Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa
File:                     88ffe6a4-3bbd-346d-b727-667643c36512.roa (raw, json)
Hash identifier:          TCqNZI5TUgLxyj/mIqr4Watc0gItlkYR7trbY3oofPQ=
Subject key identifier:   30:2B:0B:76:70:F1:15:09:FB:B6:D5:DD:E9:94:42:6A:ED:34:4F:D7
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584BB2F7ACA8BE589144CDEE3880
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     394625
IP address blocks:        2606:d280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ac:a8:be:58:91:44:cd:ee:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=673f1b20-c21b-41bc-8a32-5467b71203ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:be:36:f8:22:27:cb:a3:88:37:f2:df:ac:
                    7b:76:38:95:cd:b5:a0:a9:37:43:44:80:65:43:87:
                    ec:4d:ca:6c:0e:f7:ff:8b:e3:60:8d:9f:27:b6:5a:
                    9f:cd:f9:9d:ec:06:a9:78:34:cb:ba:e1:06:38:7b:
                    dc:5c:42:e1:c8:07:65:ec:4b:ac:fb:7b:97:dd:b6:
                    ca:49:38:a9:80:69:af:85:b3:ea:70:27:1b:3c:e8:
                    f1:39:10:af:71:bb:08:f5:56:b5:b9:4a:dc:84:63:
                    8b:4a:d6:56:75:42:e4:a2:0b:cb:b5:d3:d6:21:3e:
                    03:48:32:e5:48:27:98:8d:c0:c1:87:6f:48:b0:9f:
                    16:fd:d9:81:aa:f8:68:0e:35:79:b8:fe:51:71:a8:
                    11:24:93:90:c0:51:7f:c6:68:3e:61:62:73:8f:19:
                    ff:68:5d:03:39:9a:54:0c:bd:92:04:37:15:3f:48:
                    83:a0:a7:81:b8:a4:fb:be:0f:e2:5a:d8:24:99:97:
                    28:a9:c7:b7:2f:16:da:c5:cd:bd:be:d3:06:49:82:
                    b7:5a:32:3b:ac:bd:ba:28:a4:cf:13:f0:87:33:95:
                    4c:c7:48:87:fd:bc:74:8d:35:6b:11:d6:fa:12:54:
                    93:fb:d2:b8:b3:73:05:d2:b9:fa:de:4d:99:30:7a:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2B:0B:76:70:F1:15:09:FB:B6:D5:DD:E9:94:42:6A:ED:34:4F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:89:e0:55:87:ba:9e:ba:35:d1:d6:75:6c:d1:6d:1b:12:e8:
         b9:56:a8:51:74:38:20:79:bc:6a:01:c4:a9:3b:ce:64:62:aa:
         2b:49:b2:cf:c9:18:46:b6:60:c4:b4:ce:01:cc:66:08:12:d0:
         dc:92:50:3f:33:18:7a:97:f1:33:50:12:22:5c:4d:8f:d2:09:
         76:57:71:08:09:c6:88:13:87:f2:67:06:cb:23:87:56:06:19:
         fc:66:e1:cd:e8:88:16:57:21:10:ef:49:34:06:70:5f:3e:ff:
         88:6e:ad:9b:5d:6e:7f:e5:55:f6:0c:c1:96:e8:47:76:0f:3d:
         a8:00:99:db:4f:51:a3:a6:c5:2d:dd:0b:91:2e:ad:a2:aa:d9:
         d0:62:06:6d:80:8f:1e:a5:29:ae:08:42:d2:f0:03:eb:fb:9a:
         64:24:2c:19:f1:23:81:aa:db:15:fc:28:f5:79:67:07:78:d9:
         53:61:44:93:f5:bc:9e:c5:83:7a:e6:95:ce:7e:0d:3f:a8:1e:
         2e:f5:08:1f:3c:c0:fa:ef:25:d5:34:2d:39:50:4d:f1:d9:98:
         0f:48:f5:76:6d:15:26:ac:d7:b9:db:c7:4c:e0:41:f0:d3:ab:
         bc:6f:33:b1:ae:74:2f:37:8b:0f:81:a5:f5:22:2f:62:56:8c:
         59:ea:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:42 2025 by rpki-client