Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa
File:                     888ee824-8672-3b73-977c-adf62630d235.roa (raw, json)
Hash identifier:          k6HKxrsbW8PUBq9enWdOvzl1nxpvx7t1Pi+J8nvbysQ=
Subject key identifier:   90:5F:1B:14:E2:CF:40:B5:14:9E:B6:59:54:47:56:75:4E:22:FF:84
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285849A1EF70CFFC0093DA2CFD7140
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     1100
IP address blocks:        2605:8900:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:70:cf:fc:00:93:da:2c:fd:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=5c9737d4-5be2-4725-972f-421d49d6c5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:a3:3a:e1:14:5e:85:c6:7a:01:3a:19:b9:
                    7a:f7:d6:e1:62:4d:ef:3c:33:82:a7:e1:cc:27:e2:
                    9b:02:96:ff:3a:69:c0:fc:e7:73:ae:29:39:aa:0a:
                    38:d6:1a:8b:fb:fb:aa:b3:7c:03:a1:0d:dc:e2:9b:
                    d2:d9:27:4e:f4:d1:65:5c:3d:93:8e:cc:52:56:a5:
                    cf:f2:ae:70:ec:90:4e:52:87:2c:5f:70:15:ad:09:
                    18:e9:0e:29:d3:de:b7:dd:1d:b2:1c:1f:29:63:54:
                    6b:40:12:68:c2:ad:76:0a:65:87:ac:2d:3c:9e:ea:
                    ba:b6:b0:87:a1:38:d1:17:2f:7c:2c:2e:ec:0e:ff:
                    df:4f:0b:c4:96:f4:d4:15:32:05:8a:62:31:47:bf:
                    c1:36:f2:9b:aa:1b:d0:be:80:25:47:c4:9c:c6:dc:
                    5a:54:58:d9:da:0f:a5:f1:bb:78:a4:e0:d5:a3:e8:
                    2c:7f:76:cd:c4:73:8f:e0:a0:89:c4:03:77:1d:14:
                    38:a3:5b:2a:47:62:a5:2a:fb:ad:22:0e:98:98:3c:
                    51:6b:4f:6e:5b:73:3f:f5:70:16:95:a8:51:3b:4b:
                    54:01:a9:3d:39:0a:75:db:eb:d9:5c:99:b1:0c:65:
                    25:a0:08:f9:4f:86:a4:ff:75:ce:bc:b6:42:aa:42:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5F:1B:14:E2:CF:40:B5:14:9E:B6:59:54:47:56:75:4E:22:FF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:3c:40:1c:b1:d2:38:77:7a:7a:97:3a:d3:d6:95:f5:81:
         fa:9e:7c:bc:e0:d4:9c:dd:0f:ba:d6:71:25:05:9e:d7:0e:7e:
         e1:57:2d:1c:9a:14:80:2d:d8:fc:f3:d1:e6:f5:11:eb:44:08:
         69:74:03:27:01:ae:cf:b5:35:d9:97:ca:c9:17:3e:cc:ae:b5:
         22:6f:25:75:82:38:e6:0c:9c:4e:71:6e:46:e8:eb:e8:9b:db:
         51:4f:73:a7:b5:63:a0:d8:27:99:da:83:0f:8f:eb:de:98:06:
         79:5d:1f:22:1d:be:3f:54:6b:c0:9e:cb:26:2c:92:79:c3:dc:
         dd:1d:c6:8a:d2:ce:f8:26:89:33:8a:13:85:ae:3f:ad:02:8a:
         69:6f:c5:a5:a2:db:75:3d:3b:fe:c1:c2:53:28:54:ce:42:df:
         f3:e2:60:a4:14:38:4b:70:40:15:95:48:fc:cc:e7:fb:be:f0:
         44:d2:c9:4e:35:0a:a2:c5:dc:3a:98:f6:fd:48:78:07:0f:40:
         4f:36:bc:18:9e:46:27:4b:d4:11:b5:92:9b:a1:d1:61:52:66:
         bf:26:fb:a2:34:ef:bd:76:e0:47:70:60:ad:cc:d2:60:70:5d:
         86:8e:a5:47:4b:5b:de:74:4a:67:af:51:da:6e:ad:93:6a:37:
         74:76:6c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:17 2025 by rpki-client