Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/f36d807b-444f-31a4-938c-5628c6acfe61.roa
File:                     f36d807b-444f-31a4-938c-5628c6acfe61.roa (raw, json)
Hash identifier:          n2NI6vmi/0H+eyFwn/fGMOQlLdqnDOVGurqqA+McZXo=
Subject key identifier:   08:A2:35:F0:CC:0B:7C:CC:0C:B3:9D:EC:FB:DC:88:BF:84:80:93:AC
Certificate issuer:       /CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
Certificate serial:       010D0C9F4328584A43DAFEAD917B68C0686D0000
Authority key identifier: C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/f36d807b-444f-31a4-938c-5628c6acfe61.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        5.22.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:fe:ad:91:7b:68:c0:68:6d:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=98bcd5e3-d49e-47a9-98cd-a8ee6a4fe1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:0d:67:eb:4d:8c:ae:56:77:dc:89:f9:42:
                    11:42:6c:cf:12:7a:dc:f6:4b:00:3f:40:a7:8b:49:
                    26:6c:fc:4b:b6:5e:a0:4d:fc:ab:37:3e:29:f1:0b:
                    25:13:ac:95:a5:23:35:83:be:ea:6f:2a:66:6d:09:
                    77:0e:be:2b:7a:9b:b9:3e:90:ec:e0:06:ff:33:2b:
                    a9:72:dd:0a:c3:de:76:1e:b3:36:dc:95:b0:13:57:
                    4f:11:8a:dd:e7:34:3b:d5:b1:a8:21:c2:91:9b:41:
                    68:4b:4e:00:5d:70:70:1b:46:99:e9:84:0d:05:78:
                    6f:a8:63:73:64:76:0a:28:df:48:f8:82:c9:64:cf:
                    54:0e:95:99:7d:26:ae:4f:6a:45:bb:df:44:b8:3d:
                    86:7e:27:dc:b6:64:f9:66:a9:c5:9e:ea:7e:0f:ba:
                    b9:66:5e:55:f2:02:9b:93:10:31:2a:5a:17:7c:77:
                    4a:a8:19:54:fe:f8:43:e7:4d:4c:1a:43:cf:76:31:
                    1a:01:8a:39:1f:97:4e:a0:fa:0c:18:6d:aa:1d:30:
                    fd:18:3a:18:8d:65:ee:c2:0d:05:26:9b:0a:d8:04:
                    2b:7e:a7:c9:9c:0d:06:26:3a:22:fb:c1:91:a5:3e:
                    95:29:4d:74:d3:85:a6:80:11:7e:65:f2:7a:87:e0:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:35:F0:CC:0B:7C:CC:0C:B3:9D:EC:FB:DC:88:BF:84:80:93:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/f36d807b-444f-31a4-938c-5628c6acfe61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl

            X509v3 Authority Key Identifier:
                keyid:C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.22.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:11:f7:94:f3:a9:47:e0:bb:41:d9:1a:7e:14:f7:0c:8d:f4:
         92:15:a3:51:28:f2:95:41:f4:a1:b4:6c:af:df:b3:9e:54:b9:
         d0:41:b7:bf:9c:09:e8:86:69:1e:d8:f2:65:c9:14:9c:36:2e:
         95:04:3d:39:75:5c:d8:15:6a:39:14:cd:e1:f0:f6:66:51:b0:
         05:ad:34:97:6c:7a:2d:bb:d1:1c:73:ce:d0:10:be:a9:44:8e:
         31:d4:6d:23:fc:90:1e:33:08:b8:00:ec:9f:bc:1f:b7:9c:35:
         3d:79:19:2f:fe:83:ef:67:c0:13:c7:c2:fa:5d:1a:65:ad:5d:
         d8:10:b8:56:7c:fd:76:fc:6c:79:42:6b:34:e0:66:35:a8:db:
         cb:3e:2d:a2:12:c7:b1:69:b3:8d:3e:5b:ba:19:1c:fe:e6:13:
         89:5b:b4:d8:e9:bd:ab:15:6c:4e:ac:d9:6d:04:e5:e4:30:20:
         07:27:cc:7c:2a:ab:8a:2e:04:29:47:14:af:89:34:c4:8a:9d:
         1b:b2:2c:5a:11:e2:91:9a:b5:18:d9:70:ff:02:eb:73:8c:98:
         54:fb:02:73:a9:e6:ee:20:d7:c2:9a:fd:ba:70:34:49:cd:e9:
         37:00:81:13:88:8c:fe:5a:85:25:5e:3d:53:fb:86:b0:23:23:
         a4:3a:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:43:07 2025 by rpki-client