Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c6645f60-0443-356e-96f1-0b8f98a63a4f.roa
File:                     c6645f60-0443-356e-96f1-0b8f98a63a4f.roa (raw, json)
Hash identifier:          UCwXRP1A2tJeiTUfWIWBKlYNHQ7jkdDt5yPn7uoEags=
Subject key identifier:   D3:44:5A:65:41:72:DD:D5:12:4A:44:F5:BD:AD:F3:36:E5:9E:5D:D6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1967B8A8E13FE0607933900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c6645f60-0443-356e-96f1-0b8f98a63a4f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        70.25.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:7b:8a:8e:13:fe:06:07:93:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4dfd86c1-3004-4520-8262-a83a056464d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0b:85:34:a1:c3:55:7e:38:19:0b:8b:9d:d2:
                    de:a8:bd:92:e0:54:03:0c:a8:1c:83:76:dc:8a:4d:
                    62:25:c3:92:50:05:6e:f6:6c:72:01:85:c4:68:32:
                    aa:24:f1:ee:35:8b:75:97:9b:00:3d:17:f8:53:6f:
                    74:69:cd:1d:8f:4b:4a:2f:ab:e2:bd:d8:46:5b:6f:
                    68:a5:85:5a:d0:ba:41:7a:ed:c2:56:17:62:79:78:
                    18:6e:1b:6f:4c:86:a7:ea:a9:0b:7e:28:79:79:22:
                    b5:ea:d3:6d:b3:86:ad:3e:bf:e3:63:19:4e:d1:aa:
                    b7:b5:e8:0a:26:b3:1e:0b:f8:c4:75:23:5a:38:f8:
                    26:1e:ce:38:94:83:34:aa:86:31:6f:8b:8a:fd:f4:
                    4a:74:96:23:f0:d4:4c:71:41:cf:ae:7c:02:8b:1e:
                    39:dd:df:de:f2:c7:15:54:5d:81:62:dc:52:68:1d:
                    da:83:6a:8c:fc:d0:56:88:ae:92:65:94:74:59:8c:
                    5c:e8:7e:fb:81:e7:39:84:85:b6:3a:58:dd:e9:70:
                    01:80:cf:f2:f9:41:26:be:fc:2e:ca:f2:51:19:75:
                    7f:51:78:51:1e:db:6e:7c:16:bf:96:29:6b:3e:46:
                    8c:a6:46:79:d6:77:7e:d8:a1:80:16:bb:3f:38:66:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:5A:65:41:72:DD:D5:12:4A:44:F5:BD:AD:F3:36:E5:9E:5D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c6645f60-0443-356e-96f1-0b8f98a63a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.25.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:50:c7:ed:61:2c:dc:98:26:d7:ff:95:27:6c:a6:52:85:ff:
         79:10:5a:95:41:5a:82:76:78:09:0c:76:41:92:46:3c:c3:0e:
         ec:7a:3d:89:fd:59:e9:b2:90:6e:e5:b7:04:0a:79:3f:15:bd:
         e0:29:c9:7a:02:c9:7b:b3:db:91:6c:0b:c7:61:7e:29:f4:50:
         cf:84:9d:df:d7:7c:25:d0:b7:e3:de:2b:bf:17:1c:8d:4b:8c:
         da:e1:77:bf:4f:38:b0:79:d5:c3:5c:5c:0f:f1:72:b5:9c:e9:
         52:c5:45:fe:0b:80:9d:2f:8f:7a:82:ab:42:e2:e7:c5:b6:9c:
         87:f8:8a:0c:4f:c5:40:82:9c:8c:55:b0:22:ff:11:6c:82:d1:
         f1:e6:e1:ba:ae:a1:1f:ab:5a:48:06:5a:2a:c5:93:ee:e2:67:
         7f:f7:cb:40:b2:0a:17:4e:ba:ec:62:9e:2d:e5:3e:7f:12:34:
         b4:b0:af:a3:a7:0c:e5:fe:fc:dc:d6:a4:bf:ee:4c:48:00:6b:
         59:5e:b4:70:70:26:aa:dc:04:4c:66:c7:9e:ea:76:be:3b:3c:
         c0:ce:46:64:0b:4b:d3:7a:30:60:3e:d1:47:32:ef:11:37:b2:
         b8:d0:ad:d1:23:d6:b9:78:b2:00:72:be:53:e8:bd:ec:e3:25:
         1f:8b:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:15 2025 by rpki-client