Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
File:                     35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa (raw, json)
Hash identifier:          08XhtikIajkerSa2F6OuG0R8H8RqRXO577ckTcm36K4=
Subject key identifier:   40:93:26:45:AC:9E:D2:F1:AD:CB:22:BF:B8:2E:A9:FB:B7:D4:F3:17
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584F3CE28A7604A50D4A7ECD80C0
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     12212
IP address blocks:        2605:8900:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8a:76:04:a5:0d:4a:7e:cd:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=a536c180-e6d3-4f34-9536-b4d66ecd6c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:bd:1e:61:b2:f8:8e:00:b5:ab:8b:d3:02:
                    78:28:85:04:12:50:65:5b:4b:7f:d2:6f:ce:97:7e:
                    38:b4:9f:11:f0:a9:c1:5b:48:b9:1c:0a:2c:5f:d9:
                    dd:49:48:92:26:a3:50:d9:c8:06:82:83:19:f8:a5:
                    1b:7a:ae:16:fe:4c:35:ee:2d:c5:4b:63:13:8b:63:
                    a6:6f:90:ff:9b:98:8c:1b:16:c8:47:a1:33:b7:fe:
                    e0:07:50:b2:dc:85:77:63:1b:8d:8b:4e:1d:fa:22:
                    c4:6e:e8:da:f3:68:e0:51:cf:fe:c9:b3:48:d6:b8:
                    56:05:27:09:5b:9c:60:43:f9:5b:46:df:f9:54:13:
                    c3:ee:d7:ff:bc:a6:23:d9:88:13:1b:18:a2:ac:35:
                    b5:67:7b:8c:dc:94:cb:ba:7b:22:f7:8c:cd:ad:2a:
                    7b:88:4b:55:fb:82:fd:2f:d3:2d:db:35:37:46:03:
                    ff:57:61:b2:e5:6f:2c:8b:a0:d7:d6:99:72:5d:c9:
                    85:d2:7a:3c:52:da:99:4b:1e:a2:95:ee:fa:4b:87:
                    ff:d9:da:df:db:a9:15:3d:f8:c0:95:f3:e9:c0:bd:
                    07:75:8b:76:56:3a:02:a5:2f:57:ad:50:e1:d1:e4:
                    e4:8c:4f:11:cb:e3:70:dd:4c:62:00:19:23:15:9b:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:93:26:45:AC:9E:D2:F1:AD:CB:22:BF:B8:2E:A9:FB:B7:D4:F3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:99:78:5d:81:76:24:24:4b:8e:25:b7:58:0a:10:70:7f:84:
         23:6c:3f:f8:dc:e4:60:d9:79:ca:cd:bd:01:c9:a5:01:ce:be:
         4a:f1:ae:85:00:cb:fe:c8:f1:f7:43:e5:d4:0e:be:54:78:9c:
         e1:29:39:f8:f1:be:39:da:b7:5d:6b:0d:d1:22:f0:4e:f9:32:
         dc:b5:96:6a:15:40:42:ca:61:71:ef:e5:df:01:28:3f:bb:8e:
         ff:62:c7:b3:9c:7f:c7:ae:c4:a8:b5:11:00:56:6c:e7:53:09:
         70:54:1c:6e:cb:70:4f:14:af:d3:bb:f3:53:a6:6b:e8:1c:66:
         fe:c0:43:dc:89:84:45:c9:31:62:dc:46:cf:a9:a0:c6:d0:1c:
         2f:a9:d4:aa:56:82:01:06:17:ed:a8:cc:b8:13:6f:57:19:05:
         8f:d9:bd:e6:d1:d5:9e:60:7d:47:83:fd:cf:50:21:28:56:36:
         2c:3c:2d:88:3a:41:25:f7:df:7a:db:83:67:45:4e:c4:a7:ce:
         f7:86:85:dc:5e:cc:6f:6e:df:ec:b7:d1:1f:a9:45:e0:62:8f:
         3b:c6:dc:5f:83:77:37:63:02:47:ab:7c:74:05:8a:a1:23:f1:
         05:2b:7c:63:69:ee:90:62:9c:ea:44:d4:23:c4:d8:7d:a3:33:
         10:a8:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:08:34 2026 by rpki-client