d:3c:18:61:cf:8c:
                    33:b4:2d:6e:26:90:01:34:e7:16:96:c4:ed:66:a9:
                    37:3b:39:b8:d9:89:9f:73:20:24:9d:5e:29:f2:28:
                    96:43:57:5c:80:40:5d:e1:c1:b5:5d:2c:7b:12:69:
                    39:3d:8d:3c:c8:8b:db:f4:85:60:d7:0e:5b:63:2e:
                    f2:a1:51:9b:19:08:2c:ab:79:ba:ce:b3:d1:14:5f:
                    8c:6a:96:c7:32:11:26:36:cc:7d:da:6c:5e:b5:7f:
                    50:36:67:33:64:95:3c:10:9b:40:67:63:f1:a8:11:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:21:A6:CD:93:FA:AB:8E:B5:A1:8E:E3:4A:35:5D:F4:36:1C:82:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aee81cde-654f-3e4e-9c0c-e7b0d50ab185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.12.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:69:c3:b9:fe:95:24:ab:48:ad:f0:f3:6d:f7:16:93:6e:d2:
         a1:d8:8d:fe:71:bb:65:3c:d9:23:93:57:e9:da:f7:6e:df:21:
         e4:51:59:b8:5e:e8:24:7d:1d:28:61:68:12:0f:40:3f:6d:f8:
         d7:5f:e6:d6:b8:e1:96:da:c0:6d:90:07:74:0f:a7:86:02:80:
         85:54:e1:0c:67:83:27:90:d1:1d:9b:dd:9d:b5:8b:06:70:45:
         7b:2c:44:e4:69:da:ae:1e:e1:a7:b1:3c:65:67:ab:36:f0:34:
         be:f6:d2:cf:f2:5b:9c:7d:3f:90:d0:19:56:fa:27:69:aa:b9:
         e4:04:04:84:2d:cd:a9:0d:2b:ef:7f:f8:ff:5d:b1:cc:b2:1b:
         55:0e:fa:3b:8a:42:3c:a9:93:8a:7e:db:65:a7:76:18:ec:37:
         7b:23:b1:28:70:6f:30:f8:35:e4:fc:87:3f:2d:fb:ad:44:c2:
         d6:e3:be:ff:ca:ff:78:57:8f:71:af:99:fd:97:5d:48:1e:14:
         6b:6f:85:44:81:97:ac:12:f0:11:9d:00:90:a6:10:24:1f:51:
         4b:61:87:d4:02:5d:1b:76:d1:e6:2f:8f:e4:7a:2e:fe:8d:d2:
         df:ab:63:3b:fd:d4:08:d4:3d:ab:a8:08:a8:c0:08:1c:b6:de:
         e0:a1:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:26 2025 by rpki-client