Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa
File:                     888ee824-8672-3b73-977c-adf62630d235.roa (raw, json)
Hash identifier:          BbcASr4A2oPWzmdhh1MsxBCLdqdF4H/5Yj7e1CQI/4M=
Subject key identifier:   02:89:32:CD:47:ED:6B:FD:D9:D4:A6:0B:23:1D:26:FF:23:C2:3D:E9
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584A8146513803F51F83E4A98760
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     1100
IP address blocks:        2605:8900:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:51:38:03:f5:1f:83:e4:a9:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=949ba85e-9089-4283-b3f8-9376f9e18c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:75:02:1e:95:1d:5b:6b:4e:d4:82:86:25:
                    e8:5b:e6:6f:82:ce:3b:5e:ef:91:66:27:68:dd:37:
                    89:3f:cb:f0:6b:09:30:ca:e8:80:bd:f1:50:6e:9d:
                    00:ed:be:5e:f4:1c:83:02:90:8d:22:56:d0:93:fd:
                    3c:fc:87:85:fa:88:ac:af:62:a5:4f:be:e7:08:1e:
                    52:b1:e7:ef:b3:62:a8:4c:19:62:a9:6c:86:e7:29:
                    37:27:73:b1:55:8f:75:ec:39:9a:67:6e:84:45:4a:
                    07:cc:50:2f:10:9a:67:0e:35:02:80:97:6a:82:25:
                    eb:46:d6:8a:4f:2d:75:2c:32:2f:62:70:e5:3c:b4:
                    43:75:2b:fe:f6:34:e7:c9:56:75:2f:5c:35:12:ae:
                    5d:c7:c2:26:37:ed:ad:5a:a9:a7:f1:77:ed:83:06:
                    29:6d:f3:28:cf:66:2a:f2:87:6b:f3:06:22:bc:29:
                    34:8a:28:9e:19:9d:da:9d:a9:b1:03:2a:18:ea:36:
                    b4:ca:c0:59:9a:c3:96:cf:d6:7a:80:8f:0f:f5:9b:
                    a0:a5:db:19:45:67:4c:96:0c:35:5b:86:3b:19:46:
                    27:1d:25:f1:92:35:4f:7d:d2:bb:54:14:71:aa:16:
                    a2:a3:d3:a9:51:2b:20:eb:8d:dc:07:2a:94:02:63:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:89:32:CD:47:ED:6B:FD:D9:D4:A6:0B:23:1D:26:FF:23:C2:3D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:c2:1e:2c:48:f9:8d:29:93:82:df:6b:47:95:77:3d:19:
         44:7b:1d:76:3e:43:06:17:96:19:74:8f:de:d2:b4:1a:ca:36:
         c3:b1:82:1c:e2:44:1a:e1:5a:c9:b3:2b:a4:d2:a7:65:42:b7:
         24:5e:69:69:5f:fa:8a:e5:dc:0f:b6:1f:40:a3:17:c9:f2:23:
         8c:b8:03:06:4f:75:6c:e9:4c:f1:63:3f:20:f8:b6:e3:13:33:
         65:25:e3:8d:a1:82:c7:f0:79:f9:a0:9f:fe:a7:ee:a6:69:32:
         69:b0:2f:b6:c9:45:34:e9:88:f4:04:04:83:ea:77:f6:d3:e2:
         a4:94:13:27:06:7c:27:82:0c:d5:6d:d7:d5:d6:39:26:08:4d:
         57:bb:b9:7c:f4:cb:17:24:05:97:0b:4d:3a:3c:98:1b:c3:c6:
         7a:e7:ad:72:4c:29:02:7a:4c:a6:19:86:d3:22:ae:a9:0b:ea:
         bd:15:98:7d:d2:97:5a:50:b4:ef:39:5c:40:45:c0:f1:6e:26:
         19:dc:9e:87:e8:e3:c1:8d:ef:c4:f7:b2:52:a9:e8:d3:58:09:
         8b:f1:f3:0c:9e:a9:2c:7b:98:a0:5d:33:12:44:4b:1e:c5:dc:
         35:3e:1c:f2:f9:ce:0c:01:00:c0:a4:aa:76:b5:48:36:c6:9d:
         b8:d9:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:24 2025 by rpki-client