Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
File:                     35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa (raw, json)
Hash identifier:          L8i+QNwkTgFWdJk8cxOjlS5+7f1LIT9TspZoW/D64wY=
Subject key identifier:   94:8B:FD:96:C2:27:BE:8E:66:F4:A1:95:45:10:80:64:9F:E0:E9:BF
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584A374ACC0BB5521CD200D5A740
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     12212
IP address blocks:        2605:8900:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cc:0b:b5:52:1c:d2:00:d5:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=3af775aa-f5bd-4dc2-b54d-c748b32e06fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:30:44:07:7d:33:91:8b:41:a9:eb:45:b1:
                    0c:07:bc:f2:41:39:4e:96:a5:d7:08:8b:1a:d7:b6:
                    62:68:51:fa:04:ed:8f:5c:fb:32:39:73:4a:94:60:
                    f1:7d:17:34:cd:3e:ff:1f:c5:dd:cb:8c:18:46:be:
                    df:b2:8f:a5:2a:46:e3:56:63:65:28:f6:cf:20:3b:
                    da:71:78:b4:6c:b6:cf:4e:93:ed:28:1b:c0:fa:99:
                    bd:67:04:cd:32:7f:38:b4:5f:76:a9:09:a1:40:dd:
                    7f:af:3f:1f:74:91:a6:cf:36:06:9f:c1:51:97:e1:
                    cb:3d:f8:59:ed:87:f5:e7:73:80:9b:b3:64:c9:b5:
                    df:b3:69:f0:07:5c:18:2d:43:33:d4:27:b4:90:fb:
                    91:8f:5b:10:6c:d2:22:03:ce:87:ce:33:0a:79:15:
                    07:35:c4:c8:a0:83:49:be:69:cf:d3:3f:81:93:29:
                    74:af:78:93:81:f4:00:c7:91:b7:92:a7:72:e6:c1:
                    1e:90:89:de:6a:27:00:a1:24:3f:68:2d:67:89:d8:
                    5a:ef:ea:c5:c2:36:84:c7:67:b5:1b:70:8a:51:07:
                    1f:c4:5c:c4:0f:fc:ae:e5:a8:5a:14:87:2d:28:1f:
                    13:6a:f2:e0:20:43:04:e1:30:3b:22:de:2c:95:3e:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8B:FD:96:C2:27:BE:8E:66:F4:A1:95:45:10:80:64:9F:E0:E9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:7c:18:4a:08:a6:b2:bd:47:d3:b4:d0:f8:53:1a:bb:b8:
         d7:f1:d7:17:87:43:3c:6d:85:d4:e0:fa:58:21:34:96:1c:bd:
         5b:4f:35:b4:d6:40:d1:fb:ac:01:8d:e0:4c:5f:7b:ae:ae:50:
         52:09:b0:39:03:8a:e7:e9:40:9f:b8:43:4c:dd:ae:22:0a:68:
         d7:52:c6:7b:aa:fc:dc:f4:bf:2a:97:c0:ac:42:84:74:a7:42:
         a5:ef:76:a7:0b:d9:aa:95:a4:6c:d8:24:4a:f1:26:8b:fd:fd:
         30:71:d6:47:f7:7a:65:19:a4:f7:30:0d:99:ae:70:26:64:b1:
         fa:71:a0:8c:c6:eb:58:d9:5e:11:58:15:62:db:25:45:99:79:
         99:3b:99:cd:b5:61:8f:4e:57:63:cb:0f:7c:e9:52:49:12:ec:
         6c:bf:9b:f3:7b:19:8c:07:57:44:f0:55:7e:c3:b0:94:a5:f2:
         31:52:53:71:c3:91:b0:e0:bf:b4:71:83:59:22:ec:f1:12:86:
         ab:91:1b:c8:08:92:35:b6:72:f4:6e:16:e7:e9:50:93:e1:fa:
         ae:a3:f3:ee:16:39:9b:41:91:9d:32:6d:8c:c9:51:64:0b:7a:
         14:ee:46:cd:66:e2:7f:d2:0c:75:c7:a8:dc:d8:11:c3:84:91:
         6a:f7:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:05:05 2025 by rpki-client