Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa
File:                     ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa (raw, json)
Hash identifier:          wRHv/u9m/l+qdpMD7rHkxOYSfLF1qIF7SXiM9xq5IbA=
Subject key identifier:   5E:66:98:AA:02:3D:43:22:0A:BF:BA:D5:77:A2:1C:AB:EC:D6:3C:51
Certificate issuer:       /CN=39cc3add-0660-4c1d-a230-c78f7b4b3105
Certificate serial:       010D0C9F4328584E5A49F4B9BFFCA75EBA0F2080
Authority key identifier: AA:F7:8E:82:F3:94:3C:FF:D3:C2:88:CA:9B:67:D7:36:2A:08:62:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     44356
IP address blocks:        172.110.88.0/22 maxlen: 24
                          2606:3e80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f4:b9:bf:fc:a7:5e:ba:0f:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39cc3add-0660-4c1d-a230-c78f7b4b3105
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=faa0a53e-0783-4d61-9ad2-9d74c3ce90c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:85:a6:aa:bd:b6:5a:66:c3:1a:bd:e5:6d:
                    8b:d6:83:c7:05:7f:8b:23:36:49:5d:d4:ed:9f:57:
                    11:7a:fb:ac:7c:88:cd:31:45:01:b5:8a:7e:97:49:
                    fd:b9:54:82:ce:ca:f5:0e:c7:3e:97:84:49:d6:35:
                    f7:9d:00:db:3d:37:ee:a7:59:a0:1b:fb:49:7a:ca:
                    f7:93:3d:b6:e2:30:8d:23:06:f4:31:ea:20:d3:c6:
                    5c:fe:2a:15:ed:7f:d8:23:6d:35:75:fd:dd:ab:7a:
                    91:59:dc:b9:56:71:21:b8:be:93:d9:09:82:ff:24:
                    a6:ba:bc:7f:ab:69:71:b4:3d:fb:e5:13:b9:c7:8d:
                    7a:02:bc:23:5e:ac:00:7b:16:4b:2a:1a:d0:4f:a7:
                    fa:82:25:e9:9d:ac:c2:db:10:62:28:5a:71:4f:57:
                    3c:15:08:b7:1e:28:20:76:7c:30:82:35:35:24:22:
                    58:0c:e4:a1:92:8a:78:0f:3f:9a:9a:26:97:a0:ee:
                    b6:99:8c:38:47:ff:ca:13:f9:3c:a9:ac:56:82:55:
                    d3:23:15:00:c4:93:c4:9a:c9:74:1d:96:47:23:6f:
                    e4:e6:96:8b:74:69:19:82:0e:a3:cc:da:51:b3:cf:
                    b3:dd:22:ac:fb:a7:a0:c4:a0:8d:e6:65:a6:53:b9:
                    23:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:66:98:AA:02:3D:43:22:0A:BF:BA:D5:77:A2:1C:AB:EC:D6:3C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F7:8E:82:F3:94:3C:FF:D3:C2:88:CA:9B:67:D7:36:2A:08:62:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.88.0/22
                IPv6:
                  2606:3e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7c:e9:b5:b9:95:d1:43:53:75:77:81:51:a3:45:a8:67:1e:
         9f:4b:30:37:0d:82:c7:0f:cc:c3:3b:72:4e:71:20:57:2b:98:
         33:80:5b:e6:24:7e:7a:39:9f:c2:d4:cc:21:a4:da:e4:e9:a4:
         fe:3f:62:71:d4:4a:aa:32:c5:ed:33:c5:5d:75:df:1e:f2:18:
         e6:fb:01:5c:fe:14:ae:a8:aa:58:5b:3b:0c:c8:15:cd:28:2e:
         f7:47:f1:1f:99:36:f3:e2:3e:69:7a:4e:6a:b8:e1:fb:eb:b9:
         5e:45:e4:29:7c:25:7d:ff:c1:f7:44:4d:c0:0a:71:3d:4c:98:
         2e:e0:bf:79:42:8b:d7:46:38:38:63:91:ad:37:9d:ed:bb:91:
         48:67:70:a8:fe:16:b6:5d:6b:3d:0d:a0:a0:28:d5:06:84:9e:
         88:0f:85:f4:df:3f:63:09:d5:89:2c:c3:5e:ca:70:cb:ab:dc:
         6a:fb:f3:6f:bc:c1:a6:42:ed:46:2d:b7:40:e8:e7:f0:41:21:
         84:c2:f9:fe:87:69:c7:26:fa:d8:d3:ca:c6:c1:e2:8b:81:3b:
         7b:6d:0b:eb:70:92:9c:29:2a:bd:d6:28:a9:f7:da:b0:6d:44:
         89:c1:96:b3:e7:2e:ff:87:a9:01:a3:83:c6:ee:c2:be:93:d3:
         59:34:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:43 2026 by rpki-client