Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa
File:                     ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa (raw, json)
Hash identifier:          Q+qztN7/+gmYwTJfL7/MRJMf8E8CX2/2fE0ez/vjKCg=
Subject key identifier:   72:FD:51:CA:12:82:B9:0D:4F:DF:D5:AC:20:E2:E0:7E:4E:F6:5B:22
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BC3D58C654FF8854193EE86E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa
Signing time:             Thu 06 Nov 2025 02:00:31 +0000
ROA not before:           Thu 06 Nov 2025 02:00:31 +0000
ROA not after:            Wed 04 Feb 2026 02:00:31 +0000
asID:                     134578
IP address blocks:        206.54.11.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c3:d5:8c:65:4f:f8:85:41:93:ee:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  6 02:00:31 2025 GMT
            Not After : Feb  4 02:00:31 2026 GMT
        Subject: CN=b019a5d0-9057-444c-b7de-938e183348a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:fe:4f:f9:f1:78:52:9b:bb:27:1b:17:2e:
                    4e:11:4a:72:49:94:de:59:43:ed:ec:fa:76:f0:10:
                    e1:36:83:78:4c:69:f1:2b:16:8e:cc:21:4d:22:b4:
                    a9:74:f2:82:5f:40:ad:53:e6:ce:4e:82:17:47:88:
                    ae:c8:87:3f:23:48:23:5f:22:52:0a:0b:04:9d:c3:
                    5a:42:df:8b:c6:e4:1f:2b:3f:51:24:58:fc:27:ef:
                    4d:fa:b3:0e:1e:a8:44:96:9a:fe:58:f4:a3:2b:16:
                    f4:42:84:70:53:08:c0:b3:3c:c0:22:0a:b8:d1:aa:
                    55:0d:5e:e0:9c:99:48:76:7b:e3:9b:dd:f0:80:31:
                    cb:32:ad:8e:cb:6f:ed:d1:da:4e:5a:c9:10:1a:9b:
                    b1:76:a5:d8:65:88:40:6a:f3:7e:e3:ac:7f:1b:d8:
                    70:7d:19:45:cf:3a:31:bd:d1:15:ad:e8:ec:f6:50:
                    f7:fb:68:98:18:ca:26:22:a6:a0:8b:28:fc:9c:f2:
                    25:5f:a4:ef:64:3d:d2:02:e4:78:f1:0d:c3:3c:a5:
                    14:a6:f2:fa:e7:06:13:b0:9a:c8:cd:1a:4b:5e:bc:
                    22:aa:9e:a3:f6:cf:34:38:09:b6:c4:c4:d9:19:bd:
                    ab:3a:6a:b6:ed:1b:d2:52:87:24:bc:35:eb:be:61:
                    84:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:51:CA:12:82:B9:0D:4F:DF:D5:AC:20:E2:E0:7E:4E:F6:5B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.11.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:37:4d:48:ef:88:ef:3b:df:af:99:d2:69:8c:7f:ee:1c:0a:
         47:5c:ca:6b:63:c9:2e:6e:04:70:45:49:5a:4a:03:35:99:89:
         22:31:78:8c:71:52:dc:56:25:38:00:dc:18:2a:50:62:5d:6c:
         70:bc:2c:b0:82:a5:8d:ba:c4:eb:f6:89:f1:3d:16:32:96:8f:
         a2:82:5b:48:ed:1b:c2:80:33:66:86:c3:a4:76:bb:7a:8d:bc:
         c1:ec:c6:a0:20:b4:de:4c:d3:e2:ea:d3:b5:5a:81:80:47:8b:
         d9:9b:5b:17:df:13:1b:cf:90:a4:e4:90:22:2a:ab:db:74:48:
         03:31:06:2b:8f:dc:24:5e:d5:e1:12:b3:74:02:fb:ad:8b:b5:
         c4:c1:10:0d:04:f1:3a:88:de:87:81:aa:e4:9d:6c:ea:c5:cf:
         af:38:c7:ff:5e:3e:04:f2:23:84:a5:56:78:a6:9c:03:15:79:
         e9:4a:ac:f7:c6:9c:88:59:d5:79:4f:1b:67:f4:14:e9:90:c7:
         9d:45:37:2e:ea:58:4c:4e:94:48:74:97:69:16:92:47:58:fd:
         25:bf:5f:e8:3e:44:ac:e9:2c:93:5a:6d:29:3e:0f:5b:34:7f:
         ed:fb:75:18:63:ee:c8:c7:5f:1a:20:18:95:df:96:93:cb:de:
         a1:2d:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 08:23:38 2025 by rpki-client