Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa
File:                     c3e6db55-bfca-3e4b-817d-7472db3f9575.roa (raw, json)
Hash identifier:          glF2q4x4xiKTYiPcZd3MQdI50En7V6Y2h5U92Y909aY=
Subject key identifier:   43:6C:43:12:41:32:1D:B3:1B:C2:7E:FA:1B:A6:6B:41:BF:FB:F2:E9
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584EA7917F4F08784A34A25BD540
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3800
IP address blocks:        2605:8900::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:7f:4f:08:78:4a:34:a2:5b:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=11108b8c-7508-4021-aff5-43564a780466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:f0:42:7a:48:8c:43:72:8b:f3:4e:52:47:
                    27:0f:1f:d9:51:19:cc:4f:ec:b4:54:c0:dc:91:33:
                    4f:a9:54:8a:24:da:cc:45:4c:b7:81:a6:99:81:22:
                    25:27:8d:92:7e:f0:39:5f:26:e3:59:66:ac:c2:2f:
                    bb:f6:63:41:1d:11:a8:b2:e0:39:2f:aa:43:dd:3f:
                    e6:9c:0d:83:e4:10:95:ed:6e:87:6f:63:ac:fd:50:
                    0a:24:e0:9b:8e:ab:2c:08:61:48:8c:f8:33:fd:7b:
                    5f:73:66:83:42:d6:31:0e:40:99:b6:c4:46:8e:13:
                    ac:32:23:dc:fd:e2:f1:8f:97:b6:3d:c4:71:28:ce:
                    7b:04:56:2f:6b:4d:bf:c6:02:04:af:de:eb:b0:be:
                    40:d0:be:4e:d9:fe:e3:d2:e1:15:4a:2a:c4:eb:4e:
                    57:12:ff:a0:32:ea:01:1d:64:82:28:b3:a0:1e:37:
                    54:af:1f:b9:3f:f8:a9:60:11:60:e9:8a:5c:d4:30:
                    34:2c:90:7b:0e:b9:a1:b3:fd:ee:3f:40:04:70:19:
                    c3:06:7d:73:7d:4a:a3:6c:da:66:e1:15:84:a3:83:
                    c0:56:ba:94:53:20:99:43:f2:b2:1c:2e:67:94:a4:
                    76:82:0b:bf:3d:56:ab:2e:84:b7:95:13:6d:15:b6:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6C:43:12:41:32:1D:B3:1B:C2:7E:FA:1B:A6:6B:41:BF:FB:F2:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:12:19:65:64:a3:33:54:fc:64:27:3a:be:28:b2:9a:6b:65:
         81:7e:19:1c:2a:5c:41:04:1e:89:3f:39:2f:0d:98:d8:30:97:
         45:fc:df:aa:bc:0a:33:3e:c3:11:40:aa:a9:21:37:10:c8:3a:
         8b:14:03:c3:5d:93:70:8d:b9:5b:0d:cc:b3:9c:69:9a:d3:f0:
         5b:99:0d:3f:33:d0:a4:81:58:54:be:40:9d:7c:68:08:f3:4b:
         62:52:9a:0f:4a:7a:52:78:61:05:6e:e9:18:c1:38:bd:f2:55:
         91:8b:ae:26:15:bf:6e:20:b1:bf:b0:d1:59:a3:20:52:e0:d5:
         e5:41:49:c7:bd:66:72:ce:31:a3:75:64:2c:71:25:a2:d4:00:
         e5:3d:0d:8c:1b:a8:72:00:f5:ca:b8:52:4b:22:a0:de:08:30:
         79:2f:bb:05:70:48:62:6c:32:0b:90:29:c3:08:9f:ec:12:01:
         8d:33:d9:81:7c:7a:52:e7:1f:57:88:9a:2c:52:11:cd:52:ed:
         63:a7:f7:c8:21:1f:26:12:d6:7c:a5:c6:b5:f0:af:c8:64:c6:
         97:36:e2:b5:65:d2:39:05:71:10:07:00:7c:27:9d:71:7b:d9:
         b5:87:bd:aa:5a:1f:6f:ef:bf:b8:a5:ab:44:3f:99:bd:cd:dd:
         09:d3:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:48:06 2026 by rpki-client