Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22ba2ea9-200f-355d-92ef-5271c4fc6ab4.roa
File:                     22ba2ea9-200f-355d-92ef-5271c4fc6ab4.roa (raw, json)
Hash identifier:          L3ICd027+SKtP3O+Gs+8yBVl1IajnRoyABvpgD+rnKs=
Subject key identifier:   6E:98:8D:54:66:2B:A2:EA:EF:69:66:7E:FB:CA:07:E4:14:18:B7:CE
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584B48E1AD03C662146168CFD700
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22ba2ea9-200f-355d-92ef-5271c4fc6ab4.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     400529
IP address blocks:        45.62.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:ad:03:c6:62:14:61:68:cf:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=b359bacb-f0c2-44fd-842e-287ecde313c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4a:e2:48:dd:37:ad:24:1c:62:3d:d3:e3:6b:
                    f7:56:5d:3d:c5:3f:92:5f:6c:d4:14:ff:e2:8e:c5:
                    a7:68:6b:26:2a:b9:c9:ef:2e:e7:01:09:23:b4:77:
                    c8:58:80:a3:d9:20:4e:93:e8:a5:57:e4:4c:cd:15:
                    c0:7d:7e:a0:1a:87:c3:02:da:4e:4d:86:7c:59:e7:
                    e4:bb:4b:53:ce:38:c4:da:d6:5a:95:a3:76:aa:4f:
                    83:80:59:99:22:03:ce:89:6f:b8:c8:9a:fc:d5:da:
                    7f:27:9a:eb:0c:1a:53:87:e4:ee:3d:f4:31:5c:5c:
                    25:87:c8:ed:bb:c5:81:68:22:f3:0d:70:50:68:34:
                    9f:9a:f6:57:e0:74:3f:2c:dc:56:96:49:91:30:3c:
                    f1:52:1b:89:7e:38:ce:26:43:51:b6:59:21:61:f6:
                    0a:72:40:ed:9b:6b:87:64:4f:0a:ba:27:e9:ac:aa:
                    ab:e0:ba:b6:5f:a2:2a:6d:3e:74:93:4e:4a:21:6b:
                    90:f6:53:a0:9a:de:da:35:2f:01:4e:85:7e:1b:c1:
                    a6:0c:19:23:27:59:2e:62:19:7c:43:37:b9:9e:ab:
                    47:75:91:a6:43:dc:3d:69:ef:8e:cf:ec:b7:10:74:
                    4d:e5:1f:5e:ff:a4:36:79:99:2d:96:1c:ac:1a:17:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:98:8D:54:66:2B:A2:EA:EF:69:66:7E:FB:CA:07:E4:14:18:B7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22ba2ea9-200f-355d-92ef-5271c4fc6ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:ea:26:08:c8:8b:21:19:09:11:2d:bd:a9:6f:9e:bb:d3:
         8f:29:2b:3b:e5:48:23:8d:01:30:ba:a9:03:a0:ae:b6:db:c6:
         9e:f1:af:b9:d5:4a:4b:1d:3c:24:9b:9e:d1:ac:d5:d3:2e:73:
         47:d1:28:25:5a:f5:36:02:16:9c:5d:7a:d4:60:4c:f2:cd:43:
         f9:9a:d2:50:b8:ea:c4:55:c5:c4:5f:88:89:6a:82:61:d2:52:
         14:d5:2b:0b:82:22:b5:93:67:ca:ee:2d:b5:50:99:2e:1a:9d:
         76:fc:d2:a4:00:0b:d3:16:06:59:b6:40:b9:41:75:ba:0a:16:
         4e:36:c2:4b:14:e4:25:b5:18:d5:31:34:42:77:f7:fc:4f:8e:
         de:6e:ba:d1:0b:bb:73:e2:c2:8e:13:2a:06:ff:91:0a:0f:6a:
         11:ff:90:8c:f5:45:b3:22:63:ed:dd:38:63:36:03:1f:48:1b:
         e5:d9:c9:28:d4:90:9b:fc:0d:b0:a7:1c:f0:04:5d:87:a1:66:
         ea:e9:29:4b:6c:ae:3d:95:f6:0e:c9:04:01:32:5a:19:ae:36:
         61:b3:95:eb:59:ce:32:2e:ea:93:65:03:f2:49:46:dc:41:a3:
         b0:3f:d7:35:a2:cb:6a:83:96:9e:cb:7b:99:dc:e0:25:57:f0:
         5b:f2:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:36 2025 by rpki-client