Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa
File:                     f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa (raw, json)
Hash identifier:          C86E9Qe36qAyvFSw33hTyipH67Lnw+xQHzB8BK4D6rs=
Subject key identifier:   51:46:43:24:B5:84:E2:5E:E8:C3:06:AD:D8:D5:6C:5E:0B:F9:49:EA
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584AF256A32307AD8280EF00E7D0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     22359
IP address blocks:        207.22.32.2/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a3:23:07:ad:82:80:ef:00:e7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=b89e4060-099e-436c-9b61-2e3500c42a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:46:86:28:ba:13:15:04:41:7a:08:1a:68:
                    d7:d0:33:20:9a:f7:3c:6d:c0:c7:15:8a:77:86:ce:
                    21:59:49:22:64:30:76:1a:66:f2:60:82:da:96:be:
                    ee:3c:b8:4f:3c:8a:e4:b7:57:06:2d:87:4c:ea:39:
                    66:aa:56:fa:5e:45:ed:e6:51:4f:91:8c:ba:8c:d7:
                    96:89:36:05:72:01:31:9e:13:d9:c5:26:52:b2:2e:
                    34:fa:06:48:ce:34:81:fa:57:87:dd:02:e8:aa:f4:
                    a4:d7:47:b0:e5:88:01:26:cd:97:44:4a:01:a1:78:
                    ef:48:84:b2:a2:39:e5:81:d8:9d:cb:d5:1f:6d:10:
                    04:25:16:a1:1e:c6:67:28:61:6b:6f:e8:47:ec:45:
                    a9:03:63:db:39:98:f0:9d:ad:49:4b:54:86:e6:82:
                    06:ea:59:b4:16:a3:d9:66:ff:e9:52:7d:6a:c6:37:
                    f5:61:66:82:1e:86:a3:64:bc:59:44:fb:e8:89:8a:
                    2c:47:06:a6:5a:46:35:b5:e2:d8:62:43:4a:df:b2:
                    36:8a:e4:88:a9:60:8e:9a:11:a0:ad:eb:db:92:26:
                    67:74:86:16:b4:57:67:1c:9b:67:5d:36:75:69:10:
                    63:7b:30:1a:1e:a0:2a:ef:61:07:9d:ee:5a:13:f2:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:43:24:B5:84:E2:5E:E8:C3:06:AD:D8:D5:6C:5E:0B:F9:49:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.32.2/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e3:e3:20:b7:74:57:5e:5f:56:d5:ce:10:47:d4:83:de:6d:
         f2:31:cb:34:ba:76:d2:71:21:c3:49:39:08:74:4e:71:0f:ca:
         0f:af:86:27:2a:0f:05:e7:a9:ff:3c:87:9a:45:dd:82:14:98:
         dd:a7:1b:b7:af:7c:12:16:41:40:b6:7f:47:eb:ce:f8:a3:07:
         a3:76:96:ce:fe:d5:c2:a6:bd:e1:6b:22:8d:19:7b:24:9c:33:
         bf:90:e0:0e:46:b6:45:5b:13:e8:17:92:63:d7:a9:19:e3:a2:
         67:18:11:d7:d6:38:9d:2e:34:3f:f2:fe:b3:16:10:a8:47:3a:
         c4:dd:be:f9:d6:3c:5f:ed:df:db:e7:bc:01:00:9d:53:1f:11:
         f5:2a:96:08:b9:88:2b:9f:69:aa:94:04:f6:2b:27:b9:0b:1e:
         f3:d4:24:ce:78:57:d7:41:ff:38:1e:77:9a:d2:6f:a5:dc:22:
         47:5d:0a:e5:60:be:eb:ed:a6:b2:ec:dd:2c:72:df:a1:53:41:
         72:9f:cb:50:f6:80:34:d4:77:4e:8f:22:5e:3d:f5:7e:d8:da:
         1c:4f:b3:10:76:d6:19:36:81:51:22:45:31:2c:e8:c4:cb:7f:
         86:de:eb:a5:1e:42:70:85:bd:3f:c3:18:17:2f:e3:1a:a7:18:
         85:ca:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:51 2025 by rpki-client